Skip to main content
EN ع
Talk to sales
Checklist Lead capture

NCA ECC Readiness Checklist 2025

A practical 47-control checklist mapped directly to the NCA Essential Cybersecurity Controls (ECC-1:2018). Use it to assess your current compliance posture and identify gaps before your next audit.

18 pages 25 min read PDF

What's inside

A preview of the full document.

This checklist covers all 5 ECC domains:

  1. Cybersecurity Governance (10 controls)
  2. Cybersecurity Defence (18 controls)
  3. Cybersecurity Resilience (7 controls)
  4. Third-Party & Cloud Cybersecurity (8 controls)
  5. Industrial Control Systems (4 controls)

Each control includes: objective, evidence required, compliance status (C/PC/NC), and NAS recommended remediation action.

Download to get the full Excel workbook with automated scoring dashboard.

Delivered as an engagement

From playbook to posture.

Reading the playbook is the start. The outcome page below shows what it looks like when this is delivered end-to-end as an NAS engagement.

Outcome

Pass the NCA assessment first time

The same 47 controls — delivered as a regulator-ready engagement, not just a checklist.

Read the outcome page

Related

Template

IT Disaster Recovery Planning Template

A structured DR planning template for Saudi enterprises. Includes BIA framework, RTO/RPO worksheets, recovery runbooks, and communication plan templates — everything you need to build a SAMA and NCA-compliant DR programme.

Lead capture Read
Template

Managed IT Services RFP Template

A battle-tested RFP template for Saudi organisations evaluating managed IT services providers. Covers scope definition, SLA requirements, pricing models, security requirements, and evaluation scoring criteria.

Lead capture Read
Guide

ZATCA Phase 2 E-Invoicing Implementation Guide

Step-by-step guide to ZATCA Phase 2 (Integration Phase) e-invoicing compliance for Saudi businesses. Covers technical integration, ERP configuration, testing, and go-live checklist.

Lead capture Read

Talk to NAS

Need to go deeper?

If this resource raised more questions than it answered, talk to the team that wrote it. We do tailored briefings on request.

Contact us Back to resources
Case studies

See it in practice

Read the case studies where this approach was applied — full delivery story, architecture, and measurable outcomes.

Case studies Custom briefing

Request a briefing

Need this material adapted for your stakeholders, board, or audit team? We prepare custom briefings on request.

Email us