2023-01-31

Data Cybersecurity Controls (DCC-1:2022)

The Saudi Central Bank (SAMA) mandates that all financial institutions fully implement the National Cybersecurity Authority's Data Cybersecurity Controls (DCC-1:2022) by the end of Q3 2023. Financial entities must establish a continuous compliance mechanism, conduct self-assessments using the provided tool, and proactively manage cybersecurity risks within specified timelines. This directive extends SAMA's Information Security Manual by requiring strict adherence to both domestic regulatory compliance and international industry standards.

Saudi Central Bank logo

Saudi Arabia

Saudi Central Bank

Click to view full text