Essential Cybersecurity Controls (ECC-1:2018)

Regardless to the mandatory of implementing essential cybersecurity  controls (ECC-1-2018) for some entities, they provide many benefits to the other organizations, and we mention some of them:

1. Assist in designing the cyber security strategy and the organization.
2. Ensure compliance from the tip manager of implementing and managing cybersecurity programs.
3. Determining and documenting the organizational structure, roles, and responsibilities of cybersecurity within the organization.
4. Editing, applying and reviewing cybersecurity policies and procedures.
5. Achieve the national legislative and organizational requirements that related to cybersecurity.
6. Processing cybersecurity risks that related to human resources.
7. Protecting the organization’s information and technology assets from cybersecurity external and Internet the risks and threats.
8. Discover the technical vulnerabilities in the right time, and process them effectively.
9. Processing cybersecurity risks and the implementation of cybersecurity requirements for cloud computing and hosting appropriately and effectively.

These controls are prepared to fit the needs of cybersecurity in all organizations and sectors regardless to the business type and size. But these controls are specially implemented in the national organizations on the Kingdom of Saudi Arabia, and they include:

1. All ministries, authorities, and the national companies, industries, and establishments and their affiliates.
2. Private sector companies that provide their services to the national authorities.
3. Companies and organizations that operate and host the critical national infrastructure (CNI).
4. Other organizations can benefit of these controls, even if compliance is not necessary.

Notice: All organizations within the scope of work of essential cybersecurity controls (ECC-1-2018) must implement what’s achieve permanent and continuous compliance with these controls.

And the National Cybersecurity Authority (NCA) evaluates the range of compliance of the national authorities of these controls.

our special services design  according to the Essential Cybersecurity Controls to help you to assure your institution while achieving compliance to the national legislation at the same time, some of our services are:

1. Make Gap analysis and maturity assessment.
2. Implementing the appropriate essential controls to your institution.
3. Design and develop a cybersecurity strategy
4. Designing And developing cybersecurity policies and the procedures.
5. Providing training programs, transferring knowledge, and raising the awareness of the human factor. 
6. Document review and internal audit.

• Would you ask  Renad AlMajed services, you are allowed do benefit from more than 60 experts and consultants to improve and develop your business.
• The company is characterized by flexibility, the accuracy of implementation and showing results quickly, Because of the company awareness to the deep dimensions of the pillars and indicators that mentioned in these controls.
• The company has an expert in implementing a vulnerability assessment.
• Long experience in implementing a penetration test.
• The company has an operations center works 24/ 7.
• The company’s ability to cover all cybersecurity fields, where the company has a previous business in digital transformation, governance, business continuity, ISO standards and Backup, data recovery, and network security.