NCA Cybersecurity Consulting in Saudi Arabia
Organisations operating in Saudi Arabia are increasingly expected to demonstrate alignment with the National Cybersecurity Authority's Essential Cybersecurity Controls. IITWares advises on how those expectations apply to the web platforms and applications we build and maintain, and helps prepare the evidence.
IITWares has worked from one studio in Jeddah since 2010 and has delivered more than 400 digital projects for clients in Riyadh, Jeddah, Dammam and across the Gulf. You speak directly to the people doing the work, and the scope and price are written down before anything starts.
Start a projectWhat the work covers
Scoping against the controls
Which controls apply to your web estate, and which are the responsibility of other parts of the organisation.
Gap assessment
Current state against applicable controls, documented with evidence.
Remediation planning
A prioritised plan covering what to fix, in what order, and what it requires.
Secure build practices
Applying the relevant requirements to how the platform is built, deployed and maintained.
Documentation
Policies and evidence prepared in a form suitable for review.
How we deliver it
01 — Scope
Establish which systems and controls are in scope.
02 — Assess
Review configuration, access, logging, backup and deployment practice.
03 — Report
Documented gaps with severity and remediation effort.
04 — Remediate
Implement, or support your team in implementing, the agreed plan.
05 — Re-verify
Confirm closure with evidence.
Works well alongside
Common questions
Is this a certification?+
No. We provide consulting and remediation support for the web platforms within scope. Formal certification and regulatory assessment are matters for the relevant authority and licensed assessors, and we will say clearly where our scope ends.
Does this cover our whole organisation?+
Only the parts we are engaged on. Many of the controls concern organisational policy, HR and physical security, which sit outside what a web partner can assess.
