SAMA Cyber Security Framework

Financial institutions regulated by the Saudi Arabian Monetary Authority must demonstrate compliance with the SAMA Cybersecurity Framework, which establishes mandatory security requirements across four domains — Leadership and Governance, Risk Management and Compliance, Operations and Technology, and Third-Party Security. This assessment examines your institution's cybersecurity maturity against SAMA's specific expectations, including online services security, payment card and SWIFT environment controls, and cloud computing governance. It reflects the framework's alignment with international standards while addressing the Kingdom's regulatory context.