Retour 
The National Cybersecurity Authority (NCA) of Saudi Arabia has released its updated Essential Cybersecurity Controls (ECC-2-2024), a framework that mandates organizations to safeguard their digital assets and ensure regulatory compliance.
As Saudi organizations adopt these updated controls, Netskope is here to support your cloud-first security strategies by aligning with the NCA’s cybersecurity controls. Our cloud-native secure access service edge (SASE) platform and zero trust capabilities help organizations secure data, maintain governance, and comply with local regulations.
Here’s a detailed look at how Netskope can help your organization achieve compliance with NCA’s ECC-2-2024:
1-5 Cybersecurity Risk Management
Objective: To ensure cybersecurity risks are systematically managed, protecting organizational assets as per policies, procedures, and laws.
How Netskope Helps:
Netskope’s cloud security platform provides deep visibility into cloud environments, offering organizations the ability to enforce risk management strategies effectively.
Security service edge (SSE) capabilities such as DLP, CASB, and Advanced Threat Protection (ATP) continuously protect sensitive data and detect potential threats in real time across SaaS and IaaS services. Netskope monitors and mitigates risks early, helping organizations comply with NCA’s risk management guidelines while offering robust cloud security.
1-7 Compliance with Cybersecurity Standards, Laws, and Regulations
Objective: To ensure organizations comply with national and international cybersecurity laws and regulations.
How Netskope Helps:
Netskope’s local data centers in Saudi Arabia assist in compliance with stringent data residency and sovereignty requirements, meeting Saudi law for on-prem and cloud data protection.
Netskope’s DLP helps organizations protect PII (Personally Identifiable Information) and adhere to international regulations like GDPR, HIPAA, and PCI. These compliance standards are enforced through advanced data loss prevention and encryption policies that secure sensitive information both in transit and at rest.
2-1 Asset Management
Objective: To maintain a detailed inventory of information and technology assets and protect them according to cybersecurity and operational requirements.
How Netskope Helps:
Netskope enables organizations to discover sensitive data, applications, and other assets across cloud environments. The Netskope Zero Trust Engine allows for comprehensive API scanning and integrates with CSPM and DSPM to help with cloud configurations and data are continuously monitored for security risks. Organizations can apply security policies based on risk scoring for users, devices, locations, applications, and data, ensuring that only authorized access is granted. This detailed approach helps classify and protect critical assets in line with compliance mandates.
2-2 Identity and Access Management
Objective: To ensure secure,