Saudi NCA ECC
NCA ECC-2:2024, mapped so you don't do the work twice
A control mapping workbook for organisations in scope in Saudi Arabia.
- Who is in scope, including what NCNICC-1:2025 changed for private-sector organisations
- ECC controls mapped across to ISO 27001:2022 Annex A
- An evidence-owner and status column, so it doubles as a tracker
Written by the muVerity practitioners who do this work. It sets out what the instruments require and what we have seen hold up in practice — it is not legal advice, and it does not make an organisation compliant.
Who it is for
Teams doing this without a dedicated compliance function
Most of the organisations we work with have a deadline, a small team, and no one whose only job is this. The document is written for that situation: specific enough to act on, short enough to finish.
If you would rather talk
Book time with a practitioner
A working session on scope, gaps and sequencing — with the person who would do the work, not a sales call.
Knowledge Center