National Cybersecurity Authority Seeks Public Feedback on Licensing Framework

Riyadh: The National Cybersecurity Authority (NCA) has invited the general public to submit their feedback on the 'Regulatory Framework for Licensing Cybersecurity Services, Products, and Solutions.' The framework reflects the NCA's mandate to set cybersecurity policies, governance rules, frameworks, standards, and directives; to license individuals and non-governmental entities to operate in the sector; to promote the growth of the Kingdom's cybersecurity industry; and to encourage innovation and investment.

According to Saudi Press Agency, the NCA stated that the regulatory framework is part of its continued efforts to regulate and advance the cybersecurity sector in the Kingdom, safeguarding national security and vital interests while enhancing the quality and reliability of services provided to national entities. It builds upon previous regulatory milestones, including the publication of the list of registered cybersecurity service, solution, and product providers, and the licensing of companies authorized to deliver Managed Security Operations Center (MSOC) services at Tier 1 and Tier 2.

Developed in line with leading international methodologies, standards, and classification practices, the framework provides a comprehensive sector-wide taxonomy covering all cybersecurity services, products, and solutions in the Kingdom. It classifies sector activities into five primary domains: cybersecurity products and solutions, professional cybersecurity services, cybersecurity technical implementation services, managed cybersecurity services, and cybersecurity training and capacity-building services. These domains are further divided into 25 sub-domains encompassing more than 100 cybersecurity products and services.

The framework establishes the minimum licensing requirements for entities seeking to provide cybersecurity services, products, and solutions in the Kingdom. It applies to all entities currently operating in, or intending to enter, the cybersecurity services market across the Kingdom.

The NCA encouraged all stakeholders and interested parties to review the framework and submit their feedback by Thursday, March 26, 2026. Feedback may be submitted through the Public Consultation Platform 'Istitlaa' or by completing the feedback form available on NCA's website and sending it to: [email protected]. The document is also accessible through NCA's official website.

MENU

CATEGORIES