Kingdom of Saudi Arabia – Saudi Arabian Monetary Authority

Kingdom of Saudi Arabia – Saudi Arabian Monetary Authority – Cyber Security Framework – May 2017. Covering:

1 Introduction

1.1 Introduction to the Framework

1.2 Definition of Cyber Security

1.3 Scope

1.4 Applicability

1.5 Responsibilities

1.6 Interpretation

1.7 target Audience

1.8 Review, Updates and Maintenance

1.9 reading Guide

2 Framework Structure and Features

2.1 Structure

2.2 Principle-Based

2.3 Self-assessment, Review and Audit

2.4 Cyber Security Maturity Model

2.4.1 Maturity Level 3

2.4.2 Maturity Level 4

2.4.3 Maturity Level 5

3 Control Domains

3.1 Cyber Security Leadership and Governance

3.1.1 Cyber Security Governance

3.1.2 Cyber Security Strategy

3.1.3 Cyber Security Policy

3.1.4 Cyber Security Roles and Responsibilities

3.1.5 Cyber Security in Project Management

3.1.6 Cyber Security Awareness

3.1.7 Cyber Security Training

3.2 Cyber Security Risk Management and Compliance

3.2.1 Cyber Security Risk Management

3.2.2 Regulatory Compliance

3.2.3 Compliance with (inter)national industry standards

3.2.4 Cyber Security Review