NCA CSCC Compliance Toolkit v3.0 (Bilingual EN/AR)

Everything a Saudi entity needs to assess, implement, evidence and sustain compliance with the NCA Critical Systems Cybersecurity Controls (CSCC-1:2019): all 105 control records (85 scored criteria) traced from requirement to policy, verification and evidence. Bilingual English + Arabic, fully editable.

1. 01

   Executive Dashboard

   Board-ready one-page dashboards in the assessment and risk workbooks: overall implementation, assessed / implemented / partial / not implemented, maturity, compliance by domain and subdomain, status charts and inherent vs residual risk heat maps.

2. 02

   Assessment Workbook (Excel, blank + filled SAMPLE)

   Every CSCC control with applicability, status, maturity score, evidence references, owner, reviewer and review date, with input validation. Live dashboard, bilingual control library with the official wording attributed to its source, and framework mapping to ECC-2:2024, ISO/IEC 27001:2022 and NIST CSF 2.0.

3. 03

   Risk & Remediation Register (Excel, blank + filled SAMPLE)

   5x5 likelihood x impact method, CSCC-linked risk register with inherent and residual scoring, remediation plan, 42 KPI/KRI definitions with targets and RAG status, RACI matrix and annual compliance calendar.

4. 04

   21 Policies + 5 Forms (Word, separate English and Arabic files)

   Critical-system strategy, risk, projects and change, review and audit, personnel, assets, identity and privileged access, facilities, network, mobile devices, data protection, cryptography, backup and recovery, vulnerability management, penetration testing, event logging and monitoring, web and application protection, resilience, third-party and cloud hosting. Forms: critical-system identification, release and change security gate, privileged access review, vulnerability and penetration-test record, third-party and hosting approval.

5. 05

   Implementation Guides (PDF + DOCX, 32 pages EN / 31 pages AR)

   Applicability, scoping, twelve-month roadmap and implementation by official subdomain.

6. 06

   Evidence books

   Domain evidence books per language with a positive example, an insufficient example and verification for every control, plus an evidence-artefacts document per control in English and Arabic.

• 245 dedicated evidence samples: Word documents, Excel registers and image screenshots/diagrams
• Evidence Coverage Matrix (Excel): maps all 586 expected evidence items to a sample

• One ZIP organised in numbered folders, ready to share with your team
• Blank workbooks for your own assessment plus filled SAMPLE versions to learn from
• Editable Word, Excel and PDF files in English and Arabic

Cybersecurity GRC, IT operations, internal audit and assurance teams at Saudi government entities, critical-infrastructure operators and their suppliers that own formally identified critical systems.

Your copy is individually licensed and watermarked with your name and order number, then emailed to you within minutes of purchase. One licence covers one legal entity. Consultants: contact support@cyberhacking.io for a multi-entity licence.

All sales are final. Faulty files are replaced when reported within 14 days to support@cyberhacking.io.

Official NCA wording is attributed; policies, defaults and examples are implementation aids. This independent resource does not claim NCA approval, certification or endorsement.