NCA NCNICC Compliance Toolkit v3.0 (Bilingual EN/AR)

Everything a Saudi private-sector entity needs to assess, implement, evidence and sustain compliance with the NCA Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC-1:2025): all 112 control records (98 scored criteria) traced from requirement to policy, verification and evidence, with Category A / Category B applicability. Bilingual English + Arabic, fully editable.

1. 01

   Executive Dashboard

   Board-ready one-page dashboards in the assessment and risk workbooks: overall implementation, assessed / implemented / partial / not implemented, maturity, compliance by domain and subdomain, status charts and inherent vs residual risk heat maps.

2. 02

   Assessment Workbook (Excel, blank + filled SAMPLE)

   Every NCNICC control with applicability, status, maturity score, evidence references, owner, reviewer and review date, with input validation. Live dashboard, bilingual control library with the official wording attributed to its source, and framework mapping to ECC-2:2024, ISO/IEC 27001:2022 and NIST CSF 2.0.

3. 03

   Risk & Remediation Register (Excel, blank + filled SAMPLE)

   5x5 likelihood x impact method, NCNICC-linked risk register with inherent and residual scoring, remediation plan, 44 KPI/KRI definitions with targets and RAG status, RACI matrix and annual compliance calendar.

4. 04

   28 Policies & Standards + 7 Forms (Word, separate English and Arabic files)

   Governance, risk, compliance, HR, awareness, assets, identity and access, systems and networks, email, mobile devices, data protection, cryptography, backup, vulnerabilities, logging and monitoring, incident management, resilience, third parties and cloud, with Category A (mandatory) / Category B applicability shown for every control.

5. 05

   Implementation Guides (PDF + DOCX, 51 pages EN / 47 pages AR)

   Applicability, scoping, twelve-month roadmap and implementation by official subdomain.

6. 06

   Evidence books

   Domain evidence books per language with a positive example, an insufficient example and verification for every control, plus an evidence-artefacts document per control in English and Arabic.

• 70 dedicated evidence samples: Word documents, Excel registers and image screenshots/diagrams
• Evidence Coverage Matrix (Excel): maps all 448 expected evidence items to a sample

• One ZIP organised in numbered folders, ready to share with your team
• Blank workbooks for your own assessment plus filled SAMPLE versions to learn from
• Editable Word, Excel and PDF files in English and Arabic

Private-sector companies in Saudi Arabia that are not Critical National Infrastructure (Category A and Category B entities), their CISOs, IT managers, GRC teams, auditors and consultants.

Your copy is individually licensed and watermarked with your name and order number, then emailed to you within minutes of purchase. One licence covers one legal entity. Consultants: contact support@cyberhacking.io for a multi-entity licence.

All sales are final. Faulty files are replaced when reported within 14 days to support@cyberhacking.io.

Official NCA wording is attributed; policies, defaults and examples are implementation aids. This independent resource does not claim NCA approval, certification or endorsement.