Skip to Content

Frameworks & Regulations

Regional cybersecurity frameworks and data protection regulations we help you comply with.

In short: QMet helps you comply with NCA ECC, NCA CCC, SAMA CSF, PDPL, PCI DSS, GDPR, NIST CSF, SOC 2.

NCA ECC
Essential Cybersecurity Controls (Saudi NCA)

Saudi Arabia's National Cybersecurity Authority baseline controls, mandatory for government and many private entities.
NCA CCC
Cloud Cybersecurity Controls (Saudi NCA)

Cloud-specific cybersecurity controls issued by the Saudi NCA for Cloud Service Providers and tenants.
SAMA CSF
Saudi Central Bank Cyber Security Framework

The mandatory cybersecurity framework for banks, insurers and financing companies regulated by SAMA.
PDPL
Personal Data Protection Law (Saudi Arabia)

Saudi Arabia's data protection law governing the collection and processing of personal data.
PCI DSS
Payment Card Industry Data Security Standard

The global standard for any organization that stores, processes or transmits cardholder data.
GDPR
General Data Protection Regulation (EU)

The EU's data protection and privacy regulation, with global reach for any organization handling EU residents' data.
NIST CSF
NIST Cybersecurity Framework

A voluntary, risk-based framework of standards and best practices to manage cybersecurity risk.
SOC 2
System and Organization Controls 2

Independent assurance over security, availability, processing integrity, confidentiality and privacy controls at service organizations.