NCA ECC audits and assessments in AuditHD
The minimum cybersecurity controls set by the National Cybersecurity Authority, in four domains and 28 subdomains.
Framework overview
| Framework | NCA Essential Cybersecurity Controls |
|---|---|
| Version | ECC-2:2024 |
| Published by | National Cybersecurity Authority (Saudi Arabia) |
| Applies to | Government organisations and private-sector organisations that own, operate or host critical national infrastructure. |
Structure
- 1 Cybersecurity governance
- 2 Cybersecurity defense
- 3 Cybersecurity resilience
- 4 Third-party and cloud computing cybersecurity
What AuditHD includes
Four domains and 28 subdomains with control identifiers, titles and plain-language descriptions, mapped to SAMA CSF and ISO/IEC 27001.
Ready checklists
- NCA ECC compliance review, generated from the library
Clause numbers and titles identify each requirement; descriptions are our own plain-language summaries. Official wording is not reproduced, and organisations that hold a licence can load it privately.
How teams use it.
Compliance reviews ahead of NCA assessments
Combined SAMA CSF and ECC reviews using the cross-mapping
Remediation tracking for gaps
Other frameworks in the library
SAMA CSF, SAMA ITGF, ISO/IEC 27001, ISO 9001, and more.
See it with your own checklists.
Open the live demo now, or book a walkthrough and we will load one of your frameworks or work programmes.