SAMA CSF audits and assessments in AuditHD
Sets out the cyber security controls SAMA expects, in four domains and 32 subdomains, and asks each organisation to assess its maturity on a scale of 0 to 5, with level 3 as the minimum expectation.
Framework overview
| Framework | SAMA Cyber Security Framework |
|---|---|
| Version | 1.0 (May 2017) |
| Published by | Saudi Central Bank (SAMA) |
| Applies to | Banks, insurers, finance companies and other organisations regulated by SAMA. |
Structure
- 3.1 Cyber security leadership and governance
- 3.2 Cyber security risk management and compliance
- 3.3 Cyber security operations and technology
- 3.4 Third-party cyber security
What AuditHD includes
4 domains and 32 subdomains with clause numbers, titles and plain-language descriptions written by our team. Mapped to ISO/IEC 27001, NCA ECC and NIST CSF.
Ready checklists
- SAMA CSF maturity self-assessment (0 to 5 per subdomain)
- Third-party and cloud outsourcing review
- Requirement references on change-request QC items
Clause numbers and titles identify each requirement; descriptions are our own plain-language summaries. Official wording is not reproduced, and organisations that hold a licence can load it privately.
How teams use it.
Annual maturity self-assessment with evidence per subdomain
Internal audit of cyber controls against the framework
Tracking remediation of gaps below level 3 to closure
Other frameworks in the library
SAMA ITGF, NCA ECC, ISO/IEC 27001, ISO 9001, and more.
See it with your own checklists.
Open the live demo now, or book a walkthrough and we will load one of your frameworks or work programmes.