What’s Inside?
The Kingdom of Saudi Arabia’s National Cybersecurity Authority “NCA” has issued the Operational Technology Cybersecurity Controls) OTCC -1: 2022.
Operational Technology Cybersecurity Controls (OTCC-1:2022) has been developed to increase the level of cyber protection accorded to OT/ICS environments. As per a mandate from the NCA, these controls must be implemented as an extension to NCA’s Essential Cybersecurity Controls (ECC-1: 2018) issued earlier. The term Industrial Control Systems (ICS) includes all devices, systems, or networks used to operate and/or automate industrial processes.
All organizations to whom OTCC-1:2022 will apply must implement all necessary measures to ensure continuous compliance with these controls as per item 3 of Article 10 of NCA’s mandate and, as per the Royal Decree number 57231, dated 10/11/1439AH.
The document issued by NCA on OTCC-1:2022 contains the required information to comply with this mandate.