Saudi Arabia: Adopted Regulatory Framework for Licensing Managed Security Operations Center (MSOC) Services

On 10 March 2024, the Saudi National Cybersecurity Authority (NCA) adopted the Regulatory Framework for Licensing Managed Security Operations Center (MSOC) Services. The Framework outlines a phased approach to the regulation of MSOCs by introducing a licence requirement. The Framework also sets out the obligations of MSOC service providers, including adhering to security, technical, and data processing requirements.