Saudi Central Bank Cyber Security Framework
SAMA CSF Workspace
A complete workspace for SAMA-regulated financial institutions. Automate maturity assessments, maintain the cyber risk register, and generate board and regulator-ready maturity reports.
01Inside the workspace
Preloaded and ready on day one
Controls, evidence requests, and reporting views come configured, so your team starts on execution instead of setup.
- Full SAMA CSF control library across 4 domains
- 5-level maturity scoring (0–4) with gap-to-target tracking
- Financial-services risk taxonomy and KRIs
- SAMA-aligned policies, procedures, and approval flows
- Third-party cybersecurity domain workflows
- Steering committee and board reporting packs
02FAQ
Questions we get asked
Banks, insurance companies, financing companies, and payment service providers regulated by the Saudi Central Bank. The workspace is pre-configured with the full SAMA CSF control library across all four domains, so regulated institutions start from a compliant baseline instead of building from scratch.
Every control carries a five-level maturity score (0 to 4) tracked against SAMA's mandated minimum of level 3. Gap-to-target dashboards show current posture per domain, so annual self-assessments and independent reviews reflect your live environment.
Yes. Steering committee and board reporting packs are generated from live control and evidence data, formatted for SAMA submission, with every entry timestamped and traceable to a named owner.
The workspace includes dedicated third-party cybersecurity domain workflows covering vendor onboarding, tier-based risk assessment, continuous monitoring, and offboarding, aligned to SAMA's outsourcing expectations.
See the SAMA CSF Workspace in action
Book a session with our team and we will provision a sandbox tenant for your organisation with this workspace enabled.