Requirement
In addition to Subcontrols in the ECC controls 1-9-3 and 1-9-4, the following requirements should be covered prior and during the professional relationship of personnel with the CSP as a minimum:
Sub-Controls
1-4-P-1-1
Requirement: Positions of cybersecurity functions in CSP's data centers within the Kingdom must be filled with qualified and suitable Saudi nationals.
1-4-P-1-2
Requirement: Screening or vetting candidates of personnel working inside the Kingdom who have access to Cloud Technology Stack, periodically.
1-4-P-1-3
Requirement: Cybersecurity policies as a prerequisite to access to Cloud Technology Stack, signed and appropriately approved.
References
- ECC – 2:2024 equivalent: 1-9-3
- ECC – 2:2024 equivalent: 1-9-4
