Requirement
In addition to the subcontrols in ECC control 1-9-3, personnel cybersecurity requirements prior to employment must include at least the following:
Sub-Controls
1-5-1-1
Requirement: Screening or vetting candidates for working on critical systems.
1-5-1-2
Requirement: The technical support and development positions for critical systems, must be filled with experienced Saudi professionals.
References
- ECC – 2:2024 equivalent: 1-9-3