Requirement
In addition to the subcontrols in ECC control 4-2-3, cybersecurity requirements related to the use of hosting and cloud computing services must include at least the following:
Sub-Controls
4-2-1-1
Requirement: Hosting of critical systems and any part of their technical components must be inside the organization or within cloud computing services provided by government organizations or Saudi companies that are in compliance with NCA's Cloud Cybersecurity Controls (CCC), taking into account the classification of the hosted data.
References
- ECC – 2:2024 equivalent: 4-2-3
