Saudi Arabia — Cyber Threat Profile

Saudi Arabia is one of the most advanced cyber powers in the Middle East. The National Cybersecurity Authority (NCA) leads a mature regulatory ecosystem, enforcing the updated Essential Cybersecurity Controls framework (ECC-2:2024) with fines up to SAR 25 million for non-compliance. The domestic cybersecurity market reached SAR 15.2 billion in 2024, growing at 14% annually. Saudi Aramco remains a high-value target following the landmark 2012 Shamoon attack. Iranian state-sponsored actors represent the primary persistent threat to energy and government infrastructure. Vision 2030 mega-projects including NEOM introduce rapidly expanding OT and IoT attack surfaces.

National CERT/CSIRT: National Cybersecurity Authority (NCA)
Data protection authority: The Saudi Authority for Data and Artificial Intelligence (SDAIA) (source: CNIL)
Secure Internet servers per 1M people (2024): 482.8 (source: World Bank)
Internet users (2024): 100.0% of population (source: World Bank)

Read the full analysis on IntelFusions