Gulf regulatory packs
Turn on Saudi NCA ECC and CCC, SAMA CSF, UAE IA Regulation and Qatar NIA, mapped to the same live checks.
Online version, always current: https://cloudvision360.com/docs/cloudvision360/gulf-compliance-packs/
CloudVision360 includes regional regulatory packs for the Gulf, mapped to the same live checks as every other framework.
What is included
- Saudi NCA ECC-2:2024 — Essential Cybersecurity Controls.
- Saudi NCA CCC-2:2024 — Cloud Cybersecurity Controls (cloud tenant controls).
- SAMA Cyber Security Framework — for the Saudi financial sector.
- UAE Information Assurance Regulation (NESA / IAR).
- Qatar National Information Assurance Policy (NIA).
Each pack maps its requirements to the controls already evaluated from your live configuration and identity data, so you do not re-collect evidence per regulator.
Turn a pack on
Open Admin → Settings, find Regional frameworks (Gulf) under Assessment, and enable the packs relevant to your organization. They are enabled per organization, so an MSP can turn on different packs for different customers.
Honest mapping
As with every framework, procedural requirements that software cannot verify are flagged as needing evidence rather than marked as passed, and accepted risk exceptions are counted separately. The mapping shows which of a regulator’s controls are covered by automated checks and which need your own attestation.
Report
Produce executive and technical reports per pack, on demand or on a schedule, for your regulator or board.