Saudi Arabia Expands its Efforts to Improve its Cyber-readiness

Saudi Arabia's efforts to achieve cyber-readiness are well underway, following a range of external threats, from the 2012 Aramco attack to the more recent significant attacks.

According to a recently published report from The Potomac Institute for Policy Studies (PIPS), the Kingdom has started to make considerable progress in improving its overall cyber-security and in achieving the ambitious goals set forth in its Vision 2030 strategy. The study which is based on the Cyber Readiness Index (CRI) 2.0 methodology covers Saudi Arabia's current cyber- security posture and its efforts to strengthen the country's security and resilience in the wake of significant cyber- threats to the nation

The CRI 2.0 assessment revealed that Saudi Arabia's newly-established Presidency of State Security is seeking to enhance the country's cyber-readiness by developing a national cyber-security framework and strategy; clarifying cyber-related roles and responsibilities of different ministries and organizations within the country; enhancing information sharing and cooperation; and increasing cyber-security awareness and capability.

Back in 2011, the Ministry of Communications and Information Technology (MCIT) began developing the country's first “National Information Security Strategy (NISS).The draft NISS highlights the importance of national and international information sharing and cooperation, and is committed to expanding information exchanges on emerging threats and vulnerabilities, and appropriate mitigation technologies. The National Cyber Security Center (NCSC) shares threat intelligence with government agencies, critical national infrastructure (CNI) operators, and other stakeholders in the Kingdom, but this capability is still maturing.