Ransomware Response Plan for Saudi Organizations: The First 72 Hours
A practical ransomware response plan for Saudi organisations: what to do in the first hour, day and 72 hours, including NCA reporting and PDPL notice.
Read articleThe CYBRT blog
Expert insights on cybersecurity
Briefings, how-to guides and analysis from our teams across the Gulf, on compliance, threats and building security that holds up.
What Does a Virtual CISO Do? A Guide for Saudi Organisations
What a virtual CISO delivers, who benefits, how it fits NCA and SAMA expectations for an in-house security lead, and what a good first 90 days looks like.
Read articleOh, I use MFA!
Passkeys were supposed to end phishing. How device code phishing gets past MFA, and the identity controls that stop it.
Read articleDeepFake: Is it really you?
Deepfake video calls are now a working fraud method. How the scams work and the verification steps that protect your organisation.
Read articleManaging the Risk of Agentic AI: A New Frontier for Enterprise Security
Autonomous AI agents take real actions. The governance, access and monitoring controls enterprises need before agentic AI goes live.
Read articleDo You Perform Third Party Risk Management? (The EY Breach)
What the EY breach of a third-party IT platform teaches about vendor risk, and how to build third-party risk management that works.
Read articleCloud Security in Saudi Arabia: Shared Responsibility, Data Residency and NCA Controls
Cloud security in Saudi Arabia: what you own under shared responsibility, how data residency and NCA cloud controls apply, and controls to start with.
Read articleOT Security in Saudi Arabia: Where to Start with ISA/IEC 62443 and NCA OTCC
Where to start with OT security in the Kingdom: asset visibility, segmentation, remote access and monitoring, using ISA/IEC 62443 and NCA OTCC.
Read articleSecurity Awareness Training That Actually Changes Behaviour
Why annual awareness slideshows fail, and how short role-based training, phishing simulations and the right metrics change behaviour.
Read articleHow to Choose a Managed SOC Provider in Saudi Arabia
The questions to ask a managed SOC provider about visibility, detection, response, data residency, people and reporting, plus the red flags to watch for.
Read articleLeading by Example: Cybersecurity Leader Uploads Sensitive Files to AI
A senior cyber official leaked documents to public ChatGPT. Why staff paste sensitive data into AI tools, and how to prevent it.
Read articleSAMA Cyber Security Framework: How to Reach Maturity Level 3
What SAMA's cyber security maturity levels mean, why Level 3 is the expected minimum, and practical steps across all four framework domains to get there.
Read articlePenetration Testing vs Vulnerability Assessment: What's the Difference?
How penetration tests and vulnerability assessments differ, when you need each, how often to run them and how to judge the report.
Read articlePDPL Compliance Checklist: The Security Controls Saudi Businesses Need
A practical PDPL checklist for Saudi organisations: data mapping, security controls, processors, transfers, breach notice and data subject rights.
Read articleSPF, DKIM and DMARC Explained: How to Stop Attackers Spoofing Your Domain
How SPF, DKIM and DMARC work together, the records to publish, and a safe rollout plan that moves your domain to DMARC reject without blocking real email.
Read articleA Practical Guide to NCA ECC Compliance for Saudi Organisations
What the NCA Essential Cybersecurity Controls require, who has to comply, and a step-by-step plan to find your gaps and reach compliance.
Read articleReady to protect your business?
Book your free security consultation today.