The CYBRT blog # Expert insights on cybersecurity Briefings, how-to guides and analysis from our teams across the Gulf, on compliance, threats and building security that holds up. Resilience 18 Oct 2026 7 min read ## Ransomware Response Plan for Saudi Organizations: The First 72 Hours A practical ransomware response plan for Saudi organisations: what to do in the first hour, day and 72 hours, including NCA reporting and PDPL notice. ## All articles Governance 30 Sept 2026 4 min read ### What Does a Virtual CISO Do? A Guide for Saudi Organisations What a virtual CISO delivers, who benefits, how it fits NCA and SAMA expectations for an in-house security lead, and what a good first 90 days looks like. Threats 16 Sept 2026 3 min read ### Oh, I use MFA! Passkeys were supposed to end phishing. How device code phishing gets past MFA, and the identity controls that stop it. Threats 26 Aug 2026 3 min read ### DeepFake: Is it really you? Deepfake video calls are now a working fraud method. How the scams work and the verification steps that protect your organisation. AI security 23 Aug 2026 4 min read ### Managing the Risk of Agentic AI: A New Frontier for Enterprise Security Autonomous AI agents take real actions. The governance, access and monitoring controls enterprises need before agentic AI goes live. Governance 20 Jul 2026 3 min read ### Do You Perform Third Party Risk Management? (The EY Breach) What the EY breach of a third-party IT platform teaches about vendor risk, and how to build third-party risk management that works. Cloud & OT 8 Jul 2026 4 min read ### Cloud Security in Saudi Arabia: Shared Responsibility, Data Residency and NCA Controls Cloud security in Saudi Arabia: what you own under shared responsibility, how data residency and NCA cloud controls apply, and controls to start with. Cloud & OT 16 Jun 2026 4 min read ### OT Security in Saudi Arabia: Where to Start with ISA/IEC 62443 and NCA OTCC Where to start with OT security in the Kingdom: asset visibility, segmentation, remote access and monitoring, using ISA/IEC 62443 and NCA OTCC. Governance 27 May 2026 4 min read ### Security Awareness Training That Actually Changes Behaviour Why annual awareness slideshows fail, and how short role-based training, phishing simulations and the right metrics change behaviour. Resilience 6 May 2026 4 min read ### How to Choose a Managed SOC Provider in Saudi Arabia The questions to ask a managed SOC provider about visibility, detection, response, data residency, people and reporting, plus the red flags to watch for. AI security 16 Apr 2026 2 min read ### Leading by Example: Cybersecurity Leader Uploads Sensitive Files to AI A senior cyber official leaked documents to public ChatGPT. Why staff paste sensitive data into AI tools, and how to prevent it. Compliance 10 Mar 2026 4 min read ### SAMA Cyber Security Framework: How to Reach Maturity Level 3 What SAMA's cyber security maturity levels mean, why Level 3 is the expected minimum, and practical steps across all four framework domains to get there. Security testing 17 Feb 2026 4 min read ### Penetration Testing vs Vulnerability Assessment: What's the Difference? How penetration tests and vulnerability assessments differ, when you need each, how often to run them and how to judge the report. Compliance 21 Jan 2026 5 min read ### PDPL Compliance Checklist: The Security Controls Saudi Businesses Need A practical PDPL checklist for Saudi organisations: data mapping, security controls, processors, transfers, breach notice and data subject rights. Threats 9 Dec 2025 5 min read ### SPF, DKIM and DMARC Explained: How to Stop Attackers Spoofing Your Domain How SPF, DKIM and DMARC work together, the records to publish, and a safe rollout plan that moves your domain to DMARC reject without blocking real email. Compliance 12 Nov 2025 5 min read ### A Practical Guide to NCA ECC Compliance for Saudi Organisations What the NCA Essential Cybersecurity Controls require, who has to comply, and a step-by-step plan to find your gaps and reach compliance. ## Ready to protect your business? Book your free security consultation today. --- Canonical page: https://cybrt.sa/blog/ Guide for AI agents: https://cybrt.sa/llms.txt