Key Points

• Provides guidance for Saudi capital market institutions to align with CMA’s cybersecurity guidelines.

• Outlines a structured compliance roadmap across governance, risk, operations, and third-party oversight.

Who is this for

• Compliance, risk, and IT leaders at CMA-regulated capital market firms in Saudi Arabia.

• Executive teams preparing for CMA cybersecurity inspections.

• Firms seeking to build or improve formal cybersecurity governance frameworks.

What will you get

• A gap assessment aligned to CMA cybersecurity control domains.

• Risk register with prioritised non-compliance issues.

• A phased compliance roadmap for board and regulator engagement.

• Practical guidance across governance, audits, incident response, and vendor risk.