SAMA Cyber Security Framework
From SAMA CSF requirements to implemented, evidenced controls.
SAMA CSF implementationInsights
Insights for Saudi regulated teams.
Practical articles on SAMA, NCA, the PDPL, fraud and AML. Each one connects a regulatory requirement to the systems and evidence that meet it.
SAMA CSF
4 min read
SAMA CSF for fintechs: what to build in your first year
A newly licensed fintech cannot implement 32 subdomains at once. This is the order we would build them in, and the evidence that proves each one works.
Fraud
4 min read
Saudi financial fraud law and SAMA's Counter-Fraud Framework: what institutions must do
The law punishes fraud after it happens. SAMA's Counter-Fraud Framework requires institutions to prevent and detect it first. Here is how the two fit together, and what a working programme looks like.
PDPL
4 min read
The PDPL Implementing Regulations: the obligations companies miss
The PDPL sets the principles. The Implementing Regulations set the deadlines, triggers and records that SDAIA checks. This guide covers the parts companies most often get wrong.
NCA ECC
3 min read
NCA ECC-2:2024: what changed from ECC-1, and what to update
The second edition of the Essential Cybersecurity Controls is shorter, not easier. Here is what moved, what was removed, and how to update an existing ECC programme without starting over.
AML
4 min read
Saudi AML law for fintechs: building the programme SAMA expects
A fintech that moves, holds or lends money in the Kingdom is a financial institution under the AML Law. This is how to turn the law's obligations into a programme that works at fintech speed.
SAMA CSF and NCA ECC
3 min read
SAMA CSF vs NCA ECC: which applies to you, and how to run both
Many Saudi financial institutions answer to both frameworks. The fastest route is one control library with two mappings, not two parallel programmes.
PDPL
4 min read
Transferring personal data outside Saudi Arabia under the PDPL
Cloud, SaaS and group reporting all move personal data abroad. The Transfer Regulation allows it under clear conditions. This guide turns them into a decision you can document.
SAMA CSF
4 min read
The SAMA CSF self-assessment: how to score maturity level 3 and prove it
SAMA reviews and audits your self-assessment. A score the evidence does not support costs more than an honest gap. Here is how to score each subdomain properly.
Implementation guides
How Limaz implements each framework, from gap assessment to evidence.
Saudi PDPL
The data inventory, rights workflows and controls behind PDPL compliance.
PDPL complianceNCA ECC & CCC
Essential and cloud controls with ownership and evidence.
NCA ECC implementationFraud and AML systems
Fraud detection and AML screening built into one decision flow.
Fraud and AML systemsDiscuss your requirements with Limaz
Tell us which system, control, or requirement you are working on. We’ll come back with a clear next step.