Get in Touch
Knowledge base · Hands-on setup, configuration, troubleshooting
Commands you can copy, configs that work, fixes that ship — Ubuntu, SCADA, ZATCA e-invoicing, NCA ECC, firewalls and cloud. Peer-reviewed and free to read.
Community: Sign in · Join to write guides
Hand-picked guides our engineers swear by
There is no SAMA "Tier 1-4" RTO/RPO grid — the word "tier" appears zero times in the BCM Framework (Circular 38100005850...
SAMA mandates an IT Steering Committee (ITSC), not an "IT Strategy Committee". There are no "39 board-level controls", n...
The NCA's Telework Cybersecurity Controls have 3 domains, 16 subdomains, 21 main controls and 42 subcontrols — not 22. T...
Fresh hands-on guides from the community
Read the BlogA primary-source guide to the NCA's Operational Technology Cybersecurity Controls, read against the actual PDF: 4 main domains, 23 subdomains, 47 main controls...
There is no SAMA "Cloud Rulebook" and no SAMA Tier 1-4 RTO/RPO grid. Read from the SAMA Rulebook itself: 4 domains, 32 subdomains, 6 maturity levels, the real c...
The NCA ECC states exactly one hard number. The Critical Systems Cybersecurity Controls are where the NCA put the rest: pen-test every 6 months, access review e...
CCC-2:2024 deleted the data-residency sub-controls (2-3-P-1-10 and 2-3-P-1-11) and moved localisation to the NDMO. Most guides still quote CCC-1:2020. A primary...
Most PDPL guidance is GDPR with the place names swapped. This one is quoted from Royal Decree M/19 and SDAIA's Implementing Regulation: the five statutory right...
A ZATCA Phase 2 guide where every rule number, endpoint and invoice type code is quoted from a ZATCA document and named. Clearance vs reporting, UBL 2.1, the cr...
A SOC build guide grounded in the NCA's own PDFs: ECC 2-12 (event logs) and 2-13 (incident management), CSCC 2-11-1-4 for around-the-clock monitoring, and the 1...
Most guides to the NCA ECC still quote ECC-1:2018 (5 domains / 29 subdomains / 114 controls). ECC-2:2024 deleted a whole main domain, removed the data-localisat...
A primary-source guide to Aramco's Third Party Cybersecurity Standard, read against the actual PDF: the five supplier classifications, CCC vs CCC+, all 92 contr...
PDPL does not simply say "keep everything in the Kingdom" — it regulates how personal data leaves it. This guide turns the cross-border transfer rules into a fi...
Saudi Arabia's cloud map filled in fast: Oracle, Google Cloud, Alibaba/SCCC and Huawei run live in-Kingdom regions, with AWS's Riyadh region announced for 2026...
The sticker price is the smallest number on a cloud bill. This guide breaks down the three pricing models sold in Saudi Arabia, the hidden lines (egress, IPs, s...
