NCA OTCC — OT/ICS Cybersecurity Controls Readiness — Saudi Arabia

The National Cybersecurity Authority's Operational Technology Cybersecurity Controls (OTCC-1:2022) set the minimum cybersecurity requirements to protect Industrial Control Systems (ICS) and operational technology across the Kingdom — the systems that run plants, utilities, pipelines and facilities. The framework spans 4 main domains, 23 subdomains and over 100 controls, and it applies to organizations operating critical OT in sectors such as oil & gas, power, water and manufacturing. Skyline brings IT and industrial-systems engineering together to help operators in the Eastern Province, Jubail, Yanbu, Riyadh and beyond become OTCC-ready.

OT security is not IT security copied onto a plant floor — uptime, safety and legacy equipment change the rules. Our engineers begin with a passive OT asset inventory and network visibility, map your environment against the Purdue model, and run a gap assessment against OTCC. We then design and deploy practical controls: IT/OT segmentation and industrial DMZs, OT-aware firewalls and intrusion detection, hardened secure remote access, controlled patch and change management, OT-specific incident response, and resilient backup — coordinated with your OEMs and aligned, where useful, to IEC 62443.

• Passive OT asset discovery, inventory and network visibility
• OTCC gap assessment and prioritized remediation roadmap
• IT/OT segmentation, industrial DMZ and secure remote access
• OT intrusion detection, monitoring and incident response
• Patch, change and backup practices suited to live plants

Skyline is a vendor-neutral Saudi integrator that respects the realities of running production OT. We do not claim to be an NCA-accredited auditor or to certify you — we deliver the assessment, engineering and managed support that make your OT environment defensible and OTCC-ready. Work is planned around maintenance windows to protect availability and safety.