أهلاً بك! اكتب سؤالك أو اختر اقتراحاً من الأسفل.
دورة الضوابط الأساسية للأمن السيبراني (NCA ECC)
مرحبًا بك في هذه الدورة المتكاملة المقدمة من سايفتريكس ليرننج، والتي تهدف إلى تمكينك من فهم وتطبيق الضوابط الأساسية للأمن السيبراني الصادرة عن الهيئة الوطنية للأمن السيبراني في المملكة العربية السعودية.
تم إعداد هذه الدورة باللغة العربية لتكون مرجعًا عمليًا يساعد الأفراد والجهات على رفع مستوى الحماية الرقمية، وتحقيق الامتثال لمتطلبات الهيئة، وبناء بيئة آمنة تدعم أهداف التحول الرقمي ورؤية المملكة 2030.
📌 مميزات الدورة
شرح تفصيلي لجميع الضوابط الأساسية وفق منهجية واضحة وسهلة الفهم.
أمثلة عملية ودراسات حالة مستوحاة من واقع المؤسسات السعودية.
محتوى تدريبي يساعد على ربط النظرية بالتطبيق الفعلي في بيئات العمل.
دعم شامل للمتدربين بما يمكنهم من بناء قدرات مهنية قوية في الأمن السيبراني.
🎯 هدف الدورة
تمكين المتدربين من إتقان متطلبات ومعايير الهيئة الوطنية للأمن السيبراني، وتطبيقها داخل المؤسسات بما يعزز الامتثال، يقلل المخاطر، ويحقق أعلى مستويات الحماية للأنظمة والمعلومات.
تعرف علي مطور المحتوي التدريبي
محتويات الدورة التدريبية
Introduction & Strategic Foundations
Available in
days
days
after you enroll
- Introduction to NCA ECC and Core Components (23:17)
- Cybersecurity Strategy Development Control 1-1-1 (19:13)
- Cybersecurity Strategy Documentation and Approval Control 1-1-1 (19:34)
- Cybersecurity Strategy Alignment with National Frameworks (19:32)
- Implementing the Cybersecurity Roadmap Control 1-1-2 (21:16)
- Managing and Monitoring Cybersecurity Roadmap Execution Control 1-1-2 (23:25)
- Periodic Review of Cybersecurity Strategy Triggers Control 1-1-3 (19:04)
- Cybersecurity Strategy Update Processes and Approval Control 1-1-3 (19:59)
- Continuous Improvement and Sustained Compliance 1-1-3 (18:07)
Governance & Organizational Structure
Available in
days
days
after you enroll
- Establishing an Independent Cybersecurity Function Control 1-2-1 (18:50)
- Cybersecurity Organizational Structure and Reporting Lines Control 1-2-1 (19:59)
- Defining Mandate, Roles, and Responsibilities for roles - 1-2-2 & 1-4-1 (20:20)
- Cybersecurity Staffing and Qualifications Control 1-2-2 & 1-4-2 (20:35)
- Cybersecurity Critical roles and filling strategy that align with NCA 1-1-2 (21:49)
- Leveraging the Saudi Cybersecurity Workforce Framework SCyWF 1-2-2 (18:05)
Policies, Standards & Compliance
Available in
days
days
after you enroll
- Cybersecurity Sterring Committee 1-1-3 (19:26)
- Cybersecurity Steering Committee Roles and Governance 1-2-3 (20:28)
- Cybersecurity Steering Committee Reporting and Oversight 1-2-3 (18:32)
- Developing Cybersecurity Policies and Documentation Control 1-3-1/3 (18:06)
- 20_-_Implementing_and_Approving_Cybersecurity_Policies_ar (19:13)
- Developing Technical Security Standards Control 1-3-2 & 1-3-3 (23:44)
- Periodic Review of Policies and Standards 1-3-4 (17:21)
- Handling Regulatory Changes and Documenting Policy Updates Control 1-3 (20:19)
Risk Management
Available in
days
days
after you enroll
- Core Cybersecurity Risk Management Methodology Control 1-5-1 (16:14)
- Cybersecurity Risk Response Planning and Risk Register Maintenance Control 1-5-2 (19:57)
- Practical Risk Mitigation and Continuous Monitoring Control 1-5-3 & 1-5-4 (15:32)
- Risk Assessment - Control 2-5-1 (19:59)
- Cybersecurity Risk Assessments for New Technologies 1-5-3-2/4 (15:51)
- Managing Third-Party Cybersecurity Risks Control 1-5-3 (17:03)
- Continuous Monitoring of Third-Party Cybersecurity and Risk Review 1-5-3-3/4 (17:11)
Secure Systems & Project Lifecycle
Available in
days
days
after you enroll
- Secure Lifecycle Management in Technical Projects Control 1-6-1 (19:10)
- Cybersecurity Requirements for System Acquisition and Development Control 1-6-2 (20:54)
- Implementing Secure Coding Standards Control 1-6-3-1 (19:11)
- Using Trusted Development Tools and Security Testing Control 1-6-3 (21:26)
- Secure Configurations, Hardening, and Patching for Applications Control 1-6-3 (19:06)
- Reviewing Cybersecurity in Project Management Practices 1-6-4 (18:06)
- Documentation and Approval for Project Cybersecurity Compliance Control 1-6-4 (17:01)
Compliance with National & International Cybersecurity Regulations
Available in
days
days
after you enroll
Internal Reviews, External Audits, and Remediation Oversight
Available in
days
days
after you enroll
Cybersecurity in HR Processes
Available in
days
days
after you enroll
- Cybersecurity Requirements Across Employee Lifecycle Control 1-9-1/1-9-2 (19:58)
- Non-Disclosure Clauses and Contractual Obligations in HR Control 1-9-3 (19:05)
- Vetting for Critical and Privileged Cybersecurity Positions 1-9-3-1/2 (20:50)
- Implementing Cybersecurity Awareness from Onboarding 1-9-4-1/2 (17:40)
- Enforcement and Compliance with HR Cybersecurity Policies Control 1-9-3 (16:22)
- Managing Employees Access Rights - 1-9-6 (18:36)
Cybersecurity Awareness and Training Framework
Available in
days
days
after you enroll
- Developing a Comprehensive Cybersecurity Awareness Framework Control 1-10-1 (19:01)
- Implementing Multi-Channel Cybersecurity Awareness Campaigns Control 1-10-1 (21:31)
- 52_-_Essential_Awareness_Content_for_Common_Cyber_Threats_ar (19:38)
- Specialized Cybersecurity Training for Technical Staff Control 1-10-4 (17:39)
- Operational Security Training and Professional Development Control 1-10-4 (20:47)
- Cybersecurity Training for Executive and Supervisory Roles 1-10-4-3 (18:15)
- Securing Funding and Resources for Executive Cybersecurity Initiatives 1-10-4-3 (19:22)
- Reviewing Cybersecurity Training Program Effectiveness 1-10-5 (19:41)
- Adjusting and Documenting Awareness and Training Improvements 1-10-5 (17:52)
Asset Management
Available in
days
days
after you enroll
- Effective Cybersecurity Asset Management Defining Requirements Control 2-1-1 (18:44)
- Information and Technology Asset Lifecycle Management Control 2-1-2 (20:27)
- Classifying, Labeling, and Handling Assets Control 2-1-3 (18:57)
- Developing and Enforcing an Acceptable Use Policy Control 2-1-4 (20:02)
- Implementing and Monitoring Asset Management Requirements 2-1-5 (17:39)
- Periodic Review and Updates of Asset Management Policies Control 2-1-6 (19:10)
Identity & Access Management (IAM)
Available in
days
days
after you enroll
- Developing IAM Cybersecurity Policies and Controls Control 2-2-1 (17:20)
- User Authentication and Multifactor Authentication Control 2-2-2 (19:42)
- Authorization Principles: Least Privilege and Segregation of Duties 2-2-3 (21:35)
- Unique User IDs and Privileged Access Management PAM Control 2-2-4 (17:11)
- Regular Identity and Access Reviews and Audits Control 2-2-4 (17:49)
Malware Protection
Available in
days
days
after you enroll
Email Security
Available in
days
days
after you enroll
- Defining and Implementing Email Security Requirements Control 2-4-1 (18:03)
- Advanced Email Protection Against Modern Threats Control 2-4-2 (15:20)
- Multifactor Authentication for Email Access Control 2-4-3-1 (19:22)
- Secure Email Archiving, Backup, and Data Recovery Control 2-4-3-2 (24:14)
- Implementing Email Authentication Standards SPF DKIM DMARC Control 2-4 (20:23)
- Regular Review and Updates of Email Security Policies Control 2-4-4 (17:35)
Network Security
Available in
days
days
after you enroll
- Network Security Policy Development Control 2-5-1 (20:53)
- Logical and Physical Network Segmentation and Firewall Usage 2-5-2 / 2-5-3-1 (18:01)
- Network Segregation for Development Environments - 2-5-3-2 (18:57)
- Secure Internet Browse and Web Access Controls Control 2-5-3-3 (21:44)
- Wireless Network Security and Encryption Control 2-5-3-4 (23:35)
- Network Services, Ports, and Protocols Management Control 2-5-3-5 (31:42)
- Intrusion Detection/Prevention Systems IDS/IPS Implementation Control 2-5-3-6 (19:45)
- DNS Security and Secure Internet Channels Control 2-5-3-7 (20:46)
- Protection from Advanced Persistent Threats APT on Networks Control 2-5-3-8 (21:13)
- Regular Network Security Compliance Reviews and Audits Control 2-5-4 (20:42)
Mobile Device Security
Available in
days
days
after you enroll
- Mobile Devices Security Policy and BYOD Control 2-6-1 (15:53)
- Data Segregation, Encryption, and Access Management for Mobile Devices 2-6-2 (21:17)
- Secure Configurations and Mobile Device Management MDM Control 2-6-3 (24:00)
- Secure Data Deletion and Remote Wipe Strategies for Mobile Devices 2-6-4 (20:33)
- Periodic Security Reviews and Compliance for Mobile Devices Control 2-6-5 (18:52)
Data Protection
Available in
days
days
after you enroll
- Data Protection Policy and National Standards Control 2-7-1 (20:33)
- Data Classification, Labeling, and Ownership Control 2-7-2 (20:59)
- Implementing Data Privacy Measures Control 2-7-3 (19:29)
- Technical Controls for Data Protection Control 2-7-4 (23:26)
- Secure Data Disposal Control 2-7-5 (23:15)
- Periodic Reviews of Data Protection Measures (21:23)
Cryptographic Standards, Key Management, Encryption Reviews
Available in
days
days
after you enroll
Backup Policies, Secure Backup Solutions, Recovery Testing
Available in
days
days
after you enroll
Vulnerability Assessment, Prioritization, Remediation
Available in
days
days
after you enroll
- Understanding Vulnerability Assessment Methodologies 2-10-1 (22:37)
- Classification and Prioritization of Vulnerabilities 2-10-2 (21:22)
- Developing Remediation Plans and Patch Management Integration Control 2-10-3 (17:31)
- Responding to Cybersecurity Vulnerability Notifications 2-10-4 (18:54)
- Compliance Assessment and Documentation of Vulnerability Management (21:18)
Penetration Testing Scope, Execution, and Compliance
Available in
days
days
after you enroll
Event Logging, SIEM, Secure Log Retention, Monitoring Effectiveness
Available in
days
days
after you enroll
- Defining Event Logging and Monitoring Strategies Control 2-12-1 (21:39)
- Collection and Centralization of Cybersecurity Logs (18:57)
- Utilizing SIEM for Event Correlation and Monitoring Control 2-12-3 (22:52)
- Secure Log Retention and Storage Management Control 2-12-4 (18:54)
- Reviewing and Validating Log Monitoring Effectiveness Control 2-12-5 (23:26)
Incident Response Plans, Threat Intelligence, NCA Reporting
Available in
days
days
after you enroll
Cybersecurity Resilience, BCM Integration, BIA
Available in
days
days
after you enroll
- Integrating Cybersecurity Resilience into BCM Policies Control 3-1-1 (18:34)
- Cybersecurity Incident Response and Disaster Recovery Plans 3-1-2 (20:32)
- Business Impact Analysis BIA for Cybersecurity Resilience Control 3-1-3 (22:05)
- Reviewing, Testing, and Refining Cybersecurity Resilience Procedures 3-1-4 (19:04)
Physical Security Policies, Access Control, Disposal
Available in
days
days
after you enroll
WAF, Secure Design, MFA, Vulnerability Testing
Available in
days
days
after you enroll
- Implementing and Managing Web Application Firewalls WAF Control 2-15-1 (19:11)
- Secure Multi-Tier Web Application Design and Protocols Control 2-15-2 (17:47)
- Integrating Multifactor Authentication MFA for Web Applications Control 2-15-3 (19:05)
- Vulnerability Assessments and Backups for Web Applications Control 2-15-4 (19:39)
- Periodic Review and Updates of Web Application Security Control 2-15-5 (16:58)
Third-Party Risk, Contracts, Cloud Security Standards
Available in
days
days
after you enroll
- Integrating Cybersecurity Requirements into Third-Party Contracts Control 4-1-1 (20:54)
- Risk Assessment for Third-Party Engagements Control 4-1-2 (18:11)
- Third-Party Incident Communication and Data Handling Control 4-1-3 & 4-1-4 (17:37)
- Hosting of Third-Party Cybersecurity Operations Centers in Saudi Arabia 4-1-5 (18:40)
Cloud Security as per NCA Requirements
Available in
days
days
after you enroll
- Cloud Computing Cybersecurity Standards in Contracts Control 4-2-1 (19:08)
- Data Hosting within Saudi Arabia for Cloud Environments Control 4-2-2 (18:15)
- Environment Separation in Cloud Computing Control 4-2-3 (18:30)
- Cloud Data Retrieval and Non-Recoverable Deletion Protocols Control 4-2-4 (17:52)
- Regular Review and Updates of Cloud Cybersecurity Policies Control 4-2-5 (20:33)
ICS/OT Policies, Segmentation, Monitoring, Hardening
Available in
days
days
after you enroll
- ICS/OT Cybersecurity Policies and Incident Management Control 5-1-1 (21:40)
- Physical and Logical Network Segmentation for ICS/OT Control 5-1-3 (18:40)
- Continuous Monitoring for ICS/OT Environments Control 5-1-3 (19:26)
- Vulnerability Management, Patching, and Hardening for ICS 5-1-3 (16:08)
- Restricting Mobile Devices and External Media in ICS/OT Control 5-1-3 (17:45)
- Periodic Reviews and Updates of ICS/OT Cybersecurity Measures Control 5-1-3 (21:10)
