# NCA OTCC: NCA Operational Technology Cybersecurity Controls

> Saudi cybersecurity controls for industrial control systems and operational technology.

URL: https://securei3.com/standards/nca-otcc/
Category: GCC regulations: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


The NCA Operational Technology Cybersecurity Controls set requirements for organisations operating industrial control systems in critical sectors such as energy, water, manufacturing and transport, covering governance, OT network architecture, asset management, access, monitoring and resilience.

We combine OTCC with IEC 62443 to design practical OT security programmes and prepare for NCA assessments.

## Who it is for

- Energy, water and utilities in Saudi Arabia
- Petrochemical and manufacturing plants
- OT system integrators and vendors

## Benefits

- OT security tailored to plant realities
- Alignment with IEC 62443

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### Can we use IEC 62443 to meet OTCC?

IEC 62443 provides the engineering detail for many OTCC requirements. We map the two so design work serves both.

Related: https://securei3.com/standards/iec-62443/, https://securei3.com/standards/nca-ecc/

Contact: https://securei3.com/contact/: info@securei3.com