# NCA TCC: NCA Telework Cybersecurity Controls

> Saudi cybersecurity controls for remote and hybrid working, covering devices, connections, access and monitoring.

URL: https://securei3.com/standards/nca-tcc/
Category: GCC regulations: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


The NCA Telework Cybersecurity Controls (TCC) set minimum requirements for organisations that allow staff to work remotely: secure devices and connections, strong authentication, protection of data outside the office, monitoring and awareness.

We assess your remote working set-up against the TCC, help design secure access and policies, and connect the work to your ECC and ISO 27001 programmes.

## Who it is for

- Government entities and organisations subject to NCA ECC
- Organisations with remote or hybrid staff handling sensitive data
- Providers offering remote services to Saudi government entities

## Benefits

- Remote work that does not weaken your security baseline
- Clear rules for devices, access and data handling at home
- Evidence ready for NCA and customer reviews

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### Who must apply the TCC?

Organisations subject to the NCA cybersecurity controls that allow telework, along with the providers supporting their remote services. Other organisations use the controls as good practice.

Related: https://securei3.com/standards/nca-ecc/, https://securei3.com/standards/iso-27001/, https://securei3.com/standards/nca-dcc/

Contact: https://securei3.com/contact/: info@securei3.com