Insights
Cyber threat intelligence, product updates, and industry insights from the Gatekeeper team
A comprehensive guide to Saudi Arabia's Personal Data Protection Law (PDPL): ten key obligations, data subject rights, enforcement actions, and a practical compliance checklist
A practical guide to understanding the NCA Essential Cybersecurity Controls (ECC-2:2024), their four control domains, compliance scope, and a step-by-step roadmap for Saudi organizations
A comprehensive guide to cloud security compliance in Saudi Arabia, covering NCA cloud controls, CSP requirements, data residency mandates, and best practices for secure cloud adoption.
A comprehensive guide to API security in Saudi financial services, covering SAMA regulatory requirements, OWASP API Top 10 threats, and best practices for securing financial APIs.
A comprehensive guide to data classification by sensitivity levels under Saudi Arabia's Personal Data Protection Law (PDPL), covering handling requirements for each level and practical implementation steps for organizations.
A detailed guide to penetration testing requirements under NCA cybersecurity standards, covering scope, approved methodologies, reporting requirements, and best practices for Saudi organizations.
A comprehensive guide to Identity and Access Management (IAM) best practices for Saudi organizations, covering MFA, Privileged Access Management, Single Sign-On, and NCA cybersecurity requirements.
A comprehensive analysis of data residency requirements under Saudi Arabia's Personal Data Protection Law and why foreign CAPTCHA services pose compliance risks, with the case for locally hosted bot protection.