SAMA Cybersecurity Compliance for a Saudi Fintech Company
Fintech · Riyadh, Saudi Arabia
Organizing SAMA controls, ownership and evidence for a growing Saudi fintech company, delivering a more consistent compliance process and clearer management oversight.
The challenge
Managing cybersecurity compliance through separate spreadsheets and documents can make it difficult to track controls, evidence, and responsibilities. This case focuses on organizing work against the SAMA Cybersecurity Framework while supporting the security needs of a growing fintech business.
The solution
BlackTigers Team connected control assessment with clear ownership, evidence review, and practical remediation priorities.
- Assess — Reviewed controls against the applicable SAMA requirements and identify gaps.
- Strengthen — Reviewed policies, asset records, and third-party security responsibilities.
- Remediate — Assigned corrective actions to owners with agreed target dates.
- Prepare — Organized evidence and support assessment and audit preparation.
- Monitor — Tracked progress, outstanding risks, and compliance indicators.
Results
The outcomes were a more consistent compliance process and clearer oversight of outstanding control requirements.
- A consolidated view of SAMA control gaps and supporting evidence.
- Defined responsibilities and traceable remediation actions.
- Organized documentation for management and audit review.
Discuss Your Requirements
Work with BlackTigers Team to assess your SAMA cybersecurity requirements and prioritize the actions needed to address gaps.