Saudi Regulatory Compliance
Senior cybersecurity, cloud, and data-protection compliance advisor for organisations in Saudi Arabia. Trigger for: NCA ECC-2:2024, CCC-2:2024, DCC-1:2022, CSCC-1:2019, OTCC-1:2022, TCC-1:2021, OSMACC-1:2021, CGEC-1:2019, CGESP-1:2019, NCS-1:2020; SAMA Cybersecurity/IT Governance/Business Continuity Frameworks; CST Cloud Computing Regulatory Framework, CST CRF RT08; PDPL and Implementing Regulations, Personal Data Transfer Regulation; NDMO Data Management Standards; SDAIA guidance including the AI Risk Management Framework (SDAIA-P145). Also trigger for gap assessments, audit readiness, breach
Install
npx skills add ibnsawad/Saudi-Regulatory-Compliance-Claude-Skill --skill saudi-regulatory-compliancegit clone --depth 1 https://github.com/ibnsawad/Saudi-Regulatory-Compliance-Claude-Skill.git /tmp/Saudi-Regulatory-Compliance-Claude-Skill
mkdir -p ~/.claude/skills
cp -r /tmp/Saudi-Regulatory-Compliance-Claude-Skill/. ~/.claude/skills/saudi-regulatory-compliancePersonal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.
From the SKILL.md
# Saudi Regulatory Compliance A structured advisor for KSA cybersecurity, cloud, OT, and data-protection regulation. Designed for compliance leads, CISOs, internal auditors, and consultants preparing for or responding to NCA, SAMA, CST, SDAIA, or NDMO oversight. --- ## 1. Role You are a senior regulatory compliance specialist with deep, current expertise across the KSA regulatory stack. You combine framework literacy with practical implementation experience, and you write the way an audit-firm partner would: precise, decisive, and traceable to a specific control. You do not give legal advice. You give compliance-engineering advice grounded in published regulator documents. --- ## 2. Frameworks in scope Every assessment uses this set. Pick what applies based on the entity classification in §4. | # | Framework | Issuer | Version / date | Primary scope | |---|-----------|--------|----------------|---------------| | 1 | Essential Cybersecurity Controls | NCA | ECC-2:2024 (4 domains, 28 subdomains, 108 controls, 92 subcontrols) | Baseline for all NCA-scoped entities | | 2 | Cloud Cybersecurity Controls | NCA | CCC-2:2024 | CSPs and Cloud Service Tenants (CSTs) | | 3 | Data Cybersecurity Controls | NCA | DCC-1:2022 (3 domains, 11 subdomains, 19 controls, 47 subcontrols) | Data lifecycle protection — extends ECC; ECC compliance is a prerequisite | | 4 | Critical Systems Cybersecurity Controls | NCA | CSCC-1:2019 | Designated critical systems |
Details
- Skill name
saudi-regulatory-compliance- Repo updated
- 21 July 2026
FAQ
What does the Saudi Regulatory Compliance skill do?
Senior cybersecurity, cloud, and data-protection compliance advisor for organisations in Saudi Arabia. Trigger for: NCA ECC-2:2024, CCC-2:2024, DCC-1:2022, CSCC-1:2019, OTCC-1:2022, TCC-1:2021, OSMACC-1:2021, CGEC-1:2019, CGESP-1:2019, NCS-1:2020; SAMA Cybersecurity/IT Governance/Business Continuity Frameworks; CST Cloud Computing Regulatory Framework, CST CRF RT08; PDPL and Implementing Regulations, Personal Data Transfer Regulation; NDMO Data Management Standards; SDAIA guidance including the AI Risk Management Framework (SDAIA-P145). Also trigger for gap assessments, audit readiness, breach
How do I install the Saudi Regulatory Compliance skill?
skills CLI (Claude Code, Cursor, Codex and more): npx skills add ibnsawad/Saudi-Regulatory-Compliance-Claude-Skill --skill saudi-regulatory-compliance. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.
Is Saudi Regulatory Compliance popular?
It lives in ibnsawad/Saudi-Regulatory-Compliance-Claude-Skill, which has 9 GitHub stars and 3 forks.
Related skills
Compliance Audit
11oliwoodman/compliance-audit-skill
Audit a website, app, or product's codebase for GDPR and EU AI Act compliance, then hand back a ranked list of plain-English fixes. Asks the owner the handful of questions the code cannot answer, reads the actual code (forms, API routes, dependencies, env vars, database schema, policy pages) to work out what personal data the product really collects and who it is shared with, then checks that against what the law requires. It exists to catch the gaps a pasted-in policy template hides. MANDATORY TRIGGERS: 'compliance audit', 'run compliance-audit', 'audit my compliance', 'audit this for GDPR',
Driving Seat
10Tanmay-Ts/driving-seat
Keeps the developer in control of every decision that matters while building or changing software. Turns vague goals into measurable intent, maps decisions up front, asks before any significant choice the spec doesn't cover, logs every choice made without asking, and checks that the developer understands decisions instead of delegating them. Use this skill whenever the user says "keep me in the driving seat", "ask before you decide", "don't make decisions for me", "I want to own the decisions", or invokes /driving-seat, and whenever they are building, changing, or fixing a production system an
Deconstruct Skill
11luoming-hu/deconstruct-skill
静态拆解本地文件、粘贴内容或代码仓库链接中的 Codex Skill,生成一份简洁、通俗、可下载的 Markdown 报告。报告只用六个章节直接说明最终交付、具体动作、步骤顺序、角色分工、规则所防的问题和可复用做法;不复制原文、不逐段批注、不列证据账本或源码引用,也不输出问题与改进建议。用户要求拆解、逆向分析、讲解或解释一个 Skill 为什么这样设计时使用。仅执行、安装或创建普通 Skill 时不要使用,除非用户同时要求先分析。
Codemap
10beadnall/codemap
Turns a codebase into an explorable isometric architecture diagram — a self-contained HTML artifact with blocks on a grid, a component index, a what-it-does/how-it's-built panel, and real data snippets travelling along the edges that the reader can stop and inspect. Use this whenever someone asks for a codemap by name — "create a codemap", "codemap this repo", "make a codemap of github.com/owner/name" — and equally when they want to see, map, diagram or visually explain how a system fits together: "diagram this codebase", "show me the architecture", "map how this works", "visualise the data fl
Framework Builder
11framework-creator/framework-builder
Build reusable agent-readable frameworks from any domain expertise. Use when someone says "systematize this," "turn this into a repeatable process," "build a framework for," "create a skill for," "I keep doing the same thing," or "make this predictable." Produces a complete five-layer framework in markdown that agents and humans can follow to get consistent results. Works across any industry or domain. Created by Mike Goetz at RageDesigner (ragedesigner.com) who has built 1,250+ frameworks across industries from federal contracting to medical advocacy to comedy development using this methodolo
Ahrefs Domain Rating Free
9AIGC-Hackers/ahrefs-domain-rating-free-skill
Use when checking Ahrefs Domain Rating, DR, website authority, domain authority, backlink profile strength, or free Ahrefs public API data for a domain or URL without an API key.
Browse the most popular Claude skills, all software development skills, or write your own with the skills generator.