Saudi Regulatory Compliance

Senior cybersecurity, cloud, and data-protection compliance advisor for organisations in Saudi Arabia. Trigger for: NCA ECC-2:2024, CCC-2:2024, DCC-1:2022, CSCC-1:2019, OTCC-1:2022, TCC-1:2021, OSMACC-1:2021, CGEC-1:2019, CGESP-1:2019, NCS-1:2020; SAMA Cybersecurity/IT Governance/Business Continuity Frameworks; CST Cloud Computing Regulatory Framework, CST CRF RT08; PDPL and Implementing Regulations, Personal Data Transfer Regulation; NDMO Data Management Standards; SDAIA guidance including the AI Risk Management Framework (SDAIA-P145). Also trigger for gap assessments, audit readiness, breach

9 stars 3 forksSoftware Development

Install

skills CLI (Claude Code, Cursor, Codex and more)
npx skills add ibnsawad/Saudi-Regulatory-Compliance-Claude-Skill --skill saudi-regulatory-compliance
Manual install
git clone --depth 1 https://github.com/ibnsawad/Saudi-Regulatory-Compliance-Claude-Skill.git /tmp/Saudi-Regulatory-Compliance-Claude-Skill
mkdir -p ~/.claude/skills
cp -r /tmp/Saudi-Regulatory-Compliance-Claude-Skill/. ~/.claude/skills/saudi-regulatory-compliance

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# Saudi Regulatory Compliance

A structured advisor for KSA cybersecurity, cloud, OT, and data-protection regulation. Designed for compliance leads, CISOs, internal auditors, and consultants preparing for or responding to NCA, SAMA, CST, SDAIA, or NDMO oversight.

---

## 1. Role

You are a senior regulatory compliance specialist with deep, current expertise across the KSA regulatory stack. You combine framework literacy with practical implementation experience, and you write the way an audit-firm partner would: precise, decisive, and traceable to a specific control.

You do not give legal advice. You give compliance-engineering advice grounded in published regulator documents.

---

## 2. Frameworks in scope

Every assessment uses this set. Pick what applies based on the entity classification in §4.

| # | Framework | Issuer | Version / date | Primary scope |
|---|-----------|--------|----------------|---------------|
| 1 | Essential Cybersecurity Controls | NCA | ECC-2:2024 (4 domains, 28 subdomains, 108 controls, 92 subcontrols) | Baseline for all NCA-scoped entities |
| 2 | Cloud Cybersecurity Controls | NCA | CCC-2:2024 | CSPs and Cloud Service Tenants (CSTs) |
| 3 | Data Cybersecurity Controls | NCA | DCC-1:2022 (3 domains, 11 subdomains, 19 controls, 47 subcontrols) | Data lifecycle protection — extends ECC; ECC compliance is a prerequisite |
| 4 | Critical Systems Cybersecurity Controls | NCA | CSCC-1:2019 | Designated critical systems |
Read the full skill on GitHub

Details

Skill name
saudi-regulatory-compliance
Repo updated
21 July 2026

FAQ

What does the Saudi Regulatory Compliance skill do?

Senior cybersecurity, cloud, and data-protection compliance advisor for organisations in Saudi Arabia. Trigger for: NCA ECC-2:2024, CCC-2:2024, DCC-1:2022, CSCC-1:2019, OTCC-1:2022, TCC-1:2021, OSMACC-1:2021, CGEC-1:2019, CGESP-1:2019, NCS-1:2020; SAMA Cybersecurity/IT Governance/Business Continuity Frameworks; CST Cloud Computing Regulatory Framework, CST CRF RT08; PDPL and Implementing Regulations, Personal Data Transfer Regulation; NDMO Data Management Standards; SDAIA guidance including the AI Risk Management Framework (SDAIA-P145). Also trigger for gap assessments, audit readiness, breach

How do I install the Saudi Regulatory Compliance skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add ibnsawad/Saudi-Regulatory-Compliance-Claude-Skill --skill saudi-regulatory-compliance. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Saudi Regulatory Compliance popular?

It lives in ibnsawad/Saudi-Regulatory-Compliance-Claude-Skill, which has 9 GitHub stars and 3 forks.

Related skills

Compliance Audit

11

oliwoodman/compliance-audit-skill

Audit a website, app, or product's codebase for GDPR and EU AI Act compliance, then hand back a ranked list of plain-English fixes. Asks the owner the handful of questions the code cannot answer, reads the actual code (forms, API routes, dependencies, env vars, database schema, policy pages) to work out what personal data the product really collects and who it is shared with, then checks that against what the law requires. It exists to catch the gaps a pasted-in policy template hides. MANDATORY TRIGGERS: 'compliance audit', 'run compliance-audit', 'audit my compliance', 'audit this for GDPR',

Software Development

Driving Seat

10

Tanmay-Ts/driving-seat

Keeps the developer in control of every decision that matters while building or changing software. Turns vague goals into measurable intent, maps decisions up front, asks before any significant choice the spec doesn't cover, logs every choice made without asking, and checks that the developer understands decisions instead of delegating them. Use this skill whenever the user says "keep me in the driving seat", "ask before you decide", "don't make decisions for me", "I want to own the decisions", or invokes /driving-seat, and whenever they are building, changing, or fixing a production system an

Software Development

Deconstruct Skill

11

luoming-hu/deconstruct-skill

静态拆解本地文件、粘贴内容或代码仓库链接中的 Codex Skill,生成一份简洁、通俗、可下载的 Markdown 报告。报告只用六个章节直接说明最终交付、具体动作、步骤顺序、角色分工、规则所防的问题和可复用做法;不复制原文、不逐段批注、不列证据账本或源码引用,也不输出问题与改进建议。用户要求拆解、逆向分析、讲解或解释一个 Skill 为什么这样设计时使用。仅执行、安装或创建普通 Skill 时不要使用,除非用户同时要求先分析。

Software Development

Codemap

10

beadnall/codemap

Turns a codebase into an explorable isometric architecture diagram — a self-contained HTML artifact with blocks on a grid, a component index, a what-it-does/how-it's-built panel, and real data snippets travelling along the edges that the reader can stop and inspect. Use this whenever someone asks for a codemap by name — "create a codemap", "codemap this repo", "make a codemap of github.com/owner/name" — and equally when they want to see, map, diagram or visually explain how a system fits together: "diagram this codebase", "show me the architecture", "map how this works", "visualise the data fl

Software Development

Framework Builder

11

framework-creator/framework-builder

Build reusable agent-readable frameworks from any domain expertise. Use when someone says "systematize this," "turn this into a repeatable process," "build a framework for," "create a skill for," "I keep doing the same thing," or "make this predictable." Produces a complete five-layer framework in markdown that agents and humans can follow to get consistent results. Works across any industry or domain. Created by Mike Goetz at RageDesigner (ragedesigner.com) who has built 1,250+ frameworks across industries from federal contracting to medical advocacy to comedy development using this methodolo

Software Development

Ahrefs Domain Rating Free

9

AIGC-Hackers/ahrefs-domain-rating-free-skill

Use when checking Ahrefs Domain Rating, DR, website authority, domain authority, backlink profile strength, or free Ahrefs public API data for a domain or URL without an API key.

Software Development

Browse the most popular Claude skills, all software development skills, or write your own with the skills generator.