Locations

Regional expertise, delivered locally

Security regulation varies by market. We bring dedicated knowledge of UAE and Saudi Arabia regulatory frameworks to every engagement, wherever your organization operates.

Riyadh, Saudi Arabia

Riyadh is the anchor of Saudi Arabia's Vision 2030 economy — home to the Regional Headquarters (RHQ) Programme, the Kingdom's financial regulators, and the giga-project ecosystem driving one of the fastest enterprise technology build-outs in the region. That growth brings real security pressure: NCA Essential Cybersecurity Controls, SAMA's framework for regulated financial entities, and SDAIA's Personal Data Protection Law all apply, often simultaneously, to organizations relocating to or scaling in Riyadh. We help these organizations build security and AI governance programmes that satisfy Saudi regulators and stand up to real threats.

Key challenges we address
  • NCA Essential Cybersecurity Controls (ECC-1:2018) baseline compliance and audit readiness
  • SAMA Cybersecurity Framework requirements for Riyadh-headquartered banks, fintechs, and insurers
  • SDAIA Personal Data Protection Law (PDPL) — data residency, cross-border transfer, and consent requirements
  • RHQ Programme security due diligence for multinationals relocating regional headquarters to Riyadh
  • Vendor and supply chain risk across Vision 2030 giga-project ecosystems
  • Standing up security operations and governance fast enough to match Riyadh's pace of enterprise growth

Jeddah, Saudi Arabia

Jeddah is Saudi Arabia's principal commercial port city and the logistics gateway for Hajj and Umrah traffic, with a fast-growing retail, tourism, and logistics economy anchored by Jeddah Islamic Port and proximity to Red Sea coast giga-projects. Organizations here handle high-volume seasonal transaction traffic, payment card data, and increasingly digital pilgrim and visitor services — all under NCA Essential Cybersecurity Controls, SDAIA's PDPL, and, for regulated entities, the SAMA Cybersecurity Framework. We help Jeddah-based retail, logistics, hospitality, and financial organizations build security programmes that hold up under peak-season load and regulatory scrutiny alike.

Key challenges we address
  • NCA Essential Cybersecurity Controls (ECC-1:2018) compliance for port, logistics, and critical infrastructure operators
  • SAMA Cybersecurity Framework requirements for Jeddah-based financial institutions and payment processors
  • SDAIA Personal Data Protection Law (PDPL) compliance for high-volume consumer and pilgrim data handling
  • PCI DSS and payment security for retail and hospitality businesses facing seasonal Hajj/Umrah transaction surges
  • Port and logistics supply chain security across Jeddah Islamic Port and Red Sea coast giga-project ecosystems
  • Web application and booking-platform security for tourism and hospitality operators

Dammam & Al Khobar, Saudi Arabia

Dammam and Al Khobar anchor Saudi Arabia's Eastern Province — the heart of the Kingdom's oil, gas, and petrochemical industry, and home to some of the region's largest industrial and critical infrastructure operators. Organizations here operate under the NCA's Essential Cybersecurity Controls with particular weight on operational technology (OT) and industrial control system (ICS) protection, alongside SDAIA's PDPL and, for financial entities, the SAMA Cybersecurity Framework. We help Eastern Province energy, industrial, and financial organizations secure both IT and OT environments without disrupting operations that can't afford downtime.

Key challenges we address
  • NCA Essential Cybersecurity Controls (ECC-1:2018) compliance with emphasis on critical infrastructure requirements
  • Operational technology (OT) and industrial control system (ICS) security for energy, petrochemical, and industrial operators
  • SAMA Cybersecurity Framework requirements for Eastern Province financial institutions
  • SDAIA Personal Data Protection Law (PDPL) compliance
  • Vendor and supply chain security across energy and industrial procurement ecosystems
  • IT/OT convergence risk as industrial operators adopt connected monitoring and automation systems

Operating somewhere else in the GCC?

We work with organizations across the UAE, Saudi Arabia, and the wider GCC. Start with a conversation and we'll tell you where to start.

Get in Touch