NCA ECC Lead Implementer Professional Course

Learn how to apply the basic cybersecurity controls framework ECC issued by the National Cybersecurity Authority (NCA) in a practical way tailored for specialists and organizations in Saudi Arabia. Day 1 – Introduction to NCA ECC - Introduction to the National Cybersecurity Authority - Introduction to ECC controls and their objectives - Understanding the scope of application within entities - Preparing for the practical implementation journey Day 2 – Organizational Foundations - Preparing a 90-day plan - Identifying the appropriate job title - Appointing a Cybersecurity Manager - Forming the Cybersecurity Committee - Defining Cybersecurity Management - Clarifying roles and responsibilities Day 3 – Gap Assessment and Evidence Collection - Explaining the Gap Assessment methodology - Methods of collecting evidence - Types of required evidence - Linking evidence to each control - Identifying and analyzing gaps - Documenting assessment results Day 4 – Explaining the Controls Fully (1) - Explaining the first part of the controls - Understanding the purpose of each control - Practical requirements for implementation - Examples of actual compliance Day 5 – Explaining the Controls Fully (2) - Completing the remaining controls - Understanding the relationship between controls - Common mistakes in implementation - Converting controls into actionable requirements Day 6 – Cyber Risk Management - Concept of cyber risks - How to identify risks - Extracting risks from gaps - Impact and likelihood assessment - Preparing the risk register - Linking risks to treatments Day 7 – Work Plan and Implementation - Preparing the work plan after assessment - Prioritizing tasks - Building the roadmap - Preparing the budget plan - Mechanism for starting implementation - Distributing responsibilities Day 8 – Practical Implementation and Measurement Indicators - Starting actual implementation - Preparing governance documents - Preparing policies, standards, procedures, and templates - Creating KPIs - Creating KRIs - Measuring compliance and monitoring progress Day 9 – Readiness for Audit - Preparing for internal audit - Preparing for external audit - Reviewing evidence and outputs - Testing readiness - Addressing expected observations - Continuous improvement plan What will you learn in the course? - Comprehensive understanding of all ECC scopes and compliance requirements - How to implement controls within government and private entities - Preparing professional Gap Analysis - Preparing Evidence and documenting compliance - Readiness for official evaluations and regulatory reviews - Practical examples and ready-to-use templates Additional benefits: - Attendance certificate - Professional training materials and practical templates - Support and consultations after the course - Easy installment options via Tamara without hassle 🎯 Target audience: - Cybersecurity and GRC officers - IT and Compliance teams - IT managers - Information security auditors - Specialists seeking certified professional development