Saudi Arabia, Bahrain
VirtuThinko: Cybersecurity Company in Saudi Arabia & Bahrain
NCA ECC Compliance in Saudi Arabia
NCA ECC Compliance in Saudi Arabia
Meet the National Cybersecurity Authority's Essential Cybersecurity Controls (ECC-2:2024) with a team based in Dammam: applicability, gap assessment against every control, remediation and readiness for NCA compliance assessments.
Explore NCA ECC ServicesOur technology partners
Hover a logo to see it in colour; click to read about the partnership.
Experienced Experts
Trusted professionals with deep industry knowledge.
Tailored Solutions
Custom strategies to fit your unique needs.
Client-Centric Approach
Your goals drive our focus, we prioritize your success.
Proven Track Record
Consistently delivering reliable results you can trust.
Why VirtuThinko?
Transforming Business Through Technology. We deliver innovative technology solutions that help organizations modernize, secure, and grow. From IT-enabled business processes and software development to web, mobile, portal, ICT, cloud, and cybersecurity solutions, we provide the expertise businesses need to move forward with confidence.
Read MoreVirtuThinko in the Kingdom
From LEAP in Riyadh to Black Hat and the KFUPM Career Fair: where our Saudi team has been.
What we do
Cybersecurity, IT and compliance under one roof
Services delivered by our own team, and solutions from 30 technology partners, for organisations in Saudi Arabia and Bahrain.
Talk to our team- 01Cybersecurity, Testing & AssuranceFind the weaknesses an attacker would use, and fix them in the right order.Cybersecurity risk assessment · Vulnerability management · Penetration testing · Software & performance testing
- 02Cloud, IT Services & Delivery SupportMove to the cloud and run IT with security built in from the start.Cloud security risk assessment · Support for cloud migrations · IT audits
- 03Strategy, Advisory & GRCSet the strategy, policies and governance your security programme runs on.Cybersecurity strategy & policy development · National & global framework compliance
- 04ComplianceMeet cybersecurity and data protection rules in Saudi Arabia and Bahrain.NCA ECC compliance, Saudi PDPL compliance and SAMA CSF compliance in Saudi Arabia · External DPG services and Bahrain PDPL compliance in Bahrain
Internship programme
Shaping the workforce of tomorrow, one intern at a time.
Tap a photo to read their story.
Interns trained since 2021
Hussain Hasan
Hasan Alshehabi
Abdulla Mohamed
Husain Ali
Ali Alhawaj
Ayman Salman
Ahmed Edhrabooh
Mohamed Salah
Mohamed Aladheb
Ali Yusuf
Ebrahim Alnasser
Mohamed Alhallal
Abdulla Qassim
Hussain Hubail
Husain Awadhalla
Ali Isa
Mohamed Abdulredha
Ali Humaidan
Qassim Marhoon
Hussain Abdulrasool
Ali Alaradi
Mohamed Alsawad
Yusuf Hasan
Mohamed Almoadhen
Hussain Aladraj
Mohamed Hubail
Husain Ali Mirza
Yahya Fardan
Mohamed Alderazi
Hasan Abdulredha
Hussain Sarhan
Ali Albasri
Mohammed AbuDeeb
Hasan Ali
Qassim Marhoon
Hussain Abdulrasool
Ali Alaradi
Mohamed Alsawad
Yusuf Hasan
Mohamed Almoadhen
Hussain Aladraj
Mohamed Hubail
Husain Ali Mirza
Yahya Fardan
Mohamed Alderazi
Hasan Abdulredha
Ali Albasri
Mohammed AbuDeeb
Hasan Ali
Abdulla Mohamed
Husain Ali
Ayman Salman
Ahmed Edhrabooh
Mohamed Salah
Mohamed Aladheb
Ali Yusuf
Ebrahim Alnasser
Mohamed Alhallal
Abdulla Qassim
Hussain Hubail
Husain Awadhalla
Mohamed Abdulredha
Ali Humaidan
NCA ECC Compliance Services in Saudi Arabia
The National Cybersecurity Authority's Essential Cybersecurity Controls (ECC-2:2024) set the minimum cybersecurity requirements for government agencies, their affiliated entities and operators of Critical National Infrastructure. From our office in Dammam, we help you confirm applicability, assess every one of the 108 main controls, close the gaps and prepare for NCA compliance assessments.
Services
Find the right service
Pick where you want to start; each service page explains what it covers.
- Cybersecurity, Testing & AssuranceFind the weaknesses an attacker would use, and fix them in the right order.
- Cybersecurity risk assessment
- Vulnerability management
- Penetration testing
- Software & performance testing
- Cloud, IT Services & Delivery SupportMove to the cloud and run IT with security built in from the start.
- Cloud security risk assessment
- Support for cloud migrations
- IT audits
- Strategy, Advisory & GRCSet the strategy, policies and governance your security programme runs on.
- Cybersecurity strategy & policy development
- National & global framework compliance
- ComplianceMeet cybersecurity and data protection rules in Saudi Arabia and Bahrain.
- NCA ECC compliance, Saudi PDPL compliance and SAMA CSF compliance in Saudi Arabia
- External DPG services and Bahrain PDPL compliance in Bahrain
Partners & certifications
Fast-Track Your Security Strategy and Achieve Success
Join our clients in accessing top-tier services and solutions tailored to elevate your security strategy and drive success.
We work with organisations in Saudi Arabia and Bahrain. In the Kingdom, VirtuThinko Company serves clients from our office in Dammam.
Yes for entities in scope: government agencies and their affiliated companies and entities, inside or outside the Kingdom, and private sector entities that own, operate or host Critical National Infrastructure. The NCA strongly encourages all other entities in the Kingdom to apply the controls. We help with applicability, gap assessment against the 108 main controls of ECC-2:2024, remediation and readiness for NCA compliance assessments.
Cybersecurity, testing and assurance; NCA ECC compliance; strategy, advisory and GRC; and cloud, IT services and delivery support. We also deliver solutions from our technology partners across areas such as endpoint, identity, network, data and cloud security.
Tell us what you need through our Contact page, or call us on +966 53 065 9703 in Saudi Arabia or +973 7799 0006 in Bahrain, and our team will get back to you.