Frameworks
One platform, the Kingdom's frameworks
Start with NCA ECC 2.2024 today. SAMA CSF and PDPL readiness are on our roadmap — the same sovereign platform, the same evidence discipline.
Readiness assessment — not regulatory certification
NCA ECC 2.2024
The Essential Cybersecurity Controls, assessed as 200 controls and 176 scored units with evidence-mapped maturity.
- Guided assessment for every control
- Evidence analysis with citations
- Deterministic maturity scoring
- Optional expert validation
SAMA Cybersecurity Framework
Planned mapping and maturity assessment for entities supervised by the Saudi Central Bank.
- Framework mapping and control library
- Evidence requirements per control
- Maturity assessment by domain
- Register interest for early access
PDPL readiness
Planned data-protection controls and evidence, building on the PDPL-aligned handling available today.
- Data-protection control assessment
- Records-of-processing and evidence guidance
- Retention and rights workflows
- Register interest for early access
What's next
Framework expansion follows the same controls: reviewed content, deterministic scoring, evidence traceability and human validation. Talk to us about the framework your programme needs first.
Framework questions
Which framework should we start with?
Most organisations in the Kingdom start with NCA ECC 2.2024. If you are SAMA-supervised or preparing for PDPL, register your interest and we will include you in the early-access group.
Can we run more than one framework?
The platform is designed for multiple frameworks on one evidence base. NCA ECC 2.2024 is available today; additional frameworks join as they are released.
Are roadmap frameworks certified or audited?
BazGrid provides readiness assessments, not certification or audit opinions. Roadmap frameworks are labelled as such until they are released.
Start with ECC readiness today
Run a free self-assessment now, or talk to us about the frameworks on your roadmap.