The Cloud Cybersecurity Controls (CCC – 2: 2024) define minimum cybersecurity requirements for cloud computing services used by Cloud Service Providers (CSPs) and Cloud Service Tenants (CSTs) in Saudi Arabia. The controls aim to enhance national cybersecurity goals and mitigate cyber risks.
The Cloud Cybersecurity Controls (CCC – 2: 2024) were updated to incorporate data localization requirements. These controls are designed to achieve higher levels of national cybersecurity by focusing on the secure operation and use of cloud computing services. Applicable to both CSPs and CSTs, they outline minimum requirements to ensure secure cloud computing services and reduce associated risks. The CCC acts as an extension of the ECC and contributes to the overall cybersecurity objectives of Saudi Arabia.
