Skip to content
TRILOGY

Turn a Saudi requirement into implemented, evidenced technical controls.

We help you translate the technical parts of a regulatory or contractual requirement into work, tests and records. Compliance decisions stay with your organization and the authority.

Determine applicability, turn requirements into outcomes, implement, verify and evidence.

Applicability depends on your organization's classification and scope. We do not issue certificates, legal opinions or compliance verdicts.

  • Essential Cybersecurity Controls (ECC)

    National Cybersecurity Authority

  • Cloud Cybersecurity Controls (CCC)

    National Cybersecurity Authority

  • Cyber Security Framework

    Saudi Central Bank (SAMA)

  • Personal Data Protection Law (PDPL)

    SDAIA

What you receive

  • Requirement

    restore capability

  • Technical work

    immutable backup + restore test

  • Evidence

    restore test record

What we offer

01

Design & architecture

  • Sizing
  • High-level and low-level design
  • Bill of materials

02

Implementation & migration

  • Installation and configuration to the approved design
  • Migration waves and cutover
  • Tested rollback

03

Verification & handover

  • Test plans, results and sign-off
  • As-built documentation and runbooks
  • Knowledge transfer
  • Determine applicability
  • Requirement → outcome
  • Implement
  • Verify
  • Evidence
Top-down view of a desk with printed documents, a closed laptop and a hand placing a handover folder

Capabilities in detail

Essential Cybersecurity Controls (ECC)
What
National Cybersecurity Authority
How
Applicability depends on your organization's classification and scope.
You receive
restore test record
Cloud Cybersecurity Controls (CCC)
What
National Cybersecurity Authority
How
Applicability depends on your organization's classification and scope.
You receive
restore test record
Cyber Security Framework
What
Saudi Central Bank (SAMA)
How
Applicability depends on your organization's classification and scope.
You receive
restore test record
Personal Data Protection Law (PDPL)
What
SDAIA
How
Applicability depends on your organization's classification and scope.
You receive
restore test record
National data management standards
What
NDMO
How
Applicability depends on your organization's classification and scope.
You receive
restore test record
E-invoicing technical requirements
What
ZATCA
How
Applicability depends on your organization's classification and scope.
You receive
restore test record

Review the technical requirement

Prefer to talk? Call +966591909277

We use the information you provide to respond to your request. Read our privacy notice for details.