Security & Trust Center
Your data security is our top priority
NCA ECC/CCC/DCC
The Kingdom of Saudi Arabia's National Cybersecurity Authority (NCA) establishes mandatory cybersecurity requirements for organizations operating in or providing services to the Kingdom's public sector, and critical national infrastructure (CNI). Three NCA control sets are most relevant to cloud service providers. The Essential Cybersecurity Controls (ECC-2:2024) define baseline cybersecurity requirements for in-scope entities. The Cloud Cybersecurity Controls (CCC-2:2024) extend those requirements with additional obligations specific to cloud service providers (CSPs), and their cloud service tenants (CSTs), while the Data Cybersecurity Controls (DCC-1:2022) prescribe data classification, handling, and protection requirements.
Databricks has successfully completed an independent third-party assessment against those NCA frameworks. This assessment provides Saudi government agencies and regulated organizations with assurance that Databricks cloud services have been evaluated against the Kingdom's national cybersecurity standards, supporting the secure adoption of cloud technology within the Kingdom's digital ecosystem.
Supported Clouds
Regions
gcp-me-central2 (Dammam)
Resources
To request our NCA ECC, CCC, or DCC third party Statement of Compliance (SoC) reports, please ask your Databricks account team.