Saudi Cybersecurity Authority Proposes Mandatory Two-Hour Incident Reporting Rules for Critical Digital Operators
Saudi Arabia’s National Cybersecurity Authority has proposed new regulations requiring critical operators and cloud providers to report cyber vulnerabilities within two hours, alongside mandatory 24-hour disclosure protocols under a new national cybersecurity framework.