:ٌ‫اٌىشف واٌزذش‬ Detect: Supports understanding and disruption of hostile action taken against the Kingdom and its information assets ● Evolving existing cyber threat intelligence capability ● Understanding the nations cyber space adversaries and their methods; ● Ensuring security defences remain current, effective and continue to detect cyber security events. ● Defining what is “normal‟ for the context and then detect anomalous events using a broad range of skills and capabilities. Respond: ● ‫رؼضَض فهُ واػزشاض األػّبي اٌؼذوأُخ اٌزٍ رغزهذف‬ ‫ وهى ِب َزُ ثبػزّبد‬،‫اٌٍّّىخ وأصىٌهب اٌّؼٍىِبرُخ‬ :‫اٌزذاثُش اٌزبٌُخ‬ ‫ذحص‬٣‫ذ‬ٜ‫ش ٌُشق حُظ‬٤ُ‫ش حُوذسحص حُلخ‬٣ٞ‫● طط‬ .‫ش‬٤ٗ‫زشح‬٤‫حُغ‬ ٢٘‫ؽ‬ُٞ‫ ح‬٢ٗ‫زشح‬٤‫ؼش أػذحء حُلؼخء حُغ‬٤‫ْ ؽز‬ٜ‫● ك‬ .ْٜ‫ز‬٤ُ‫أعخ‬ٝ ‫خ‬ٜ‫ظ‬٤ُ‫كؼخ‬ٝ ‫ش‬٤٘ٓ‫ش حُذكخػخص حأل‬٣‫ض‬ٛ‫● حُظؤًذ ٖٓ ؿخ‬ ‫ش‬٤٘ٓ‫حدع حأل‬ٞ‫ ًشق حُل‬٢‫خ ك‬ٛ‫حعظٔشحس‬ٝ .‫ش‬٤ٗ‫زشح‬٤‫حُغ‬ ٖٓٝ ‫خم‬٤‫زح حُغ‬ٛ ٢‫ ك‬٢‫ؼ‬٤‫ حُطز‬ٟٞ‫ق حُ��غظ‬٣‫● طؼش‬ ٍ‫ش ٖٓ خال‬٣‫خد‬٤‫ش حالػظ‬٤‫حدع ؿ‬ٞ‫ػْ ػزؾ حُل‬ .‫حُوذسحص‬ٝ ‫خسحص‬ُٜٔ‫حعغ ٖٓ ح‬ٝ ‫ٗطخم‬ :‫االعزجبثخ‬ Develops and deploys the appropriate capabilities to respond to cyberattacks in the same way as we respond to any other attack on National Security ● Having well-defined and tested incident ● management processes, capabilities and mitigation activities; ● Minimising and containing the impacts of cyber security incidents; ● Restoring essential services; ● Using root cause analysis and forensic tools post-incident to drive improvements. Evolve: ‫رطىَش ورىظُف اٌمذساد اٌّالئّخ ٌالعزجبثخ ٌٍهجّبد‬ ‫اٌغُجشأُخ ثٕفظ طشَمخ االعزجبثخ ألٌ هجىَ آخش ضذ‬ :‫ ورٌه ثبرخبر اٌزذاثُش اٌزبٌُخ‬،ٍٕ‫األِٓ اٌىط‬ Develops the knowledge, skills and sustainable sovereign capability required to maintain robust cyber security, through academia, private sector, research and development and international partnerships ● Partnering with the right organisations and ● partners to collaborate and share learning; ● Defining and establishing the key academic partners to build suitably qualified and experienced personnel, including the creation of a National Cyber Academy; ● Enacting the legislation and regulation needed to establish and operate National CyberSecurity ● Establishing the means to develop sustainable sovereign capabilities and corporate entities that can deliver effective cyber security initiatives; ● Establishing appropriate and robust national and international communication channels. ‫رطىَش اٌّؼشفخ واٌّهبساد واٌمذساد اٌغُبدَخ‬ ِٓ‫اٌّغزذاِخ واٌّالئّخ ِٓ أجً اٌّذبفظخ ػًٍ أ‬ ‫عُجشأٍ ِزُٓ ِٓ خالي اٌىعظ األوبدٍَّ واٌمطبع‬ ‫اٌخبص واٌجذش واٌزطىَش ثبإلضبفخ ئًٌ اٌششاوبد‬ :‫ ورٌه ِٓ خالي‬،‫اٌذوٌُخ‬ ٖ٤‫حُششًخء حُٔخظظ‬ٝ ‫● حُششحًش ٓغ حُٔ٘ظٔخص‬ .‫طزخدٍ حُٔؼشكش‬ٝ ٕٝ‫ذف حُظؼخ‬ٜ‫ر‬ National Cyber Security Strategy 2018-2023 ‫ٗشخؽخص إلدحسس‬ٝ ‫ًلخءحص‬ٝ ‫خص‬٤ِٔ‫ػغ ػ‬ٝ ● ‫غ‬٤‫ رل‬،‫حدع روظذ حُلذ ٖٓ حألخطخس‬ٞ‫حُل‬ .‫كؼخُش‬ٝ ‫ ٍش‬٣‫ٕ ٓلذدس رؼ٘خ‬ٌٞ‫ط‬ .٢ٗ‫زشح‬٤‫حدع حألٖٓ حُغ‬ٞ‫حء آػخس ك‬ٞ‫حكظ‬ٝ َ٤ِ‫● طو‬ ‫ش‬٤‫● حعظؼخدس حُخذٓخص حألعخع‬ ‫حص‬ٝ‫حألد‬ٝ ‫ش‬٣‫َ ُألعزخد حُـزس‬٤ِ‫● حعظخذحّ حُظل‬ ٖ٤‫حدع ٖٓ أؿَ طلغ‬ٞ‫ع حُل‬ٞ‫ه‬ٝ ‫ش رؼذ‬٤‫حُـ٘خث‬ .‫خص حالعظـخرش‬٤ِٔ‫ػ‬ :‫اٌزطىس‬ ّ Page 12 of 29 َ٤ٌ‫ٖ ٖٓ أؿَ طش‬٤٤ٔ٣‫ذ حُششًخء حألًخد‬٣‫طلذ‬ ٠ُ‫ٓظٔشط رخإلػخكش ا‬ٝ َٛ‫ن ػَٔ ٓئ‬٣‫كش‬ .٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ٝ ‫ش‬٤ٔ٣‫اٗشخء أًخد‬ ● ‫حألٗظٔش حُالصٓش إلٗشخء‬ٝ ‫ؼخص‬٣‫َ حُظشش‬٤‫طلؼ‬ .٢٘‫ؽ‬ُٞ‫ ح‬٢ٗ‫زشح‬٤‫ادحسس حألٖٓ حُغ‬ٝ ● ‫ش حُوذسحص‬٣ٞ‫حص حُالصٓش ُظط‬ٝ‫ش حألد‬٤‫ك‬ٞ‫ط‬ ‫خ‬ٌٜ٘ٔ٣ ٢‫حُششًخص حُظ‬ٝ ‫ش حُٔغظذحٓش‬٣‫خد‬٤‫حُغ‬ ٖٓ‫ ٓـخٍ حأل‬٢‫اؽالم ٓزخدسحص كؼخُش ك‬ .٢ٗ‫زشح‬٤‫حُغ‬ ● ‫ش‬٤ُٝ‫حُذ‬ٝ ‫ش‬٤٘‫ؽ‬ُٞ‫حطَ ح‬ٞ‫حص حُظ‬ٞ٘‫اٗشخء ه‬ .‫٘ش‬٤‫حُٔظ‬ٝ ‫حُٔالثٔش‬ ● 2023 – 2018 ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫حالعظشحط‬