IoT cyber security regulation in the Kingdom of Saudi Arabia

What the IoT cyber security regulation of the Kingdom of Saudi Arabia requires, whether it is in force and mandatory, and whether ETSI EN 303 645 is enough to comply.

Last updated

One regulation recorded for the Kingdom of Saudi Arabia in the panorama of IoT cyber security regulations, which compares every country that regulates the cyber security of connected products.

IoT Regulatory Framework

Internet of Things Regulations RT18 Third Version

Communications, Space and Technology Commission · 31 July 2024 · last reviewed ETSI EN 303 645 can be used

QuestionAnswer
Is the regulation in force? Yes
Scope IoT technology, IoT connectivity, and IoT devices
Who must follow the regulation? IoT manufacturers, IoT service providers, IoT service users, IoT connectivity service providers, IoT connectivity service users
Mandatory or Voluntary? Mandatory
Is there a label or a certification? Yes
Does the regulation mandate baseline security requirements? Yes
Are there additional requirements to the baseline security? No
Does the regulation contains assurance levels? No
Is compliance with ETSI EN 303 645 a requirement? No
Can ETSI EN 303 645 be used to comply with the regulation? Yes
Are other standards or guidance referenced? (cf. regulation) Yes

Every other country

Licence: Free to use for non-commercial purposes. Any use must credit cetome and link to cetome.com/panorama. The data is also open on GitHub.

Next step

Put this research to work

Our research shows where the rules stand. To build secure-by-default products, we help you define a product security strategy and put it into practice across your organisation.