GOVERNMENT PROCUREMENT ANNEX

What should enterprises know about gOVERNMENT PROCUREMENT ANNEX?

(Saudi Arabia – Ministries, Authorities & Regulated Sectors)

What should enterprises know about 2. Legal & Regulatory Alignment (Saudi Arabia)?

K® (Kenzie) of SAUDI GULF HOSTiNG commits to operating in alignment with applicable Saudi regulations, including but not limited to:

What should enterprises know about 3.1 Ministry of Communications & Information Technology (MCIT)?

Applicable Use Cases:

Which governance and security controls matter for GOVERNMENT PROCUREMENT ANNEX?

Applicable Use Cases:

What should enterprises know about 3.3 Ministry of Interior / Public Safety Authorities?

Applicable Use Cases:

What should enterprises know about 3.4 Ministry of Health & Healthcare Authorities?

Applicable Use Cases:

1. Purpose of This Annex

• Saudi government ministries
• Authorities and regulators
• Semi-government entities
• State-owned enterprises
• Vision 2030 programs
• Regulated critical-infrastructure operators

2. Legal & Regulatory Alignment (Saudi Arabia)

• Saudi Personal Data Protection Law (PDPL)
• National Cybersecurity Authority (NCA) controls
• Cloud Computing Regulatory Framework (CCRF)
• Communications, Space & Technology Commission (CST) regulations
• Relevant sector-specific regulations
• Applicable Royal Decrees and implementing regulations

3.1 Ministry of Communications & Information Technology (MCIT)

• National digital platforms
• Cloud transformation programs
• Data localization initiatives
• Smart government services

3.1 Ministry of Communications & Information Technology (MCIT)

• Saudi-based hosting options
• Tier III / Tier IV architecture
• Government-grade access governance
• Compliance documentation on request
• Alignment with national digital infrastructure goals

3.2 National Cybersecurity Authority (NCA) / Security-Sensitive Bodies

• Cyber defense platforms
• SOC infrastructure
• Incident response systems
• Threat intelligence platforms

3.2 National Cybersecurity Authority (NCA) / Security-Sensitive Bodies

• Defense-in-depth security architecture
• Controlled administrative access
• Audit-ready logging
• Incident escalation procedures
• Cooperation with lawful investigations