🇸🇦 Live Telecommunications

NCA Telework Cybersecurity Controls (TCC-1:2021)

NCA cybersecurity controls for remote work covering device security, secure connectivity, and data protection during telework. Applies to national organisations enabling remote work in Saudi Arabia.

Rules extracted

Obligations decomposed

3.9x

Avg obligations per rule

🇸🇦 Saudi Arabia

Jurisdiction

What AuditDSS covers

Source

Regulation

Extracted

Rules

Decomposed

Obligations

3.9x

Decomposition ratio

Each rule is decomposed into an average of 3.9 atomic obligations — the smallest testable units that can be independently violated.

Fully extracted & scored

All 63 obligations have been decomposed, titled, risk-scored, and embedded for semantic matching.

Risk scoring

Every obligation in TCC-1:2021 is scored across independent risk dimensions:

Obligation Weight

How critical within the regulatory framework

Violation Likelihood

How often breached in practice

Enforcement Evidence

Regulator enforcement history and penalties

Cascade Dependency

How many obligations depend on this one

Regulatory details

Full title: NCA Telework Cybersecurity Controls (TCC-1:2021)
Regulatory body: National Cybersecurity Authority
Jurisdiction: 🇸🇦 Saudi Arabia
Document type: regulation
Effective date: January 1, 2021
Industry: Telecommunications

Who this applies to

government organizationscritical national infrastructure operatorsprivate sector organizations

Key requirements

3 main domains
16 subdomains
21 main controls
42 subcontrols
telework policies
remote access security
mobile device management

Frequently asked questions about TCC-1:2021

What is TCC-1:2021?

NCA cybersecurity controls for remote work covering device security, secure connectivity, and data protection during telework. Applies to national organisations enabling remote work in Saudi Arabia.

Who does TCC-1:2021 apply to?

TCC-1:2021 applies to government organizations, critical national infrastructure operators, private sector organizations.

How many obligations does TCC-1:2021 contain?

AuditDSS has decomposed TCC-1:2021 into 63 atomic obligations from 16 rules. Each obligation is independently testable and risk-scored.

What are the key requirements of TCC-1:2021?

The key requirements include: 3 main domains, 16 subdomains, 21 main controls, 42 subcontrols, telework policies, remote access security, mobile device management.

How can I assess my TCC-1:2021 compliance?

Upload your compliance policy to AuditDSS. The platform maps your document against all 63 TCC-1:2021 obligations using deterministic AI scoring — not checklists or LLM summaries. You get a risk-scored gap analysis showing exactly which obligations are covered, partially covered, or missing.

Which jurisdiction enforces TCC-1:2021?

TCC-1:2021 is enforced in Saudi Arabia by National Cybersecurity Authority.

When did TCC-1:2021 come into effect?

TCC-1:2021 became effective on January 1, 2021.

What industry does TCC-1:2021 apply to?

TCC-1:2021 is primarily relevant to the Telecommunications industry. AuditDSS covers 76 regulations in this industry sector.

Build a TCC-1:2021 compliance pack

Don't have a compliance policy yet? AuditDSS generates a complete compliance pack for TCC-1:2021 — alone or combined with other regulations your business needs. Every clause is mapped to specific obligations.

Policy

High-level commitments and governance framework covering TCC-1:2021 requirements.

Procedures

Step-by-step operational procedures to implement each policy commitment.

Forms & checklists

Ready-to-use forms, registers, and checklists for day-to-day compliance operations.

Multi-regulation

Combine TCC-1:2021 with other regulations into a single unified compliance pack for your business.

Build TCC-1:2021 compliance pack

Already have a policy? Assess it against TCC-1:2021

Upload your document

Upload your compliance policy, program manual, or operational document. AuditDSS accepts any text-based document.

AI maps against 63 obligations

Your document is scored against every obligation in TCC-1:2021. Each claim is mapped to the obligation tree and evaluated for coverage.

Risk-scored gap report

Receive every gap ranked by risk priority with remediation guidance, enforcement evidence, and cascade impact analysis.