Comprehensive SAMA Compliance Toolkit – 38 Documentation Templates

Description

About the SAMA Compliance Toolkit

The Saudi Central Bank (SAMA) Cyber Security Framework is mandatory for the Kingdom’s banks, insurers and financial institutions, and it is enforced through supervised maturity assessments rather than a one-off certificate. This SAMA Toolkit provides 38 templates covering the cyber security governance and policy set, the risk-management and third-party processes, the technical and operational controls across the framework’s domains, and the maturity-assessment and reporting records SAMA expects. Each document is written around the framework’s domains and maturity model so an institution can demonstrate not just that controls exist but that they are operating at the required level. Everything is editable in Microsoft Office.

SAMA Toolkit Author

Authored by a CISSP-certified GRC consultant with extensive experience in governance, risk and compliance, this toolkit encapsulates decades of practical expertise in a user-friendly, ready-to-use format. The templates reflect how the SAMA Cyber Security Framework is implemented and assessed for maturity across Saudi financial institutions, not just the framework text.

Governance Docs have created this pack to comply with SAMA Cybersecurity Framework, BCM Framework, IT Governance, Outsourcing Rules, CCRF, and Counter-Fraud Framework.

What is included in the toolkit?

• 38 SAMA Documentation Templates — including policies, procedures, controls, registers, workbooks, cross-mapping matrices, and other helpful documentation
• Available as an instant download after purchase

38 SAMA Document Templates

A complete and comprehensive documentation package designed to assist clients, consultants, and service providers in successfully achieving compliance with Saudi Central Bank (SAMA).

SAMA Compliance

This toolkit has been developed in alignment with SAMA Cybersecurity Framework, BCM Framework, IT Governance, Outsourcing Rules, CCRF, and Counter-Fraud Framework. Cross-mapping to ISO/IEC 27001:2022, NIST CSF 2.0, PCI DSS 4.0, NCA ECC, and Basel III is also provided where applicable.

Frequently Asked Questions