Skip to content
Tenant Excellence
Request a demo

Applies toSaudi Arabia · government and critical national infrastructure

NCA CCC

The cloud tenant controls of the National Cybersecurity Authority's Cloud Cybersecurity Controls (CCC-2:2024), evaluated from Azure configuration, with your evidence for the controls configuration cannot show.

Premium

Scope as evaluated

  • Identity and access management for the cloud
  • Network, data protection and encryption in transit
  • Vulnerability, event log and key management

Read from the tenant

  • Azure role assignments, guests and classic administrators
  • Defender plans, secure score and Advisor recommendations
  • Network exposure, storage and Key Vault settings

Sample controls

  • 2-2-T-1 Identity and access management
  • 2-9-T-1 Vulnerability management
  • 2-11-T-1 Event logs and monitoring
Results are configuration indications drawn from your tenant. They are not an audit opinion or a certification.

In depth

Give the auditor a link, not a folder

Every covered control shows the data Microsoft Graph returned and the endpoint it came from. One click creates a read-only snapshot for one framework; it needs no account and expires after 24 hours.

  • Structured proof per control, with its Graph or ARM source
  • Scoped to one framework, read-only, no sign-in for the auditor
  • Expires after 24 hours; creation is written to the audit log
Learn more

Questions

Questions about NCA CCC

Which CCC controls does it evaluate?

The 44 cloud tenant controls of CCC-2:2024: those Azure configuration shows are evaluated; the others are marked Manual and take your evidence.

Does it cover Microsoft 365?

No. NCA CCC is evaluated on Azure; NCA ECC covers Microsoft 365.

Which package includes NCA CCC?

Premium.

Request a demo

Which frameworks do you report against?

Tell us in the demo request and we will show the matching controls on a demo tenant.

0 / 2,000

We use these details only to arrange your demo. See the privacy policy.