DATASHEET (TRIPWIRE)NCA Compliance withTripwire Enterprise
The National Cybersecurity Authority (NCA) is the government entity in charge of cybersecurity in Saudi Arabia, encompassing
both regulatory and operational functions related to cybersecurity.

National Cybersecurity Authority Essential Cybersecurity Controls

The NCA works closely with public and private entities to improve the cybersecurity posture of the country in order to safeguard
its vital interests, national security, critical infrastructures, high-priority sectors, and government services and activities. The NCA’s
Essential Cybersecurity Controls (ECC) take the cybersecurity needs of all organizations and sectors in the Kingdom of Saudi
Arabia, meaning that every organization therein must comply.
According to NCA, it has developed the Essential Cybersecurity Controls “after conducting a comprehensive study of multiple
national and international cybersecurity frameworks and standards, studying related national decisions, law and regulatory
requirements, reviewing and leveraging cybersecurity best practices, analyzing previous cybersecurity incidents and attacks on
government and other critical organizations, and surveying and considering opinions of multiple national organizations.”1Tripwire Enterprise and the Five Domains of the Essential Cybersecurity Controls

Fortra's Tripwire® Enterprise is a security configuration management (SCM) suite that provides fully-integrated solutions for policy,
file integrity and remediation management. Organizations can use these solutions together for a complete end-to-end SCM
solution, or use its file integrity monitoring (FIM) or policy management solutions on their own to address today’s pressing securityand compliance challenges—while building a foundation that positions them to address tomorrow’s. Let’s take a look at the ways
in which Tripwire Enterprise assists with NCA compliance.

The five primary domains of the ECC.

Fortra.com

Page 1Fortra Datasheet

NCA Compliance with Tripwire Enterprise

Identity and Access Management

According to the NCA, this policy is intended to ensure thesecure and restricted logical access to information andtechnology assets in order to prevent unauthorized accessand allow only authorized access for users which arenecessary to accomplish assigned tasks. Tripwire Enterprise
can scan against cybersecurity requirements for identityand access management that must be implemented on
various operating systems.

Information System and Information
Processing Facilities Protection

This policy is required to ensure the protection of
information systems and information processing facilities(including workstations and infrastructures) against cyberrisks. Tripwire Enterprise can scan against cybersecurity
requirements for protecting information systems andinformation processing facilities.

Networks Security Management

This policy ensures the protection of organization’s
network from cyber risks. Tripwire Enterprise can scan
against cybersecurity requirements for network securitymanagement.

Cryptography

This policy is required to ensure the proper and efficientuse of cryptography to protect information assets as perorganizational policies and procedures, and related laws
and regulations. Tripwire Enterprise enables you to scan
against cybersecurity requirements for cryptography thatmust be implemented on your systems.

Fortra.com

Page 2Fortra Datasheet

NCA Compliance with Tripwire Enterprise

Cybersecurity Event Logs and Monitoring
Management

It’s imperative to have the timely collection, analysis andmonitoring of cybersecurity events for early detection ofpotential cyberattacks in order to prevent or minimize thenegative impacts on your organization’s operations. Tripwire
Enterprise can also scan against cybersecurity requirements
for event logs and monitoring management.

NCA-ECC Cybersecurity Defense Dashboard inTripwire Enterprise
Tripwire Enterprise helps you achieve alignment with theNCA –ECC Cybersecurity Defense across your environment,
allowing security, compliance and operations teams rapidly
achieve a foundational level of security across your entire
enterprise, including on-premise, cloud and industrial
assets, by reducing the attack surface, increasing system
integrity and delivering continuous compliance.

Tripwire has taken its original host-based intrusion detection tool, which could simply detect changes to files and folders, andexpanded it into a robust file integrity monitoring (FIM) solution, able to monitor detailed system integrity: files, directories,registries, configuration parameters, DLLs, ports, services, protocols, etc. Additional enterprise integrations provide granular
endpoint intelligence that supports threat detection and policy and audit compliance.

Sources

1 https://nca.gov.sa/files/ecc-en.pdf

Fortra.com

Page 3Fortra Datasheet

NCA Compliance with Tripwire Enterprise

About Fortra
Fortra is a cybersecurity company like no other. We’re creating a simpler, stronger future for ourcustomers. Our trusted experts and portfolio of integrated, scalable solutions bring balance andFortra.com

control to organizations around the world. We’re the positive changemakers and your relentless ally toprovide peace of mind through every step of your cybersecurity journey. Learn more at fortra.com.

© Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective owners.

(fta-tw-ds-0123-r1-hm)