To comply with item 3 of article 10 of national cybersecurity authority NCS’s mandate and as per the Royal Decree number 57231 dated 10/11/1439 H, All organizations within the scope of these controls must implement whatever is necessary to ensure continuous and permanent compliance with the controls.
According to the above, if the organizations that mentioned Are not implementing the minimum requirements of Cybersecurity, maybe this exposes it to legal accountability.