Introduction

Categorized as a national critical infrastructure, stc understands the far-reaching impact of cyber incidents on our customers, partners, stakeholders, and the Kingdom of Saudi Arabia as a whole. Our incident response approach ensures that we can manage any incident swiftly and effectively while minimizing disruptions and preserving the trust placed in us. We work closely with our regulators such as the Communications, Space & Technology Commission (CST) and the National Cybersecurity Authority (NCA) to ensure compliance and coordinated responses.

stc maintains robust cybersecurity capabilities that adheres to the highest international standards for cybersecurity, including ISO 27001, ISO 22301, NIST, SANS, CSA, OWASP, GSMA, ENISA which guide our comprehensive approach to incident detection, response, and recovery. Additionally, we have CREST-certified professionals for penetration testing and ethical hacking services whereby we validate the security of our systems, identify vulnerabilities, and implement remediation measures to fortify our defenses against potential cyber threats. stc is also an active member of FIRST.org (Forum of Incident Response and Security Teams), collaborating with global cybersecurity experts to share threat intelligence, best practices, and incident response strategies. Our participation in FIRST enhances our incident response readiness and supports timely mitigation of cyber incidents.

Our Incident Response Program is structured around four core functions: Identification & Triage, Response Coordination & Guidance, Forensic Analysis, and Incident Reporting.

For detailed Incident Response Plan and Program please click here Incident Response Plan