The National Center for Non-Profit Sector (NCNP) is committed to following and applying the highest standards of information security to maintain the confidentiality, integrity, and availability of information. This information is available in various forms, whether printed, written, stored on devices, sent via email, or communicated through electronic means or contained in transactions or network messages. The Center relies on electronic systems to handle data and information for employees and beneficiaries; therefore, the Center is keen to protect them securely against any threats, vulnerabilities, or information security risks regardless of their form or origin, and how they are processed.
The Center considers information and the assets associated with it as extremely valuable assets that must be protected securely to ensure the continuity of its work. Therefore, the management of the National Center for Non-Profit Sector aims to protect this information and data by applying appropriate engineering controls, necessary considerations, and continuously verifying the implementation of the necessary measures to protect important information from potential risks that may affect the workflow at the Center or its systems.
The Center also aims to enhance information security to ensure the continued delivery of all services to beneficiaries, in line with the National Cybersecurity Authority’s Essential Cybersecurity Controls (ECC-1: 2018)
Continuous Improvement:
The Information Management Administration at the National Center for Non-Profit Sector undertakes a continuous review process for the information security management system to maintain its effectiveness and continuous improvement. Performance indicators have been developed, and key controls have been established to measure the effectiveness of information security management. The Center management reviews the information security policies periodically or when any emergency changes occur to ensure the continuity of their work, efficiency, and development in line with what is issued from requests and updates such as the Essential Cybersecurity Controls (ECC-1: 2018)
Related Regulations:
- Electronic Transactions Law: Communications, Space and Technology Commission (CST)
- Anti-Cyber Crime Law: Communications, Space and Technology Commission (CST)
- Essential Cybersecurity Controls (ECC): National Cybersecurity Authority (NCA)