← All countries

Saudi Arabia

NIST bloc Standard-taker

Saudi Arabia works to its own National Cryptographic Standards, issued by the National Cybersecurity Authority, which set minimum cryptographic requirements for national systems across MODERATE and ADVANCED levels and include a dedicated post-quantum cryptography appendix. The Authority has consulted on adding post-quantum algorithms to the standard, while the Communications, Space and Technology Commission guides the ICT sector to run pilots and build crypto-agility.

Governance credibility

Governance credibility for Saudi ArabiaA six-axis reading out of two: Relevance 1.5 / 2, Coherence 1.5 / 2, Effectiveness 0.5 / 2, Efficiency 2.0 / 2, Governance 2.0 / 2, Impact 2.0 / 2.RelCohEffEff.GovImp
Governance credibility scores for Saudi Arabia, each out of two. Hover or focus a row to highlight its axis.
CriterionScoreConfidence
Relevance1.5 / 2Medium
Coherence1.5 / 2Medium
Effectiveness0.5 / 2Medium
Efficiency2.0 / 2Medium
Governance2.0 / 2Medium
Impact2.0 / 2Medium

Regulatory basis

  • NCA National Cryptographic Standards (NCS-1:2020) national Binding law
  • NCA consultation adding post-quantum algorithms, RNGs and QKD to the NCS national Soft law
  • CST Securing Data in the Quantum Computing Era (ICT sector) national Guidance

Government entities and critical national infrastructure must meet the National Cybersecurity Authority's minimum cryptographic requirements set in the National Cryptographic Standards (NCS-1:2020), which the NCA is mandated to enforce. The standard already carries a post-quantum cryptography appendix, and the NCA has run a public consultation to add post-quantum algorithms; until that update is finalised, no specific post-quantum algorithm is yet mandated. Communications, Space and Technology Commission material for the ICT sector is advisory only.

Standards and algorithms

Standard families
National Cryptographic Standards (NCS-1:2020)

Hybrid stance

None stated

Migration timeline

No published migration timeline.

Governmental and standards bodies

  • NCA National Cybersecurity Authority, issues the National Cryptographic Standards with a post-quantum cryptography appendix and consulted on adding post-quantum algorithms
  • CST Communications, Space and Technology Commission, guidance for the ICT sector on the quantum threat and post-quantum cryptography

Key institutional documents

Advising on this transition, or your own sector's? Request a briefing →