Tabby is a leading fintech platform operating in a rapidly growing and highly regulated financial ecosystem.
Facing increasing regulatory expectations and the need to strengthen its cybersecurity maturity in alignment with Saudi Central Bank requirements, the organization initiated a comprehensive cybersecurity maturity assessment aligned with the SAMA Cybersecurity Framework.
The engagement delivered a structured evaluation of cybersecurity capabilities, enabling improved visibility, identification of maturity gaps, and the development of a clear roadmap toward higher maturity levels and regulatory readiness.
Limited visibility into cybersecurity maturity and gaps against SAMA CSF requirements
Comprehensive maturity assessment with control-level evaluation, evidence validation, and structured advisory
Improved cybersecurity maturity visibility, clear remediation roadmap, and enhanced regulatory readiness
Conducted comprehensive cybersecurity maturity assessments aligned with the SAMA Cybersecurity Framework, evaluating capabilities across governance, risk, and operational domains
Performed detailed control-level assessments to measure effectiveness, consistency, and alignment with regulatory expectations
Reviewed and validated supporting evidence to confirm implementation maturity and identify gaps in documentation and control execution
Identified key weaknesses across processes, controls, and governance structures, highlighting areas requiring formalisation and standardisation
Provided targeted, risk-based remediation recommendations to address identified gaps and strengthen overall cybersecurity posture
Developed a prioritized and actionable roadmap to guide the organization toward higher maturity levels and sustained regulatory alignment
250+ controls assessed and aligned with SAMA CSF maturity expectations above ML3
End-to-end control-level evaluation supported by 1000+ evidence validation and multiple review cycles
Comprehensive gap analysis identifying high-impact regulatory and operational risks
Structured, risk-based remediation roadmap enabling targeted maturity improvement
Enhanced governance and control effectiveness through continuous advisory engagement
Through this engagement, Tabby gained a clear and structured understanding of its cybersecurity maturity, enabling focused improvements and stronger alignment with regulatory expectations.
