SAMA CSF · Saudi Arabia
SAMA Cyber Security Framework
awareness, evidenced.
The SAMA Cyber Security Framework, section 3.1.6, requires a cyber security awareness programme for staff, third parties and customers, run periodically throughout the year, covering threats such as spear-phishing and whaling, and evaluated to measure its effectiveness.
- Framework
- SAMA Cyber Security Framework v1.0, May 2017, in force
- Applies to
- Banks, finance companies, payment service providers and credit bureaus regulated by SAMA
- Where awareness fits
- 3.1.6 awareness, 3.1.7 training, 3.3.1 awareness at the start of and during employment
- KeenSec evidence
- Simulation results, report logs, training certificates, policy acknowledgements
What SAMA says about awareness
Awareness all year,
with effectiveness measured.
Clause numbers are from the SAMA Rulebook.
| Clause | What it says | Framework |
|---|---|---|
| 3.1.6 | An awareness programme for staff, third parties and customers, conducted periodically and throughout the year. | Cyber Security Framework |
| 3.1.6 (5c) | Awareness covers threats such as spear-phishing and whaling. | Cyber Security Framework |
| 3.1.6 (6a) | The programme is evaluated to measure the effectiveness of awareness activities. | Cyber Security Framework |
| 3.1.7 | Specialist cyber security training by role. | Cyber Security Framework |
| 4.3.1 | Fraud training at onboarding with regular refreshers, and a knowledge check whose pass rates are monitored. | Counter-Fraud Framework, 2022 |
Financial sector, real lures
Payment requests arrive
on every channel.
Finance teams see fake supplier invoices, changed bank details and urgent executive requests on email, Teams, WhatsApp and the phone.
External · Supplier Accounts
Revised bank details
Please update our bank details before today’s payment run. Confirmation letter attached.
- External tenant
- Changed bank details
- Same-day pressure
Expectation to record
The awareness record,
per person.
Staff tested across channels.
Outcomes per channel, team and campaign.
Staff report suspicious messages.
Phishing Reporter logs with automated analysis.
Staff complete awareness training.
LMS completions and certificates.
Staff accept your policies.
Dated records per person and version.
KeenSec helps you produce evidence for your awareness obligations: simulation results, report logs, training completions and certificates, and policy acknowledgements. Your auditor decides compliance.
This page is general information, not legal advice. KeenSec helps you produce evidence for your awareness obligations; your auditor or regulator decides whether you are compliant.
Primary sources
What this page is based on.
Checked on the regulator’s own website on 24 September 2026. Read the original before you rely on it.
- SAMA Cyber Security FrameworkMay 2017 · in force · sections 3.1.6, 3.1.7 and 3.3.1
- SAMA Counter-Fraud Framework, 4.3.1 Employee fraud training and awarenessOctober 2022 · in force
Questions buyers ask
Frequently asked questions.
Does SAMA require phishing simulation?
Not by name. Section 3.1.6 requires the awareness programme to be evaluated to measure its effectiveness, and the Counter-Fraud Framework asks for knowledge checks with monitored pass rates. Simulation results are a practical way to show both.
Does KeenSec make us compliant with the SAMA Cyber Security Framework?
No tool makes you compliant on its own. KeenSec helps you run staff awareness and produce evidence; your auditors and SAMA decide compliance.
Which SAMA controls does KeenSec map to?
Mainly 3.1.6 (awareness, including spear-phishing, with effectiveness measured), 3.1.7 (training) and 3.3.1 (awareness during employment), plus 4.3.1 of the Counter-Fraud Framework. Your compliance team confirms the mapping.
Can we run simulations on WhatsApp and voice?
Yes. KeenSec simulates WhatsApp, voice, SMS and RCS, email, Microsoft Teams and Slack.
Let’s connect the dots
Rehearse the payment scam.
Prove the programme.
Bring your awareness program, your reporting workflow, or the question your current metrics cannot answer.
Book a demo