Skip to content
OpClerk
Compliance/SAMA CYBER SECURITY FRAMEWORK

Map firewall policy to SAMA CSF — and prove it.

OpClerk maps your firewall policy to the SAMA Cyber Security Framework control by control, monitors it continuously, and exports the evidence your examiner asks for — all inside the bank's perimeter.

Request a DemoJump to the mapping
SAMA CSF COVERAGEcontinuous
96%
controls mapped & passing
3.3.5  Network Security✓ pass
3.3.9  Change Management✓ pass
3.3.14 Cryptography2 gaps
The framework

What the SAMA CSF requires.

The Saudi Central Bank's Cyber Security Framework is mandatory for member organizations — banks, insurers, and financing companies operating in the Kingdom. It defines control requirements across governance, risk, operations, and third parties, and it is examined.

Several of its domains live or die on firewall policy: network security and segmentation, access management, change management, and the audit evidence to prove all three. That is precisely where OpClerk operates.

At a glance
Who must comply
SAMA-regulated banks, insurers & financing firms
Structure
Four domains, graded maturity levels
Examined
By SAMA, with evidence on request
mapping below is illustrative — confirm against current SAMA CSF text
Control mapping

SAMA CSF control → OpClerk capability.

A direct, auditable line from each control area to the module that satisfies and evidences it.

SAMA CSF control area
How OpClerk delivers it
3.3.5
Network Security
Segment networks and restrict traffic to least-privilege access.
Policy AnalyzerContinuous
Proves segmentation with reachability analysis and flags any rule that grants more than least privilege.
3.3.5
Access Management (network)
Authorize and review access between zones and assets.
Policy OptimizerContinuous
Detects over-permission and unused access, and automates periodic recertification of every rule.
3.3.9
Change Management
Control, validate, and record every change to security configuration.
Change GovernancePer change
Pre-change risk validation plus a complete, immutable approval trail for every policy change.
3.3.3
Asset Management
Maintain an accurate inventory of information assets.
Unified Policy ViewLive
One normalized inventory of every rule and object across all firewall and cloud vendors.
3.3.4
Configuration & Hardening
Apply and maintain secure configuration baselines.
Policy AnalyzerContinuous
Surfaces misconfiguration and drift from a least-privilege baseline as policy changes.
3.2.x
Compliance Monitoring & Audit
Monitor compliance and retain evidence for examination.
Compliance & AuditOn demand
Maps controls continuously and exports a timestamped, examiner-ready evidence package.
Audit evidence

Export the package, not a panic.

When the examiner asks, generate a complete, timestamped evidence package mapped to SAMA control references — rule inventories, segmentation proofs, change records, and exception sign-offs.

Rule inventory mapped to SAMA control references
Segmentation and reachability proofs for in-scope zones
Change records with approvals and pre-change validation
Exception register with documented sign-offs
sama-csf-evidence-2026Q2/
rule-inventory.csv18,402 rows
segmentation-proof.pdf3.3.5
change-records.jsonQ2 · 214
exceptions-register.pdf12 signed
control-coverage.xlsx96% pass
Download signed package

See your SAMA CSF coverage, live.

A walkthrough mapping a sample of your own policy to SAMA controls — inside your perimeter, nothing leaves.

Request a Demo