- Bahrain’s NCSC has approved three programmes covering cybersecurity standards, maturity measurement and risk assessment.
- The framework is designed to help critical-sector organisations identify risks and prioritise mitigation measures.
- The NCSC says the approach will establish a unified cybersecurity framework based on risk, measurement and continuous improvement.
The NCSC has issued a decision approving three initiatives: the Cyber Security Standards for Critical Sectors, the National Programme for Measuring Cyber Security Maturity and the National Programme for Assessing Cyber Security Risks.
Together, the measures are intended to provide organisations operating in critical sectors with a more structured approach to managing cyber risks and strengthening the resilience of critical systems and services.
The framework will support organisations in establishing cyber governance arrangements, assessing their level of cybersecurity maturity and preparedness, identifying and evaluating cyber risks, and prioritising mitigation measures.
The approach is designed to support risk-based decision-making, while helping organisations maintain the protection and continuity of critical systems and services.
Shaikh Abdulla bin Mohamed Al Khalifa, Deputy Chief Executive Officer of Cybersecurity Operations at the NCSC, said bringing the three elements together would give organisations a clearer framework for improving their cybersecurity posture.
“Integrating cybersecurity standards with the maturity measurement and risk assessment programmes will provide entities with a clear and systematic framework to identify security requirements, measure their implementation and development, and set priorities based on cyber risks.”
He added that the framework was intended to establish a unified national approach based on risk, measurement and continuous improvement.
The move reflects the increasing emphasis on cybersecurity resilience within critical sectors, where disruption to digital systems can affect the continuity of essential services.
By combining defined security requirements with maturity measurement and formal risk assessment, the NCSC aims to give organisations a basis for identifying gaps, prioritising investment and tracking improvements over time.
