The Saudi National Cybersecurity Authority (NCA) has announced substantial incentive rewards for individuals who bravely report cybercrimes that will reach up to SR50,000, or one percent of the final collected fine, strongly encouraging public cooperation.
Consequently, the NCA governor constituted a dedicated committee comprising three staff members to oversee this initiative. This specialized body must examine all referred reports, determine whistleblower eligibility for rewards, and officially fix the final amount, strictly adhering to the new regulations.
Key Violations Targeted by the NCA
Whistleblowers receive rewards for uncovering serious violations which include conducting cybersecurity operations without the requisite official license. Furthermore, authorities will reward reports detailing non-compliance with established policies, governance frameworks, standards, controls, and essential cybersecurity guidelines. Additionally, severe violations involve refusing to provide the NCA with requested information during its official duties, or intentionally misleading its investigative teams.
The regulations clearly prohibit possessing, selling, importing, or exporting non-compliant cybersecurity devices or services lacking necessary licenses or clearance.
Individuals who obstruct or actively prevent NCA inspectors from performing their necessary duties will certainly face immediate and decisive punitive measures, as the NCA emphasizes that these proactive steps create a robust security shield for the Kingdom.
Eligibility and Reward Conditions
Specifically, the new draft regulation published on the NCA survey platform specifies crucial conditions for receiving payment. First, the NCA only grants the financial reward after the reported violation has been conclusively proven and the evidence verified.
Subsequently, the decision proving the violation must become absolutely final, either through a definitive court ruling or following the statutory appeal period’s expiration. Moreover, the whistleblower’s report must demonstrate that it played a decisive and essential role in the successful outcome of the violation proving process.
Eligibility rules mandate that the whistleblower cannot be a current NCA employee, nor related to any staff member, including spouses and immediate family. Furthermore, the authority will not process any violation previously reported or already rewarded under this specific incentive program.
Finally, if the whistleblower is a public employee, reporting the violation must not fall within their job responsibilities; moreover, the whistleblower must pledge total non-disclosure regarding the report’s confidential information.
