Compliance
Built in Riyadh, for Saudi Regulations
Saudi regulators don’t just ask whether you have a policy. They ask for evidence that it works. Lockfy turns workstation, session and privileged-access controls into continuous, auditable proof, delivered to your auditors and your SOC.
| Why Saudi organizations choose Lockfy | |
|---|---|
| Saudi-built | Developed and supported by Leira Arabia in Riyadh |
| Data residency | Deploy fully on-premises, in a private cloud, or on Lockfy Cloud |
| Arabic and English | Full Arabic admin portal with right-to-left layout, alongside English |
| SOC-ready | Native SIEM integration in CEF over Syslog, with audit-grade delivery |
| Recognized | First place, Black Hat MEA 2024 startup pitch competition |
NCA Workstations Security Standard
| Requirement | How Lockfy helps |
|---|---|
| Secure workstations (screen lock or logout) before leaving the workspace | Remote lock and sign-out from the mobile app or portal, plus unlocked-workstation alerts to the user |
| Password-protected screen lock after a short idle timeout | Policy-driven auto-lock that is enforced even when applications such as Teams, PowerPoint or SCADA consoles block the Windows lock |
| Evidence the control works | Session audit trail of every lock, unlock, idle period and every lock Lockfy enforced |
NCA Essential Cybersecurity Controls (ECC)
| ECC subdomain | Lockfy capabilities |
|---|---|
| 1-10 Cybersecurity Awareness and Training | Personal security statistics, real-time alerts and monthly reports that build secure habits |
| 2-1 Asset Management | Live inventory of workstations, operating systems, installed applications and browser extensions |
| 2-2 Identity and Access Management | Session locking and termination, time-limited local admin access, password randomization, least-privilege admin permissions |
| 2-3 Information System and Processing Facilities Protection | Required and prohibited application policies, browser extension blocking, local account control |
| 2-12 Cybersecurity Event Logs and Monitoring Management | Session, privileged-access, account, software and admin events forwarded to your SIEM in CEF |
| 2-13 Cybersecurity Incident and Threat Management | Remote lock, sign-out and process termination to contain a compromised session quickly |
SAMA Cyber Security Framework
For banks, insurers and finance companies regulated by the Saudi Central Bank, Lockfy supports controls in:
| Area | Lockfy capabilities |
|---|---|
| Identity & Access Management | Just-in-time local admin access, automatic revocation, full password access audit trail |
| Asset Management | Continuous inventory of endpoints, software and browser extensions |
| Cyber Security Event Management | SOC-ready event stream for correlation and alerting |
| Endpoint & Application Security | Application and browser extension policies with compliance reporting |
Personal Data Protection Law (PDPL)
Unattended, unlocked workstations are one of the easiest ways personal data is exposed. Lockfy helps protect personal data on screen in hospitals, banks, government service centers and contact centers, and keeps the records that show who accessed which workstation and when.
Operational Technology and Critical Infrastructure
SCADA and HMI consoles are notorious for blocking screen locks. Lockfy’s lock-preventing apps control, remote lock and on-premises deployment help critical infrastructure operators enforce session security on control-room workstations without disrupting operations.
Note: This page explains how Lockfy capabilities can support your compliance program. Compliance is assessed for your organization as a whole, and Lockfy does not by itself make an organization compliant. Contact us for a detailed control mapping for your environment.
Ready to Protect Your Workstations?
Book a DemoLearn how Lockfy Enterprise can provide always-on protection for your organization.