Before you begin
Assess your compliance with the Cyber Resilience Fundamental Requirements
This self-assessment walks through every control in the CRFR document. For each control, rate your organisation's status as Fully Implemented, Partially Implemented, Not Implemented, or Not Applicable.
The CRFR is the minimum cyber resilience baseline for entities in SAMA's Regulatory Sandbox or seeking a license — it complements, but does not replace, SAMA's full Cyber Security Framework once licensed.
Sections in this assessment
Scoring. Fully Implemented = 100%, Partially Implemented = 50%, Not Implemented = 0%. Items marked Not Applicable are excluded from the score.
Your responses stay in this browser tab — nothing is uploaded. Save a JSON snapshot any time to resume later.
Almost there
Tell us who this assessment is for before generating the report.
Please enter your name.
Please enter your organisation.
Please enter a valid email.
—%
Awaiting answers
Overall compliance
Calculated across all controls answered (excluding Not Applicable items). Use the breakdown below to see which section needs attention first.
Compliance by section
Full control list
| ID | Control | Rating |
|---|