Kuwait National Basic Cybersecurity Controls (NBCC) - Download now

On 5 April 2026, Kuwait's National Cyber Security Center (NCSC) issued Decision No. 2 of 2026, formally adopting the National Basic Cybersecurity Controls (NBCC) as Kuwait's mandatory national minimum cybersecurity baseline, published in the Official Kuwait Alyawm gazette under Amiri Decree No. 37 of 2022. All covered entities have 18 months from publication to achieve full compliance.

Inside this Edition:

  • NCSC Decision No. 2 of 2026 and the mandatory NBCC Kuwait cybersecurity baseline
  • Applicable entities: civil government agencies, military authorities, security agencies, and critical private sector institutions
  • Compliance obligations: annual self-assessments, evidence retention, and 18-month deadline
  • RSM in Kuwait's NBCC compliance support: gap assessments, control implementation, effectiveness testing, and remediation roadmaps