SAMA Cybersecurity Framework Compliance Corporate Training
Build audit-ready SAMA compliance skills with guided labs in risk assessment, controls, and evidence.
Edstellar, a corporate training company, delivers programs that help your team learn to meet SAMA cybersecurity framework requirements with confidence. Employees develop practical skills in governance, risk assessment, control mapping, and compliance auditing through live, instructor-led sessions and hands-on labs. We tailor every workshop to your regulatory context, so each team practices the workflows it owns.
Instructor-led group trainingVirtual / on-site / off-site10 languagesDelivered inEnglish, Spanish, Mandarin, German, Arabic, Portuguese, Hindi, French, Japanese, Italian100+ countriesWe have delivered inUnited States, United Kingdom, India, Canada, Germany, France, Netherlands, UAE, Saudi Arabia, Singapore, Australia, Japan, Brazil, South Africa and 90+ more countries
How we build a audit-ready SAMA team
The Edstellar SAMA CYBERSECURITY Capability Model
Diagnose
Map your team's SAMA knowledge against the controls and evidence your institution must demonstrate.
Standardize
Set shared risk assessment methods, control mapping formats, and documentation habits every team follows.
Practice
Assess risks and map controls in guided labs, with instructor feedback on evidence quality and method.
Measure
Track skill growth with assessments and the Skills Matrix, then target the remaining gaps.
Scale
Roll the practices out across business units with playbooks, peer reviews, and ongoing coaching.
Need more than one program?Get a group quote
Trusted as a Leading Corporate Training Provider by
Program Overview: What is SAMA Cybersecurity Framework Compliance?
SAMA Cybersecurity Framework Compliance is Edstellar's instructor-led program for compliance, risk, and audit teams preparing for SAMA cybersecurity assessments. It covers framework foundations, governance and policy, cyber risk and control mapping, security operations, third-party risk, and audit evidence. Teams learn to build a defensible posture mapped control by control to SAMA's requirements.
Training blends instruction with applied assessment work from the first module. Participants map SAMA controls to their own environment, draft governance artifacts, and run evidence reviews under instructor guidance. Facilitators coach teams on where assessments typically fail and how to close each gap before auditors arrive. The program closes with a five-hour Compliance Readiness Capstone: a full readiness review your team can reuse as its audit preparation template.
Financial institutions often discover compliance gaps only when SAMA assessors find them, at the worst possible moment. Scattered controls, weak evidence trails, and unmanaged third-party risk turn audits into fire drills. This program teaches teams to prepare continuously: mapped controls, documented evidence, and a readiness routine that makes assessments routine.
The capstone is a full Compliance Readiness review built from your team's own control inventory: mapped requirements, evidence gaps, and a remediation sequence with owners and dates. Instructors pressure-test it against how SAMA assessments actually run, so the team walks out holding a reusable assessment template rather than a one-time exercise.
Seven modules and 27 hours: framework foundations, governance and policy, risk and control mapping, security operations controls, third-party risk, and audit evidence. Every module pairs concepts with a guided lab, so each technique is practiced.
It closes with a capstone: a full mock SAMA compliance assessment the team plans, executes, and presents. Performance is measured before and after, so capability growth is visible.
What's Included in this Workshop for Your Enterprise Teams
- 1
Live Instructor-Led Sessions
Learn from SAMA compliance practitioners.
- 2
Hands-On Labs in Every Module
Map controls and assess risks with instructor coaching.
- 3
Mock Compliance Assessment
Run a full SAMA readiness review as the capstone.
- 4
Control Mapping Templates
Take home reusable matrices and checklists.
- 5
Evidence Pack Samples
See what audit-ready documentation looks like.
- Instructor-led delivery across virtual, onsite, and hybrid
- Guided labs in every module with instructor coaching
- Mock SAMA assessment as the capstone, reviewed with your team
- Flexible scheduling around your calendar
- Control matrices and evidence templates included
- Group size and batches set along with you
Build your team's skills. Anywhere in the world.
Real-world use cases
from day one
Instructor-led training
for your teams
Delivered globally
in 100+ countries
Enterprise Training Solutions Customized for Your Company
One partner for instructor-led corporate training, delivered the way your teams work.
Request a Training Quote- Customized Training Delivery
- Scale Your Training: Small to Large Teams
- In-person Onsite, Live Virtual or Hybrid Training Modes
- Plan from 2000+ Industry-ready Training Programs
- Hands-On Labs on Live Infrastructure, Led by Industry Experts
SAMA Cybersecurity Framework Compliance Course Topics and Program Outline
A tailored 27-hour, seven-module workshop: one learning journey from SAMA framework foundations to a compliance readiness capstone. Sessions pair concepts with guided labs on risk assessment, control mapping, and audit evidence.
Built by Edstellar with cybersecurity compliance practitioners
Built by practitioners who deliver compliance programs for regulated financial institutions, shaped around your stack and use cases.
We assess your team's SAMA framework knowledge and compliance maturity, then shape the 27-hour plan around the gaps that matter most.
Learn SAMA framework domains, governance structures, and policy drafting through live instruction and guided examples.
Practice risk assessment, control mapping, and third-party due diligence in hands-on labs with instructor feedback on every exercise.
Apply it all in a capstone: run a full mock SAMA compliance assessment and present findings with a remediation roadmap.
From SAMA foundations to audit-ready compliance in 27 hours.
Delivered as
Sessions run live with an instructor across 27 hours, scheduled to fit your team's calendar.
Walk through a SAMA self-assessment template against a sample institution profile.
learna)Framework origins, scope, and applicability to regulated financial institutions
b)The five SAMA domains and their control objectives
c)Maturity levels and the self-assessment approach
d)How SAMA requirements relate to other cybersecurity standards
Draft a cyber policy charter and role matrix, then review it with the instructor.
learna)Governance structures and board-level oversight
b)Defining cyber roles, responsibilities, and reporting lines
c)Drafting cyber policies, charters, and standards
d)Documenting governance evidence for auditors
Map an institution's controls to SAMA domains and score the gaps in a guided workshop.
practicea)Identifying cyber risks across financial systems and data
b)Mapping controls to SAMA domains and subdomains
c)Running gap assessments against framework requirements
d)Writing risk treatment and remediation plans
Test monitoring and access controls in a simulated operations environment.
practicea)Access management and identity controls
b)Network, endpoint, and data protection controls
c)Security monitoring, logging, and detection
d)Testing and validating control effectiveness
Run a due diligence exercise on a sample vendor using audit checklists.
practicea)Assessing cyber risk in vendors and service providers
b)Outsourcing and cloud service controls
c)Contract terms, audit rights, and reporting duties
d)Running a third-party due diligence exercise
Assemble an evidence pack and findings tracker for a sample audit scope.
applya)Planning internal audits of SAMA controls
b)Collecting and organizing compliance evidence
c)Regulatory reporting duties and timelines
d)Tracking findings through remediation
Run a full mock SAMA assessment and present findings with a remediation roadmap.
applya)End-to-end mock SAMA compliance assessment
b)Scoring controls and documenting findings
c)Building a prioritized remediation roadmap
d)Presenting results to stakeholders
Customize this program tailored to your team?
Tell us your training needs: what your team already works with, the level they’re at, and the topics you want them to focus on. We’ll adjust the modules, duration and hands-on labs, and send you a customized outline for your group.
Key Skills and Outcomes Your Team Will Gain
Seven job-ready outcomes your team will demonstrate by the end of the program. Each competency is practiced in guided labs and reviewed in the capstone assessment.
Interpret SAMA requirements
Read framework domains and map each control objective to the systems and processes it covers.
Draft governance documents
Write cyber policies, charters, and role definitions that satisfy governance domain expectations.
Run risk assessments
Identify cyber risks, score them, and document treatment plans aligned to SAMA domains.
Map and test controls
Map controls to framework requirements and validate that technical controls operate effectively.
Assess third-party risk
Run vendor cyber due diligence and review outsourcing and cloud controls.
Assemble audit evidence
Collect, organize, and present evidence packs that stand up to internal and external audits.
Report and remediate
File regulatory reports and track findings through to closure.
Teams that Benefit from this SAMA Cybersecurity Framework Compliance Group Training
This group training is built for risk, compliance, audit, and information security groups preparing for SAMA assessments. Content adapts to each cohort's roles, regulatory context, and experience, so every batch practices the workflows it owns, from control mapping to audit evidence.
Assess cyber risks and map controls to SAMA domains.
Risk professionals learn to identify cyber risks across financial systems, map controls to SAMA domains, and document treatment plans their institution can defend.
Workflow friction
- Inconsistent risk methods weaken compliance posture.
- Control gaps surface too late, during audits.
- Treatment plans lack clear owners and timelines.
How the program helps
- Standardize risk scoring and control mapping methods.
- Practice gap assessments with instructor feedback.
- Document treatment plans that close real findings.
Practice use cases
- Risk scoring labs
- Control mapping drills
- Gap analysis sprints
- Treatment plan reviews
Turn SAMA requirements into audit-ready evidence.
Compliance professionals practice control mapping, gap assessments, and evidence collection so regulatory reviews move faster with fewer findings.
Workflow friction
- Evidence scattered across teams slows reviews.
- Domain requirements interpreted inconsistently.
- Reporting duties missed under deadline pressure.
How the program helps
- Build evidence packs auditors accept the first time.
- Track regulatory duties against clear timelines.
- Align documentation to each SAMA domain.
Practice use cases
- Evidence pack labs
- Domain mapping drills
- Reporting timeline clinics
Audit controls with a clear SAMA reference.
Internal auditors learn to plan control audits, test control effectiveness, and report findings against the framework's domains.
Workflow friction
- Audit scopes drift without a framework anchor.
- Control testing varies by auditor and cycle.
- Findings reports lack actionable remediation steps.
How the program helps
- Plan audits scoped to SAMA domains.
- Test controls with repeatable methods.
- Report findings with clear remediation paths.
Practice use cases
- Audit planning labs
- Control testing drills
- Findings report reviews
Validate the technical controls SAMA expects.
Information security staff practice control testing, monitoring reviews, and third-party due diligence in labs that mirror their operations.
Workflow friction
- Technical controls rarely tested against SAMA.
- Monitoring gaps found only after incidents.
- Vendor reviews lack consistent cyber criteria.
How the program helps
- Test monitoring and access controls hands-on.
- Review logs and detection with expert guidance.
- Run vendor due diligence with proven checklists.
Practice use cases
- Control testing labs
- Monitoring review drills
- Vendor due diligence labs
Cohorts train as a cross-functional workforce, with each small group aligned on shared control and evidence standards.
Prerequisites: This program benefits compliance, risk, audit, and information security teams most, especially those preparing for SAMA assessments. Familiarity with basic IT or governance concepts helps but is not required, and no prior SAMA experience is needed. Each workshop adapts to the cohort's regulatory context, tools, and maturity level, so every team practices the controls and evidence workflows it owns.
GRC Analyst to Cyber Compliance Lead
Skill levels track the program's own arc: foundations in modules 1 and 2, guided practice in modules 3 to 5, applied auditing in module 6, and full compliance delivery in the capstone.
One program that grows with GRC careers, from SAMA framework basics to confident audit and reporting practice.
Mixed cohort, or several teams at once?
We can tailor the training to different teams, roles, and experience levels within the same program.
Certificate of Training Completion.
On successful completion, employees receive an Edstellar course completion certificate, recognizing their commitment to ongoing learning and professional development. It validates the skills they have built and motivates them to keep growing and contribute to organizational success.
Earned, not attended. Awarded on completion of all hands-on labs and the capstone project.
Training Delivery Modes: Virtual, Onsite and Hybrid
All modes are live and hands-on. We help you choose the mix that fits your team, then tailor the schedule and lab environments to your regulatory context and calendar.
Hybrid Training
Blend live virtual sessions with onsite workshops so distributed compliance teams learn together. Instructors guide every lab in real time across both settings, keeping each participant hands-on regardless of location.
- Live instructor-led sessions across virtual and onsite settings
- Same guided labs and coaching for every participant
- Hybrid scheduling that fits distributed team calendars
- One consistent curriculum across all locations
Onsite Training
Run the full program at your offices with your systems and documents in the room. Labs use your control matrices and evidence samples, so practice maps directly to your audit preparation.
- Full program delivered at your offices
- Labs built around your control matrices and documents
- Direct coaching on your institution's audit preparation
- Team workshops that align stakeholders on findings
Live Virtual Training
Join live virtual sessions from anywhere, with the same guided labs and instructor feedback as any other format. Breakout groups keep each cohort collaborating on risk and control exercises.
- Live virtual sessions with real-time instructor guidance
- Breakout groups for team-based lab exercises
- Digital lab guides and templates for every module
- Sessions run over Zoom or Teams with full lab access
Need a training format that works for your team?
Full days, half days across weeks, or split by module. Tell us the delivery window and we schedule the cohort around it.
Frequently Asked Questions
Share your team size, locations, and preferred dates, and we will send a tailored proposal with pricing, usually within one business day.
Yes. A short discovery call helps us understand your compliance goals, current maturity, and timelines before we finalize the training plan.
Yes. Live virtual sessions include the same guided labs and instructor feedback as other formats, with breakout groups for team exercises.
Yes. Onsite delivery runs at your offices using your documents and control matrices, so labs map directly to your audit preparation.
The program runs 27 hours of instructor-led training, typically scheduled across four to five days or split into weekly sessions.
Question not answered here?
Put it in the request. A training specialist answers it directly, within one business day.
Where this Training Fits in Your Team's learning path.
SAMA's Cybersecurity Framework applies to Saudi financial institutions and assumes a working security management system. Your team learns cyber basics and ISO 27001 first. This course applies the SAMA framework, and the last step covers the NCA Essential Cybersecurity Controls that apply nationally.
Why Choose Edstellar as Your SAMA Cybersecurity Framework Compliance Training Provider
Edstellar is the training provider teams choose when SAMA audit readiness cannot wait. With 5,000+ certified trainers, we bring proven methodology, hands-on lab experience, and deep compliance expertise to every engagement. When comparing providers, look for practitioner trainers and measured outcomes: our trainer profiles show real assessment experience, and every program is tailored to your institution.
EXPERT TRAINERS
YEARS DELIVERING
ORGANIZATIONS TRAINED
CERTIFIED
Tailored
Labs mirror your institution's systems and documents, so teams practice SAMA control mapping on the material they will actually audit.
Proven Methodology
A diagnose-to-scale path moves teams from baseline maturity assessment to measured compliance readiness, cohort by cohort.
Practice-Based Learning
Hands-on labs in every module let teams assess risks, map controls, and assemble evidence with instructor guidance.
Expert Trainers
Learn from practitioners who deliver compliance programs for regulated financial institutions and coach teams through real audits.
Global Scale
Delivered across time zones with consistent quality, so every regional team trains to the same SAMA control standards.
Measurable Outcomes
Skills Matrix assessments measure each participant's progress from the first lab to the final capstone review.
Connect SAMA Cybersecurity Controls With Clear Ownership and Reviewable Evidence
Edstellar connects SAMA cybersecurity requirements with practical governance and assessment evidence. Teams map controls, assign responsibilities, examine third-party risks, and assemble sample audit materials. A mock readiness review is assessed for supported findings, traceable evidence, clear remediation ownership, and an accurate distinction between documented controls and remaining gaps.
- Step 01
Consult
We examine cybersecurity governance responsibilities, control-mapping confidence, and assessment preparation gaps to focus learning on evidence, accountability, and remediation planning.
- Step 02
Plan
Framework foundations lead into governance, cyber-risk mapping, operational controls, and third-party risk before audit evidence assembly and a mock assessment.
- Step 03
Align
Cybersecurity governance and assurance expertise supports compliance, risk, audit, and security teams, accommodating different levels of technical and regulatory familiarity.
- Step 04
Customize
Fictional control environments and supplier scenarios reflect relevant assessment challenges without exposing vulnerabilities, sensitive system configurations, or confidential audit findings.
- Step 05
Execute
Teams draft policy responsibilities, map controls, and assemble evidence packs, receiving feedback on coverage, traceability, findings quality, and remediation rationale.
- Step 06
Evaluate
We assess the mock review for supported control conclusions, clear evidence gaps, accountable remediation, and reporting that distinguishes readiness issues from verified compliance.
Also from Edstellar
Talent assessments
Psychometric, behavioral, leadership and 360-degree assessment.
→Training needs analysis
Needs analysis, gap identification, and a training roadmap.
→L&D consulting
Learning strategy, content, technology and ROI measurement.
→OD consulting
Org design, succession planning and cultural change.
→Managed training services
Training outsourcing, vendor management, logistics and administration.
→Coaching solutions
Executive and manager coaching that keeps skills in use.
Start an RFP shaped to your needs.
Answer three quick questions about team size, scope, and how often you need the program run, then send the request from the last step. Everything you choose travels with it, so you only fill this in once.
How many team members need training?
SAMA Cybersecurity Framework Compliance Training Packages & Pricing
Where L&D holds an annual budget, license packages price the whole year at once instead of raising a purchase order per workshop. Hours and licenses are pooled across teams, programs and locations, so unused capacity is not stranded in one department.
Starter
120
trainee licenses64 hours of group training
Tailored for SMBs
Growth
320
trainee licenses160 hours of group training
Ideal for growing SMBs
Enterprise
800
trainee licenses400 hours of group training
Designed for large corporations
Custom
Unlimited
trainee licensesDuration set by the rollout
Multi-region and multi-year
Training Packages & Pricing
Choose the training format that works for your team. Pricing is customized based on your requirements, cohort size, and delivery needs.
Request SAMA Cybersecurity Framework Compliance Training for Your Team
Request SAMA Cybersecurity Framework Compliance training for your team. Share your goals, team size, and schedule, or book a discovery call, and our advisors will prepare a tailored plan with availability and pricing.