National Cybersecurity Authority Essential Controls — penetration testing compliance framework for the Kingdom of Saudi Arabia.