Features • Screenshots • Quick Start • Mappings • Contributing

An interactive educational tool for assessing compliance with the Saudi Central Bank (SAMA) Cybersecurity Framework. Built as a pure client-side application — no server required, all data stays in your browser.

Built for the Saudi & GCC Cybersecurity Community 🇸🇦🇰🇼🇦🇪🇧🇭🇶🇦🇴🇲

Real-time maturity radar, domain bar charts, gap identification, and framework mapping stats.

Full Arabic/English assessment interface with 6-level maturity scoring per control.

Cross-reference SAMA CSF with ISO 27001, NIST CSF 2.0, CIS Controls, PCI-DSS, and NCA ECC.

⭐ Level 3 is the minimum required by SAMA for all regulated entities.

1. Fork this repository
2. Go to Settings → Pages
3. Select source: main branch and /docs folder
4. Your site publishes at https://[username].github.io/sama-csf-assessment/

# Clone
git clone https://github.com/SiteQ8/sama-csf-assessment.git
cd sama-csf-assessment

# Open directly - no build required (pure HTML/CSS/JS)
open docs/index.html
# or
python3 -m http.server 8080 -d docs

Open http://localhost:8080

Zero dependencies — no npm, no build tools. Just open the HTML file.

SAMA CSF maps to 5 international frameworks:

sama-csf-assessment/
├── docs/                        # GitHub Pages root
│   ├── index.html               # Main application (370 lines)
│   ├── app.js                   # Application logic + framework data
│   ├── style.css                # Full styling with RTL support
│   └── screenshots/             # Documentation screenshots
├── SECURITY.md                  # Security policy
├── CONTRIBUTING.md              # Contribution guidelines
├── CODE_OF_CONDUCT.md           # Code of conduct
├── CHANGELOG.md                 # Version history
├── LICENSE                      # MIT License
└── README.md                    # This file

• Additional assessment questions with deeper control granularity
• Evidence attachment support per control
• Remediation tracker with priorities and timelines
• Historical assessment comparison (trend analysis)
• Export to Excel with framework mapping sheets
• Print-optimized report layout
• Service Worker for full PWA offline support
• Accessibility (WCAG 2.1 AA) improvements

Contributions from the GCC cybersecurity community are welcome!

See CONTRIBUTING.md for guidelines.

• 📝 Assessment Questions — Add or improve control descriptions
• 🌐 Translation — Improve Arabic translations
• 🔗 Mappings — Refine framework cross-references
• 🎨 UI/UX — Interface improvements and accessibility
• 📊 Charts — New visualization types
• 📄 Reports — Enhanced PDF/Excel export
• 🐛 Bug Fixes — Issue resolution

See SECURITY.md for our security policy.

• This tool is unofficial and not endorsed by the Saudi Central Bank (SAMA)
• Results are for guidance only and do not represent official compliance
• For official assessment, refer to SAMA's official documentation
• All data is stored locally in your browser and never sent to any server

• SAMA Cybersecurity Framework (PDF)
• ISO/IEC 27001:2022
• NIST Cybersecurity Framework 2.0
• CIS Controls v8.1
• PCI-DSS v4.0.1
• NCA - National Cybersecurity Authority

MIT License — see LICENSE for details.

_{صنع بـ ❤️ للمجتمع السيبراني في السعودية والخليج
Built for the Saudi & GCC Cybersecurity Community by @SiteQ8 — Ali AlEnezi 🇰🇼}