The National Cybersecurity Authority (NCA) of Saudi Arabia developed the Essential Cybersecurity Controls to conduct a comprehensive study of multiple national and international cybersecurity frameworks and standards. This involved studying related federal decisions, laws, and regulatory requirements, as well as reviewing and leveraging cybersecurity best practices.