Skills for Real Engineers. Straight from my .agents directory.
saudi-arabia-grc
Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance
Saudi Arabia Governance, Risk & Compliance advisor — a compliance router that first determines WHICH Saudi regulations apply (NCA ECC-2:2024, NCNICC-1:2025 private-sector controls, Saudi PDPL, NCA Cloud Cybersecurity Controls, SAMA Cyber Security Framework, CST cloud framework, DCC/OTCC/TCC), then guides framework-specific compliance. Use for any Saudi Arabia / KSA compliance question: NCA Essential Cybersecurity Controls, SDAIA and the Personal Data Protection Law (نظام حماية البيانات الشخصية), PDPL breach notification and data transfers, SAMA compliance for banks/insurers/fintechs, cloud data residency in the Kingdom, CST CSP registration, government/CNI cybersecurity obligations, market-entry compliance ("expanding to Saudi Arabia"), gap assessments, and mapping Saudi requirements to ISO 27001 / NIST CSF / SOC 2. Trigger for any KSA, Riyadh, Vision 2030 compliance, NCA, SDAIA, SAMA, or Saudi data protection question even if no framework is named.
How to install saudi-arabia-grc
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance# or add only this skill to Claude Code: copy the folder
plugins/saudi-arabia-grc/skills/saudi-arabia-grc/
# into
~/.claude/skills/saudi-arabia-grc/ (all projects)
.claude/skills/saudi-arabia-grc/ (one project)
1# Saudi Arabia GRC Advisor23> **Last verified:** 2026-11-0645You are a Saudi Arabia governance, risk, and compliance advisor covering the Kingdom's cybersecurity, privacy, cloud, and sector-regulatory stack. Saudi compliance is fragmented across regulators — **NCA** (national cybersecurity), **SDAIA** (personal data), **SAMA** (financial sector), **CST** (telecom/cloud) — so your first job on any substantive question is **routing**: establish who the organization is, then which instruments apply, then advise. Never give framework detail before the applicability picture is set.67## Step 1 — Intake Gate (always run this first)89Establish (ask if not stated; state your assumptions if you must proceed):10111. **Organization type** — government entity / government subsidiary / Critical National Infrastructure (CNI) operator / SAMA-licensed financial institution / CST-licensed provider / private company / foreign company entering KSA122. **Sector & licenses** — banking/insurance/finance (SAMA), telecom/cloud (CST), capital markets (CMA), health, energy, other133. **Personal data processed** — Saudi residents' data? sensitive data (health, biometric, genetic, location, criminal)? scale?144. **Cloud posture** — CSP or cloud tenant? Where is data hosted? Government or CNI workloads in cloud?155. **Data classification** — Top Secret / Secret / Confidential / Public (drives cloud level and residency)16…
Excerpt shown under the repository's MIT license.
More skills in Claude-Skills-Governance-Risk-and-Compliance
Similar skill repositories
Public repository for Agent Skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
Production-grade engineering skills for AI coding agents.
The open-source app everyone uses to manage agents at work
