كيف تكسب 50 ألف ريال من «الأمن السيبراني»؟

In a major developmental step aimed at enhancing digital sovereignty and protecting sensitive infrastructure in the Kingdom, the National Cybersecurity Authority has officially begun implementing a package of strict and new regulatory rules, including the "Rules for Monitoring Cybersecurity Violations and Investigating Them" and the "Rules for Reporting Violations."

The new decisions, which took effect immediately upon publication, included surprises starting from granting inspectors extensive "surprise" powers to access networks, to offering substantial financial rewards for whistleblowers, amid strong warnings against "malicious reports" or using illegal means for hacking.

The Cyber Inspector.. Broad Powers and Immediate Suspension

Under the new regulations, inspectors authorized by the authority now have firm powers for monitoring and inspecting the locations and technical and operational systems of establishments and individuals, and they have the following rights:

• Immediate Entry and Seizure: The right to enter premises, direct access to networks and software, review data and backups, and seize them in case of suspicion.
• Immediate Suspension of Systems: In urgent and necessary cases that threaten the Kingdom's digital security, the Governor of the Authority (or his delegate) has the legal authority to issue an immediate decision to suspend or halt the activities or networks in violation.
• Prohibition of Tampering: The system imposes a complete obligation on all parties for absolute cooperation, and it strictly prohibits withholding records or tampering with or destroying them, while imposing absolute confidentiality on investigations.

Financial Rewards for Whistleblowers

On the other hand, the authority has opened the door for individuals to contribute to protecting the digital space through an official and confidential reporting platform, announcing the provision of encouraging financial rewards, which will be evaluated by a special committee based on the severity of the violation and the importance of the report.

The reward regulations set a specific financial ceiling:

• Reward Value: The system specifies the reward not to exceed 50,000 Saudi Riyals, or the equivalent of (1%) of the total financial penalty collected.
• Strict Eligibility Condition: The authority requires that the report be submitted through "legal means," as the right to the reward is completely forfeited (and may fall under legal penalties) if the report involves unlawful practices such as "illegal entry" or "hacking" into the reported entity's systems to prove the violation.
• Exclusion of Relatives and Affiliates: The system completely prohibits granting rewards to the authority's employees or their relatives up to the fourth degree, or if the disclosure of the violation results from the individual's original job duties.

Firmness Against "Malicious Reports"

In a legal gesture to ensure the protection of establishments and companies from settling scores or misusing the system, the rules emphasize that the authority will take strict legal actions against anyone proven to have submitted a "malicious report," including referring them directly to the relevant judicial authorities to apply penalties against them.

The Kingdom seeks, through this integrated regulatory environment, which relies on electronic and modern technical means in all its activations, to build a safe and compliant cyber community that balances firm deterrence of violators with intelligent incentives for those who maintain the security of the digital homeland.