Note: The National Cyber Security Agency (NCSA) is the government entity responsible for cybersecurity in Qatar. NCSA serves as the national authority on this topic from a regulatory perspective. Therefore, the data security, data classification, and data privacy controls and corresponding specifications for the Data Security, Privacy, and Other Regulations Domain will be detailed and addressed by NCSA. Standards regarding the operationalization of data classification will be detailed in this document (refer to the DSPO.2.4.1 specification on Data Classification Operations), and compliance to these specifications will be covered under the National Data Management Compliance Assessment by NPC
The controls highlighted below provide entities with a perspective on the Data Security, Privacy, and Classification topics that will be managed by NCSA. Compliance with Data Security and Privacy specifications will be overseen by NCSA, according to their requirements and methodology, and not as part of the National Data Management Compliance Assessment.
