OT Cyber Compliance
An ECC-2 Compliance Checklist for OT Operators
Lantern Systems · 10 Sep 2026 · 1 min read
ECC-2 and the NCA’s OT controls have moved cybersecurity from policy documents to audited obligations for critical-infrastructure operators in Saudi Arabia.
The practical route is a fixed-fee gap assessment: inventory the OT estate, map current controls to the required families, and price remediation before regulators or insurers ask.
Operators who treat compliance as a monitoring program rather than a one-time project pass revalidation with less friction.
Frequently asked
What does an ECC-2 gap assessment cover?
Asset inventory, network segmentation, remote-access controls, logging and monitoring, incident response, and third-party access — mapped against ECC-2 and NCA OT control families.