Board Cybersecurity Programme
Add to watchlistA security operations centre, identity & access management and full ECC compliance.
Budget (BAC)
Actual cost
85% of budget
Progress
Planned 86%
Estimate at completion
SPI · CPI
Forecast finish
On baseline
Monitoring & ControlPhase 8 of 11
Next gate:Handover22 October 2026
- Idea · CompleteIdea · Complete
- Gate into «Feasibility»DecisionGoDate16 August 2024Feasibility · CompleteFeasibility · Complete
- Gate into «Initiation»DecisionGoDate4 December 2024Initiation · CompleteInitiation · Complete
- Gate into «Planning»DecisionConditional goDate2 February 2025Planning · CompletePlanning · Complete
- Gate into «Approval»DecisionGoDate8 March 2025Approval · CompleteApproval · Complete
- Gate into «Procurement»DecisionConditional goDate28 March 2025Procurement · CompleteProcurement · Complete
- Gate into «Execution»DecisionGoDate22 May 2025Execution · CompleteExecution · Complete
- Gate into «Monitoring & Control»DecisionGoDate11 September 2026Monitoring & Control · Current phaseMonitoring & Control · Current phase
- Gate into «Handover»DecisionNot held yetDate22 October 2026Handover · Not startedHandover · Not started
- Gate into «Closure»DecisionNot held yetClosure · Not startedClosure · Not started
- Gate into «Benefits Realization»DecisionNot held yetBenefits Realization · Not startedBenefits Realization · Not started
Scope statement
What the project delivers, what it does not, and when a deliverable counts as accepted.
A security operations centre, identity & access management and full ECC compliance.
In scope
- A security operations centre, identity & access management and full ECC compliance.
- Migration from legacy systems
- ERP integration
Out of scope
- Operation and maintenance after the warranty period
- Work outside the approved site or system boundary
Acceptance criteria
- Main deliverable — stage 1Meets the approved specification, signed off by the business owner
- Main deliverable — final stageMeets the approved specification, signed off by the business owner
Scope baseline
Every approved change creates a new baseline
- 1
SB-1Current2025-03-05
Baseline approved at the planning gate
Budget38.6MFinish2026-12-15
Requirements register
6 requirements of five kinds, with the trace status of each
By type
- Business1
- Functional1
- Technical2
- Regulatory1
- Security1
Fully traced
100%
6/6 · linked to a deliverable, task and test
Test passed
50%
3/6 · test result is a pass
Accepted
50%
3/6 · signed off by the business owner
Display options
| REQ-005-01 | One system for the procedures | Business | Must | In progress | Eng. Nayef H. Al-BuqamiEng. Nayef H. Al-BuqamiDirector General, Information TechnologyP-017n.albuqami@bog.gov.sa | SB-1 | |
| REQ-005-02 | Historical data migration | Technical | Must | In progress | Eng. Yasser M. Al-ZahraniEng. Yasser M. Al-ZahraniDirector, CybersecurityP-026y.alzahrani@bog.gov.sa | SB-1 | |
| REQ-005-03 | Ready operational reports | Functional | Must | In progress | Eng. Nayef H. Al-BuqamiEng. Nayef H. Al-BuqamiDirector General, Information TechnologyP-017n.albuqami@bog.gov.sa | SB-1 | |
| REQ-005-04 | ERP integration | Technical | Could | Approved | Eng. Yasser M. Al-ZahraniEng. Yasser M. Al-ZahraniDirector, CybersecurityP-026y.alzahrani@bog.gov.sa | SB-1 | |
| REQ-005-05 | Data classification | Regulatory | Could | Approved | Eng. Nayef H. Al-BuqamiEng. Nayef H. Al-BuqamiDirector General, Information TechnologyP-017n.albuqami@bog.gov.sa | SB-1 | |
| REQ-005-06 | Identity and access management | Security | Should | In progress | Eng. Yasser M. Al-ZahraniEng. Yasser M. Al-ZahraniDirector, CybersecurityP-026y.alzahrani@bog.gov.sa | SB-1 |
Traceability matrix
Requirement → deliverable → task → test → acceptance. No requirement has a gap.