The information systems (IS) of the Authority of People with Disability (APD) are a fundamental pillar for daily operations and for supporting organizational functions. All information that is shared, created, or utilized within the APD systems is protected to the highest possible standard, taking into account its significance. This includes: ​

• Protecting the confidentiality and integrity of information assets.

• Ensuring the implementation of high-level and consistently repeatable information security controls in a timely and cost-effective manner for the benefit of all stakeholders at the APD.

• Ensuring organizational continuity and minimizing the impact of disruptions to operational functions by preventing and reducing the effects of security incidents. NCA's guidelines and controls  

• Ensuring compliance with local regulations and legislative requirements from the Ministry of Finance and the National Cybersecurity Authority (NCA). For details on the controls, please visit the link to the NCA's guidelines and controls. NCA's guidelines and controls.

• Supporting the National Cybersecurity Strategy, which aims to create a secure and reliable Saudi cyberspace that enables growth and prosperity. For details on the strategy, please visit the link to the National Cybersecurity Strategy. .

• Adhering to information security controls in alignment with the ISO/IEC 27001 international standard.

It is important for users to adhere to the following guidelines when using APD’s website:

• Passwords must be kept secure and should never be written down or disclosed to others, whether by phone, email, or entering them on untrusted and unauthorized sites.

• Avoid choosing easily guessed passwords, such as your name, birthdate, or phone number.

• It is recommended to regularly change your password to prevent others from using or guessing it.

• Do not access the APD website through links received by emails or other websites.

• Ensure that the APD website link is secured with HTTPS and includes a padlock symbol before accessing it.

• Do not leave your computer unattended while using the APD website, as others may access your account during that time. Log out when finished.
  
  To protect the personal device, the following measures should be considered:

• Ensure a genuine version of the operating system is used on the device.

• Regularly install operating system updates, especially security updates.

• Always keep an updated antivirus software version to protect the device and information.

• Enable the firewall program that comes with the operating system.

​

Use your personal device when accessing APD’s website and avoid using shared devices, such as those in internet cafes.

 

Controls and guidance issued by the National Cybersecurity Authority