U.S. cybersecurity firm Resecurity has signed a strategic partnership with Riyadh-based D4DS (Data & Decision Support) to deliver “intelligence-driven cybersecurity solutions” and support data protection compliance for organizations across Saudi Arabia’s government, financial services, energy and broader enterprise sectors.
In a joint announcement, the companies said the partnership is designed to strengthen resilience against evolving threats while supporting digital transformation initiatives aligned with Saudi Vision 2030 priorities. Resecurity will bring its threat-intelligence platforms and analytics, while D4DS will provide regional presence and service delivery to help customers adopt “modern security frameworks” tailored to the Kingdom’s regulatory and operational landscape.
According to the companies, the joint offering will address cyber fraud, identity-based attacks, external threat exposure and complex incident scenarios as Saudi Arabia expands digital infrastructure across key sectors.
Regulatory context
The partnership comes as Saudi Arabia maintains a centralized national cybersecurity compliance regime. Cybersecurity requirements in the Kingdom are set at the national level by the National Cybersecurity Authority (NCA), which describes itself as the country’s authority and reference for cybersecurity, with a mandate to safeguard national security, critical infrastructure, priority sectors and government services.
In its Essential Cybersecurity Controls (ECC–2:2024) document, NCA links the controls to Vision 2030’s push for digitalization and states that entities in scope must maintain ongoing compliance with NCA policies, frameworks, standards and guidelines.
The framework applies to government agencies and their affiliated entities, as well as private sector organizations that own, operate or host Critical National Infrastructures (CNIs). The NCA may evaluate compliance through multiple mechanisms including self-assessments, compliance tooling and field auditing visits.
Separate Saudi government documentation outlining the NCA’s legal powers describes enforcement levers tied to cybersecurity-related licensing and compliance. These measures can include warnings, license suspension or revocation, service suspension and fines up to SAR 25 million, as well as provisions allowing enforcement decisions to be published in local media at the violator’s expense.
Partnership positioning
Within this regulatory landscape, the companies position D4DS as a local execution layer for security operations and compliance programs, while Resecurity frames its role around endpoint protection, risk management and cyber threat intelligence delivered through a unified platform.
D4DS describes itself as a Riyadh-headquartered management consulting firm focused on enabling data-driven transformation across public and private sectors by aligning strategy, technology and people to support digital initiatives.
The companies did not disclose financial terms, customer commitments or timelines for deployments. They said the partnership is intended to support broader adoption of intelligence-led security strategies in line with Saudi Arabia’s national digital trust objectives.