SAMA IT Governance Regulation

The Saudi Central Bank("SAMA") has established an Information Technology Governance
Framework ("the Framework") to assist organizations regulated by SAMA ("the Member Organizations") in effectively identifying and mitigating IT risks.

The framework will be used toassess the maturity level and effectiveness of IT controls at Member Organizations on a regular basis. The framework is founded on SAMA requirements
as well as industry IT standards.

To assist organizations that havealready acquired or have one or more Ivanti solutions, we created the matrix below to help you understand the element relationship between the SAMA ITGV and Ivanti Solution.

The framework's implementation at the Organizationswill be subject to a periodic self-assessment. The Member Organizations will conduct the self-assessment using a questionnaire. SAMA will review and audit the self-assessments to determine the Member Organizations' level of compliance with the framework and IT maturity.

In order to meet the maturity matrix requirements, we offerthe SAMA IT Governance maturity program as part of our offering.