Introduction For fintechs operating under a SAMA license, cybersecurity maturity isn’t just an IT concern. It is part of maintaining a structured, demonstrable approach to regulatory compliance. The SAMA Cyber Security Framework (CSF) establishes cybersecurity expectations across governance, risk management, and operations.