trio.so

NCA ECC compliance across every device

The Essential Cybersecurity Controls ask Saudi government entities and critical infrastructure operators to protect every device that connects to their systems. trio.so includes an NCA ECC template (Beta), applies the device controls as policies, checks that they stay on, and keeps the evidence for your assessment. One console for Windows, macOS, Linux, iOS/iPadOS and Android.

Start free trialBook a demo
  • Regional Leader, EMEA, Spring 2025
  • Easiest To Do Business With, Mid-Market, Spring 2025
  • Momentum Leader, Spring 2025
  • High Performer, Middle East, Spring 2025
  • Best Support, Mid-Market, Spring 2025

Rated 4.8 on G2

Endpoint compliance  ›  Frameworks  ›  NCA ECC
  • Disk encryption on2-8Cryptography
    critical0 devices
  • Firewall on2-3Systems protection
    high6 devices
  • Critical patches installed2-10Vulnerability Management
    critical11 devices
  • Passcode applied2-6Mobile Devices Security
    high3 devices
  • Device owner assigned2-1Asset Management
    medium2 devices
Configuration policyDisk encryption policy · 9 devices
Resolved
Resolved after next evaluation
Audit trail

09:42Trio · Finding resolved · Disk encryption on (2-8) · open → resolved after next evaluation · 9 devices

  • Diyar Private Academy
  • Wires & Fabriks
  • Corvuss American Academy
  • Arabi Company W.L.L.
  • Loglass
  • Skill Authority
  • Bright Learners
  • Synonym
  • Trell

ECC reaches every device on your network

ECC applies to government entities and to private companies that own, operate or host critical national infrastructure. Its Cybersecurity Defense domain covers assets, hardening, mobile devices, cryptography and vulnerabilities, and each one lands on laptops, servers and phones. trio.so gives you one place to apply and check them.

  • Asset lists drift2-1 Asset Management expects an inventory you can trust, and spreadsheets go stale.
  • Hardening slips2-3 covers protecting systems and processing facilities, and a setting changed for a quick fix stays changed.
  • Phones count2-6 Mobile Devices Security covers the phones and tablets staff use for work.
  • Patches pile up2-10 Vulnerability Management expects vulnerabilities found and fixed on a schedule.
Devices passing an access check

How it works

How ECC-2:2024 device checks work in trio.so

Turn on the NCA ECC template (Beta) and trio.so maps its device checks to it. Checks run on the schedule you set, so compliance is ongoing instead of a yearly scramble.

  1. Turn on NCA ECCActivate the ECC-2:2024 template (Beta) for Windows, macOS, Linux, iOS/iPadOS and Android.
  2. See the gapsFindings rank failing controls by severity and devices affected, each with a due date.
  3. Fix and verifyChange the policy or the device. trio.so tracks the fix and marks it verified on the next check.
Start free trialBook a demo

Subdomains

ECC subdomains trio.so helps you meet

ECC covers governance, defense, resilience and third parties. The device work sits in the Cybersecurity Defense domain, which the NCA ECC template (Beta) maps to trio.so's checks. Here is how trio.so helps, and where the evidence lives.

ECC subdomainHow trio.so helpsEvidence in trio.so
2-1Asset Management

Lists each device with its owner, serial number, OS and installed apps, on every platform.

A device inventory you can export as CSV.

2-2Identity and Access Management

Syncs users from Microsoft Entra ID, Google Workspace or Okta, provisions accounts over SCIM, and sets passcode policies on devices. Console roles limit who can change what.

The owner on each device record, and passcode policy status.

2-3Information System and Processing Facilities Protection

Applies firewall and USB storage policies, and checks Secure Boot, anti-malware and OS updates on each computer.

Findings for each control, device by device.

2-6Mobile Devices Security

Requires passcode and encryption on phones and tablets, keeps work data in an Android work profile, and locks or wipes lost devices.

Policy status for each phone and tablet.

2-8Cryptography

Turns on BitLocker on Windows and FileVault on macOS, checks disk encryption on Linux, and requires encryption on phones.

Encryption status for each device.

2-10Vulnerability Management

Ranks vulnerabilities by CVSS, EPSS and the KEV list, then patches the OS and third party apps on your schedule.

Patch history: each job, the devices it reached and the result.

Subdomain names from NCA's Guide to Essential Cybersecurity Controls (ECC) Implementation, ECC-2:2024.

Controls

Enforce ECC controls on every device

trio.so sends each control to devices as a configuration policy and reports its status back: applied, failed or pending, device by device.

  • HardeningThe firewall on, USB storage blocked on Windows and Linux, and WPA2 or WPA3 Wi-Fi.
  • EncryptionBitLocker, FileVault, Linux disk encryption and phone encryption.
  • Screen lockAuto-lock minutes, passcode length and lockout after failed attempts.
  • UpdatesOS updates scheduled and checked on every computer.

Monitoring

Keep ECC controls on between assessments

A control that passed one review can be off by the next. trio.so checks every device on a schedule and turns each gap into a finding with a due date.

  • Scheduled checksEvery device is checked on the schedule you set.
  • Findings with due datesFailing controls ranked by severity and devices affected.
  • Verified fixesA finding closes only after the next check passes on that device.
  • Exceptions expireOne control on one device, with an end date. Then the finding opens again.
A laptop failing a check, the setting fixed, and the laptop passing on the next check

Try the NCA ECC template (Beta) in a free trial

Start a free trial, enroll a few devices and turn on the NCA ECC template (Beta). The findings fill in from your own devices.

Start free trialBook a demo
5
platforms, Linux included
$5
Plans start at $5 per device.
14 days
free trial, no credit card
24/5
support from our team
Monday to Friday

Every OS

ECC device checks on every platform

Servers, laptops and phones report different signals. Here is what trio.so checks on each, so you know what your evidence covers.

  • Windows
  • macOS

Windows and macOS

Screen lock, BitLocker or FileVault, firewall, Secure Boot, OS updates and anti-malware, plus the status of every policy.

  • Linux

Linux

Disk encryption, firewall and OS updates, plus the status of core policies.

  • iOS/iPadOS
  • Android

iOS/iPadOS and Android

Whether passcode, encryption and other policies are applied on each phone and tablet, including Android work profiles.

Evidence

Evidence for your ECC assessment

An assessment asks you to show each control in place, not just a policy document. trio.so keeps that evidence as it works, ready to export.

  • Findings per subdomainWhich devices pass and fail each control.
  • Evidence recordsEach check result with its source, time and freshness.
  • Inventory exportEvery device with owner, serial number and OS.
  • Audit trailWho changed what, from template activation to resolved findings.
  • Patch historyEvery patch job and the devices it reached.
  • ExportsEvidence for your assessment file.

Why trio.so

Saudi frameworks next to the global ones

Many Saudi entities answer to more than one framework. trio.so keeps them in the console that already manages the devices.

  • Saudi templates

    NCA ECC and SAMA CSF templates (Beta), in trio.so, next to SOC 2, ISO 27001 and NIST.

  • Pricing you can read

    Plans start at $5 per device. Endpoint compliance is in the Secure plan and above.

  • Rated 4.8 on G2

    Support from real people 24 hours a day, Monday to Friday.

Related

Related compliance features

Pair ECC device checks with these trio.so features.

Integrations

Works with the tools you already use

Stream device events to Splunk for 2-12 log monitoring, see Microsoft Defender for Endpoint alerts per device, bring users in from Microsoft Entra ID or Okta, send device compliance to Vanta, and send alerts to Slack or Microsoft Teams.

  • Vanta
  • Microsoft Defender
  • Splunk
  • Slack
  • Microsoft Teams
  • Microsoft Entra ID
  • Okta

NCA ECC FAQ

The Essential Cybersecurity Controls are the National Cybersecurity Authority's baseline controls for Saudi Arabia. The current version is ECC-2:2024. It has four domains: cybersecurity governance, cybersecurity defense, cybersecurity resilience, and third-party and cloud computing cybersecurity. Our guide to NCA compliance explains the NCA frameworks.

Government agencies in Saudi Arabia, including ministries, authorities and their affiliated companies inside and outside the Kingdom, and private sector entities that own, operate or host critical national infrastructure.

ECC is the baseline for every covered entity. The Cloud Cybersecurity Controls (CCC) add requirements for cloud service providers and the entities that use cloud services.

No tool can on its own. ECC also covers strategy, roles, policies, awareness, business continuity and third parties. trio.so helps with the device controls: it applies them, checks them and keeps the evidence.

Yes. Our NCA ECC compliance checklist for ECC-2:2024 comes as a PDF and an Excel file.

The device part can. With the NCA ECC template (Beta), trio.so checks every device on a schedule and records the evidence, while governance and policy work stay with your team. Read NCA compliance automation.

Yes. Personal Android phones can be managed through a work profile, which keeps work apps and data apart from personal ones.