The National Cybersecurity Authority (NCA), in collaboration with Boston Consulting Group (BCG) and International Data Corporation (IDC), has produced its second annual assessment of the Kingdom of Saudi Arabia’s cybersecurity sector, providing a comprehensive, data-driven view of market dynamics, economic impact, and workforce development for the year 2025.
The analysis finds that cybersecurity spending in the Kingdom reached SAR 15.2 billion, reflecting sustained market growth. The private sector accounts for 68% of total expenditure (SAR 10.3 billion), while public sector entities contribute 32% (SAR 4.8 billion). This balanced demand highlights the critical role of both government and private organizations, particularly operators of critical national infrastructure, in driving cybersecurity investment across the economy.
Beyond direct market activity, the cybersecurity sector generates a total economic contribution of SAR 18.5 billion, comprising SAR 9.0 billion in direct impact and SAR 9.5 billion in indirect and induced effects. This translates to 0.40% of Saudi Arabia’s total GDP and 0.71% of non-oil GDP, reflecting a 19% year-on-year increase in the sector’s GDP contribution.
The report is structured around two analytical pillars. The first outlines the methodology, including the classification of cybersecurity products and services, primary data collection across demand and supply, and econometric modeling aligned with standards, achieving over 98% statistical confidence. The second presents key economic indicators, covering market size, expenditure patterns, geographic distribution, and the sector’s contribution to GDP to inform policy and investment decisions.