Saudi cybersecurity authority signs cooperation MoU with Pakistan

Saudi Arabia's National Cybersecurity Authority signed a memorandum of understanding with Pakistan's Ministry of Information Technology and Telecommunication at LEAP 2026 in Riyadh, formalising cooperation between the two countries on cybersecurity. Bilateral cybersecurity agreements are easy to overlook next to the billion-dollar infrastructure announcements that dominate a show like this, and they are frequently more consequential than they look. Attacks do not respect borders, and the practical business of defending a country — recognising an intrusion campaign early, attributing it, warning the people about to be hit next — depends on national agencies being willing and able to talk to one another quickly. What agreements of this type generally establish is a channel. They set out who calls whom, what can be shared and under what handling conditions, and how the two sides handle an incident that crosses between them. Without that framework, cooperation happens through personal contacts and ad hoc requests, which works until the moment it is needed most. The NCA is the body that sets and enforces Saudi Arabia's national cybersecurity policy, issuing the controls that government entities and operators of critical national infrastructure are required to meet. It is a regulator with real teeth rather than an advisory centre, which makes its international agreements a matter of national policy rather than technical courtesy. The Saudi-Pakistan technology relationship has been widening for some time, and this show has been part of that. Pakistan's Ignite national technology fund brought ten startups to LEAP , and a broader group of Pakistani technology firms has been at the show pursuing Saudi expansion , including companies opening Riyadh offices. A government-level security agreement sits underneath that commercial activity: firms operating across both markets need their regulators to have a working relationship. Cybersecurity has been one of the running threads of LEAP 2026 rather than a side track. Cloudflare used the event to focus on securing agentic AI infrastructure , and Aramco's agreement set at the show included cybersecurity alongside industrial AI and technology localisation. The common thread is that the Kingdom's rapid build-out of AI and cloud capacity has enlarged what there is to defend, and the defensive apparatus is being expanded in parallel rather than afterwards. The MoU's specific commitments have not been published in detail. Neither side has set out whether it covers operational threat-intelligence sharing, joint exercises, training and capacity building, or standards alignment — and those are materially different undertakings. An agreement to exchange training places is not an agreement to share live indicators of compromise. The detail worth asking about is timing. The value of a cross-border security channel is measured in how fast it moves during an incident, and that is decided by the operating procedures agreed after the memorandum, not by the memorandum itself. The NCA's authority is unusually broad by international standards. Rather than advising, it issues binding controls — the Essential Cybersecurity Controls and the frameworks that follow from them — that government bodies and operators of critical national infrastructure must implement and are audited against. That gives its international agreements weight, because the authority on the Saudi side of any exchange is also the one that sets domestic obligations. The practical work such agreements enable is mostly unglamorous. Shared indicators of compromise let one country's defenders recognise an intrusion that has already been seen elsewhere. Joint exercises expose the coordination failures that only appear under pressure. Training exchanges move scarce expertise between institutions that both have more to defend than people to defend it with. None of it produces an announcement, and all of it determines how an incident goes. The regional context is that Gulf states have been targeted persistently in campaigns aimed at energy, finance and government infrastructure, and that the attack surface in Saudi Arabia specifically has grown alongside the cloud and AI build-out. Every new data centre, cloud region and connected industrial system is additional ground to hold. TechScoop is reporting from LEAP 2026 in Riyadh.