Online fraud in KSA’s banking sector is rising fast, and the true cost to institutions runs three to five times the amount actually stolen. The Saudi Central Bank (SAMA) has responded with a Counter-Fraud Framework that expects every regulated institution to operate at maturity Level 3 or higher, with approved controls, working detection systems, and continuous oversight. For many institutions, the gap between that expectation and today’s identity and access controls is where fraud gets in.

This whitepaper explains what the framework requires across its four domains and shows how NuSummit Cybersecurity’s CIAM approach helps institutions meet those requirements.

With this whitepaper, you can:

• Understand the structure of SAMA’s Counter-Fraud Framework, its four domains of Governance, Prevent, Detect, and Respond, and what Level 3 maturity actually demands.
• See how Customer Identity and Access Management stops account takeover, application fraud, and KYC gaps before they turn into losses.
• Learn how contextual signals gathered before, during, and after login support strong authentication across all channels and real-time risk decisions.
• Explore how Zero Trust and adaptive access, step-up authentication, and session risk scoring map to specific framework controls, from authentication (4.4) to alert and case management (6.2).
• Review the nine ways NuSummit Cybersecurity helps institutions build, automate, and audit a cyber anti-fraud program aligned with SAMA’s expectations.

Download the whitepaper to see how CIAM can move your counter-fraud program from compliance on paper to protection in practice.