Suspect a breach? Report it immediately — response within 1 hour.Report an incident
EBH Security
Contact us

Cybersecurity services — Oman

Direct engagement for the energy and public sectors, with no local accreditation restriction.

Last updated — August 22, 2026

The local regulatory framework

Oman's cybersecurity framework is carried by the Oman National CERT (OCERT), part of the Ministry of Transport, Communications and Information Technology (MTCIT). It rests on a national cybersecurity framework and a personal data protection law, which set out the requirements applicable to entities handling information systems and personal data.

Concrete obligations

Compliance with the requirements of the national cybersecurity framework carried by OCERT and MTCIT

Compliance with Oman's personal data protection law for the processing of personal data

Implementation of security controls proportionate to the criticality of the information systems operated

Adapted services

Security audit

Compliance & GRC

Security awareness training

Priority sectors

EnergyPublic sector

Delivery modalities

Engagement model

Direct engagement

Languages

Arabic, English, French

Local FAQ

What is the reference cybersecurity authority in Oman?

The Oman National CERT (OCERT), part of the Ministry of Transport, Communications and Information Technology (MTCIT).

Is there a personal data protection law in Oman?

Yes, a national law governs the processing of personal data; its requirements apply to any entity processing such data within Oman.

Can EBH Security operate directly in Oman?

Yes, no local accreditation constraint restricts direct engagement.

What sectors are priorities in Oman?

Energy and the public sector, given their exposure and role in the country's critical infrastructure.

What services do you recommend for a first engagement in Oman?

An initial security audit to map risks, complemented by GRC compliance work and awareness-raising initiatives.

Get in touch