Abstract
With the advancement and proliferation of technology and increasing cyber-attacks, Information security has become a critical aspect of asset protection. Cognizant of this fact, many organizations and countries like Saudi Arabia have put into place information security and enforcement policies for data security management. In this article we provide an overview of information security management in Saudi Arabia. Based on our research, we raise a number of critical concerns which should be addressed by the information security management authority in Saudi Arabia.