Saudi Arabian Monetary Agency

The Saudi Arabian Monetary Agency (SAMA), also known as the Saudi Central Bank, is the central banking institution of the Kingdom of Saudi Arabia. As the nation's monetary authority, its core mandate encompasses the formulation and implementation of monetary policy, the oversight of the financial system's stability, and the regulation of banks and other financial institutions operating within the country. It manages the kingdom's currency, the Saudi riyal, and is responsible for maintaining price stability and supporting the sustainable economic growth of Saudi Arabia. SAMA operates under the overarching economic vision of the state, playing a critical role in the management of the kingdom's foreign reserves and the operation of payment systems. Its regulatory scope extends across the domestic banking sector, insurance companies, and other finance-related entities, positioning it as the principal guardian of the Saudi financial landscape. The institution's authority is derived from national law, granting it significant independence in executing its supervisory and monetary functions to foster a secure and efficient financial environment.

A defining and publicly documented event in the agency's recent history is the destructive cyber attack it suffered on December 2, 2016. This incident involved a new variant of the Shamoon malware, a potent data-wiping tool previously known for targeting Saudi energy infrastructure. The attack was part of a broader campaign that impacted eight Saudi institutions, with SAMA being a specifically identified victim. The malware's deployment resulted in the permanent damage of data on the agency's computers, representing a severe operational disruption. U.S. and Saudi officials attributed the attack to Iranian actors, framing it within the context of regional geopolitical tensions. This event underscored the critical vulnerability of even the most sovereign financial institutions to state-sponsored cyber warfare and highlighted the persistent threat posed by destructive malware to national financial infrastructure. The attack on SAMA remains a significant case study in the cybersecurity challenges facing central banks globally.