Saudi Arabia OTCC-1 compliance: what auditors check versus what attackers exploit | Vulnox Blog