Standards
One control set, many obligations
Organisations in the region often answer to several regulators at once. We map your obligations, find the overlap and build one control set that satisfies them all.
Our approach
Map, align, assure
Step 01
Map
We identify every framework that applies to you and where they overlap.
Step 02
Align
We build one integrated control set and a roadmap to close the gaps.
Step 03
Assure
We independently test readiness before your regulator or auditor does.
UAE
National and emirate standards
UAE Information Assurance Standards
Formerly published by NESA. Applies to government entities and critical information infrastructure. We help with gap assessments, control roadmaps and compliance readiness.
Dubai Information Security Regulation (ISR)
Issued by the Dubai Electronic Security Center for Dubai government entities and their suppliers. We help with alignment, supplier readiness and assessments.
ADHICS
Abu Dhabi Healthcare Information and Cyber Security Standard for health providers. We help with readiness, implementation planning and audit preparation.
UAE Personal Data Protection Law (PDPL)
Federal Decree Law No. 45 of 2021, for organisations processing personal data. We help with privacy impact assessments, data mapping and governance.
UAE National Encryption Policy
Announced in November 2025. Calls on government entities to adopt officially approved plans for moving to post quantum cryptography. We help with cryptographic inventory, risk assessment and the transition plan.
UAE financial sector
Financial regulators
Central Bank of the UAE (CBUAE)
Information security requirements for banks, insurers and payment providers. We help with gap assessments, board reporting and regulatory assurance.
DFSA and FSRA
Cyber requirements for firms in the DIFC and ADGM financial free zones, including the ADGM Cyber Risk Management Framework. We help with alignment and readiness.
SCA and VARA
Requirements for securities and virtual asset firms. We help with governance and control design.
International
International standards
ISO 27001
Information security management. We help with readiness, implementation and internal audit.
ISO 42001
AI management systems. We help with AI governance design and certification readiness.
ISO 27701
Privacy information management. We help extend your ISMS to cover privacy.
ISO 22301
Business continuity management. We help with continuity planning and exercises.
NIST Cybersecurity Framework 2.0
A common language for cyber risk. We help with maturity assessments and target profiles.
NIST AI Risk Management Framework
Managing AI risk. We help with AI risk assessments and controls.
PCI DSS v4.0
Payment card security. We help with scoping, readiness and assurance oversight.
SWIFT Customer Security Programme
Security for SWIFT connected institutions. We help with attestation readiness.
IEC 62443
Operational technology security. We help with OT governance and risk.
GDPR
For organisations handling EU personal data. We help align regional and EU privacy obligations.
NIST post quantum standards (FIPS 203, 204 and 205)
The first standardised post quantum algorithms for key exchange and digital signatures. We help plan your migration to them.
Our foundation
Grounded in some of the world’s most demanding frameworks
Our methods were built against Australian government high assurance frameworks, including the ASD Information Security Manual, Essential Eight and the Protective Security Policy Framework. That discipline carries into every regional engagement.
Start a conversation