Guides
Compliance guides for Gulf frameworks
Plain-language guides to who must comply, how to prepare evidence, how each framework lines up with ISO/IEC 27001, and how to evaluate software. Written by Pravitrust, checked against the regulator's own documents, and linked to them.
Saudi ArabiaNCA ECC-2:2024What Saudi Arabia's Essential Cybersecurity Controls (ECC-2:2024) are, who must comply, how to prepare evidence, how ECC relates to ISO/IEC 27001, and how to evaluate software.
Saudi ArabiaSAMA CSFWhat the SAMA Cyber Security Framework is, which financial institutions must comply, how the maturity model works, how to prepare evidence, and how it relates to ISO/IEC 27001.
United Arab EmiratesUAE IA RegulationWhat the UAE Information Assurance Regulation (version 1.1) is, who must comply, how its management and technical controls and priorities work, how to prepare, and how it relates to ISO/IEC 27001.
Abu Dhabi, United Arab EmiratesADHICS v2What the Abu Dhabi Healthcare Information and Cyber Security Standard (ADHICS) version 2 is, which entities must comply, how the Basic, Transitional and Advanced categories work, compliance timelines, and how it relates to ISO/IEC 27001.
United Arab EmiratesUAE PDPLWhat the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) is, its regulator and effective date, how to prepare, and how it relates to ISO/IEC 27001 and ISO/IEC 27701.
QatarQatar NIAWhat Qatar's National Information Assurance Standard (version 2.1) is, who it applies to, how it works with the National Data Classification Policy, how to prepare, and how it relates to ISO/IEC 27001.