A side-by-side comparison of GCC cybersecurity regulations: regulators, frameworks, who must comply and how compliance is audited in six countries.
Our Blogs
Which UAE IA control areas a managed SOC supports, where SOC data should live, what to ask providers and the evidence auditors …
What ISO 27001 certification costs in the UAE: consultancy, audit days, tooling, remediation, surveillance and what drives the timeline.
CBUAE C 1/2026 took effect on 14 September 2026. Here is who it covers, the 4-hour notification rule, pen-testing duties and a …
Federal Decree-Law No. 34 of 2021 is the UAE's cybercrime law. Here is what it criminalises, how it affects employers, incident reporting …
Cyber insurers in the UAE now ask detailed questions about MFA, EDR, backups, privileged access and incident response before quoting. Here are …
EDR is a tool for endpoints, XDR extends detection across your estate, and MDR is a service that runs either for you. …
The SAMA Cybersecurity Framework sets mandatory controls and maturity targets for banks, insurers and financial companies regulated by the Saudi Central Bank. …
PCI DSS v4.0 (now v4.0.1) is mandatory for every UAE merchant and service provider that stores, processes or transmits card data. Here …
DIFC companies follow the DIFC Data Protection Law 2020, onshore companies follow the UAE PDPL, and many groups fall under both. Here …
A virtual CISO gives UAE organisations senior security leadership on a part-time basis. Learn what a vCISO does, what it costs, when …
SOC-as-a-Service gives UAE organisations 24/7 monitoring and response without building a SOC. Here is what it includes, what it costs and the …
What does a penetration test cost in the UAE? Indicative price ranges for web, mobile, network and cloud tests, the factors that …
Attackers do not work from your asset register. EASM finds what you actually expose to the internet, including the systems nobody recorded.
These three terms are used interchangeably by vendors and mean very different things. Here is how to tell what you are actually …
Your suppliers hold your data and your access. Here is how to run vendor risk management that goes beyond a questionnaire at …