PCI DSS v4.0 (now v4.0.1) is mandatory for every UAE merchant and service provider that stores, processes or transmits card data. Here are the 12 requirements, what changed, the timeline and a practical checklist.
DIFC companies follow the DIFC Data Protection Law 2020, onshore companies follow the UAE PDPL, and many groups fall under both. Here is how the two laws differ and how to comply with each.
Your suppliers hold your data and your access. Here is how to run vendor risk management that goes beyond a questionnaire at onboarding.
The Central Bank of the UAE sets cyber risk expectations for licensed financial institutions. Here is what the requirements cover and where banks typically fall short.
ADHICS is the mandatory information security standard for Abu Dhabi healthcare entities. Here is who it applies to, what it demands, and how to prepare for assessment.
DESC ISR certification is mandatory for Dubai government and semi-government entities. Here is what the standard covers, who it applies to, and how the audit process runs.
The UAE Information Assurance (IA) Standard — still widely called “NESA compliance” after the authority that issued it — is
The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the “PDPL”) is the country’s first federal data
ISO 27001 certification proves to customers, regulators, and partners that your organization runs a documented, audited information security management system
