Assessments

A comprehensive assessment of organizational business continuity management capabilities, evaluating governance, business impact analysis, continuity strategies, plan development, exercising, and continuous improvement. Aligned with ISO 22301:2019, ISO 22313:2020, BCI Good Practice Guidelines, NIST SP 800-34, EU DORA, and Middle East regulatory requirements including SAMA and CBUAE business continuity frameworks.

A comprehensive assessment of organizational crisis management capabilities, evaluating governance structures, team readiness, response planning, communication protocols, and continuous improvement mechanisms aligned with ISO 22361:2022, NIST frameworks, and industry best practices.

A comprehensive maturity assessment for evaluating organizational cyber resilience capabilities across technical and security domains.

A comprehensive assessment of organizational data privacy management capabilities, evaluating governance, data subject rights, lawful processing, data protection by design, international transfers, and breach management. Aligned with GDPR, UAE PDPL, Saudi PDPL, DIFC Data Protection Law, ISO 27701, and global privacy frameworks.

A comprehensive assessment of organizational IT disaster recovery capabilities, evaluating governance structures, recovery planning, backup strategies, testing programs, and continuous improvement mechanisms aligned with ISO 27031:2011, NIST SP 800-34, EU DORA, and regional regulatory requirements.

A comprehensive assessment of organizational financial resilience capabilities, evaluating capital adequacy, liquidity management, stress testing, recovery planning, and financial risk governance. Aligned with Basel III/IV framework, CRR/CRD IV requirements, BRRD recovery planning, EBA guidelines, EU DORA financial stability requirements, and Middle East regulatory frameworks including SAMA and CBUAE capital and liquidity standards.

Evaluate organizational maturity in detecting, responding to, managing, and learning from incidents across all types including security, operational, and service disruptions.

A comprehensive assessment of organizational operational resilience capabilities, evaluating governance frameworks, important business service identification, impact tolerance setting, resource mapping, scenario testing, and self-assessment practices. Aligned with UK PRA/FCA SS1/21, PS21/3, EU DORA, Basel Committee PSMOR, and Middle East regulatory requirements including Saudi SAMA and UAE CBUAE guidelines.

A comprehensive assessment of organizational physical security and environmental control capabilities, evaluating facility protection, access management, surveillance systems, environmental safeguards, and asset security aligned with ISO 27001:2022 Annex A Theme 7, TIA-942, ASIS International standards, and regional Middle East regulatory requirements.

A comprehensive assessment of organizational capabilities to embed resilience principles into systems, processes, and services from inception. Evaluates design patterns, architecture standards, secure development practices, and integration of resilience requirements throughout the system development lifecycle. Aligned with NIST SP 800-160 Vol 2, ISO 22316, DORA resilience requirements, and modern DevSecOps practices.

A comprehensive maturity assessment for evaluating organizational supply chain resilience capabilities, covering supplier management, logistics, risk assessment, business continuity, and emerging supply chain challenges. Designed for sector-agnostic applicability across manufacturing, services, and critical infrastructure.

A comprehensive assessment of organizational third-party risk management capabilities, evaluating governance structures, due diligence processes, contract management, ongoing monitoring, and exit planning aligned with EU DORA Articles 28-30, Basel Committee Principles, US Interagency Guidance, ISO/IEC 27036, and Saudi NCA ECC-2:2024 Domain 4.