Public AccessFramework OverviewsRegulation summaries, issuing bodies, and last-updated dates are freely accessible below.
Coming SoonImplementation AssetsImplementation checklists, compliance mappings, and maturity tools are planned for a future release of this library.
Updated Jan 2026NESA StandardInformation Assurance (IA)The primary national cybersecurity standard in the UAE, mandating baseline control implementations across government and critical-sector entities.
Updated Dec 2025TDRA GuidanceNational IA Framework (NIAF)A structured framework coordinating information-assurance principles across UAE government and regulated entities.
Updated Feb 2026Federal Decree-Law No. 45Personal Data Protection LawThe UAE's federal data-protection law governing personal data processing, consent, and cross-border transfer requirements.
Updated Oct 2025Dubai GovernmentDESC ISR RegulationInformation security requirements for Dubai government entities and their supply chain and third-party partners.
Updated Nov 2025Telecommunications SectorSovereign Cloud PolicyCloud governance guidance covering data classification, hosting location, and sector-specific protection requirements.
Updated Jan 2026Healthcare SectorADHICS RegulationAbu Dhabi's healthcare information and cybersecurity standard, covering patient health information protection and integrity.
Updated Dec 2025Essential Cybersecurity ControlsNCA ECC-1:2018The National Cybersecurity Authority's baseline control set, mandatory for Saudi government entities and organizations handling critical national data.
Updated Jan 2026Cloud Cybersecurity ControlsNCA CCC-1:2020Compliance requirements for public, private, and hybrid cloud services handling Saudi government or sensitive data.
Updated Sep 2025Critical Systems ControlsNCA CSCC-1:2019Operational guidelines for critical systems, covering data localization, access control, and network architecture containment.
Updated Feb 2026Data Protection LawSaudi Arabia PDPLSaudi Arabia's data protection law governing personal data handling, user consent, and breach notification obligations.
Updated Jan 2026Financial SectorSAMA Cyber Security FrameworkThe Saudi Central Bank's cybersecurity framework for the financial sector, covering governance, risk management, and control implementation.
Updated Oct 2025Operational TechnologyNCA OTCC-1:2022Controls for operational technology environments, focused on isolation, system integrity, and monitoring across critical national infrastructure.
Updated Jan 2026DSIT Board StandardsCyber Governance CodeA board-level accountability framework from the UK Department for Science, Innovation and Technology, linking cyber risk oversight to corporate governance.
Updated Nov 2025Cyber Assessment FrameworkNCSC CAFThe National Cyber Security Centre's methodology for assessing the cyber resilience of critical national infrastructure operators.
Updated Feb 2026Data Protection ActUK GDPR & DPA 2018The UK's data protection regime, setting out individual rights, lawful processing bases, and enforcement penalties.
Updated Dec 2025Sovereign InfrastructureNIS Regulations 2018Security requirements for digital service providers and essential-service operators, including incident reporting obligations.
Updated Feb 2026NCSC-Backed CertificationCyber Essentials PlusAn externally audited, government-backed certification scheme verifying baseline boundary and endpoint security controls.
Updated Aug 2025Trust FrameworkDSIT Digital IdentityStandardized criteria for secure, reusable digital identity services operating across UK commercial and public-sector platforms.
Updated Jan 2026Core Cybersecurity FrameworkNIST CSF 2.0The widely adopted voluntary framework structuring cybersecurity activity around Govern, Identify, Protect, Detect, Respond, and Recover functions.
Updated Nov 2025Federal Control CatalogNIST SP 800-53A comprehensive security and privacy control catalog required across federal information systems and their contractors.
Updated Feb 2026Public MarketsSEC Cybersecurity Disclosure RulesDisclosure requirements for public companies covering material cybersecurity incidents and annual governance reporting.
Updated Jan 2026Healthcare SectorHIPAA Security RuleThe statutory framework protecting electronic protected health information from unauthorized access and disclosure.
Updated Dec 2025Financial ServicesNYDFS Cybersecurity RegulationNew York's cybersecurity regulation for financial services entities, requiring risk assessments, access controls, and executive certification.
Updated Feb 2026Operational DirectivesCISA DirectivesBinding and emergency directives requiring federal agencies to remediate known exploited vulnerabilities within set timeframes.
'%20d='m0%200%2016%2011h61%2061%2061%2061%2060L47%2037h61%2061%2060%2061L16%2063h61%2061%2061%2061%2060L47%2089h61%2061%2060%2061L16%20115h61%2061%2061%2061%2060L47%20141h61%2061%2060%2061L16%20166h61%2061%2061%2061%2060L47%20192h61%2061%2060%2061L16%20218h61%2061%2061%2061%2060z'/%3e%3c/svg%3e){kind=small}