Cybersecurity Intelligence Resource

Regulatory Watch

Track the global cybersecurity regulatory landscape as it moves — regional monitoring, practice-level analysis and implementation guidance for CISOs and GRC teams working across the UAE, Saudi Arabia, the United Kingdom and the United States.

Explore Regulatory Updates

About Regulatory Watch

Regulatory Watch tracks the cybersecurity decrees, executive orders and national standards that matter to a governance programme — filtered by region, regulator and topic so a CISO can see what changed, what is coming and what it means operationally, without reading every publication in full.

UAE

Saudi Arabia

United Kingdom

United States

Regulatory Monitoring

Ongoing horizon scanning for new and evolving framework publications.

Expert Interpretation

Complex legal language translated into concrete, security-team action lists.

Compliance Guidance

Practice-level guidance mapping overlapping requirements across jurisdictions.

Implementation Support

Operational toolkits, template policies and audit-ready framework maps.

Featured UpdateUnited States · NIST

In Force

NIST Cybersecurity Framework 2.0

Regulator: National Institute of Standards and TechnologyIn force since: Feb 2024

The widely adopted voluntary framework structuring cybersecurity activity around six functions: Govern, Identify, Protect, Detect, Respond and Recover.

CISO Relevance Note

CSF 2.0 adds Govern alongside the original Identify, Protect, Detect, Respond and Recover functions, formalizing board and executive oversight as part of the framework itself. Programmes already aligned to CSF 1.1 typically map existing controls to the new function rather than rebuilding from scratch.

View Full Update

Region

Regulator

Topic

Industry

Effective Date

Showing 16 of 16 updates

UAE · TDRAIn Force

Governance

NESA / Information Assurance Standard

The UAE's baseline cybersecurity standard for government and critical-sector entities, covering control ownership, risk assessment and reporting obligations.

In force since: Aug 2025View Details

UAE · UAE Data OfficeIn Force

Data Protection

UAE Personal Data Protection Law

Federal data-protection law governing consent, cross-border transfer and breach-notification duties for any entity processing UAE residents' personal data.

In force since: Nov 2025View Details

UAE · DESCIn Force

Governance

DESC Information Security Regulation

Information-security requirements for Dubai government entities and the supply-chain and third-party partners that connect into them.

In force since: Oct 2025View Details

UAE · DoH Abu DhabiUpcoming

Healthcare

ADHICS Regulation Revision

Abu Dhabi's healthcare cybersecurity standard, under revision to widen patient-data integrity and third-party access controls across the care network.

Effective: May 2026View Details

KSA · NCAIn Force

Governance

NCA Essential Cybersecurity Controls

The baseline control set mandatory for Saudi government entities and organizations handling critical national data.

In force since: Dec 2025View Details

KSA · NCAUpcoming

Sovereignty

NCA Cloud Cybersecurity Controls

Compliance requirements for public, private and hybrid cloud services handling Saudi government or sensitive data, extending to additional service tiers.

Effective: Apr 2026View Details

Regulatory Compliance Timeline

Milestone tracking across recent publications, pending consultations and upcoming enactment dates.

Recently Published

UK GDPR & Data Protection Act 2018Feb 2026

SAMA Cyber Security FrameworkJan 2026

Currently In Force

NCA Essential Cybersecurity ControlsIn Action

HIPAA Security RuleIn Action

Effective Soon

CISA Binding Operational DirectiveMar 2026

NCA Cloud Cybersecurity ControlsApr 2026

Consultation Closing

Cyber Essentials Plus Scheme UpdateJul 2026

SEC Cybersecurity Disclosure Rules AmendmentSep 2026

Related GRC Resources

Contextual implementation guidance, framework references and educational sessions alongside this watch feed.

Framework Guides

Reference summaries of the major international standards frameworks map to.

Compliance Checklists

Advisory support turning framework requirements into audit-ready control sets.

CISO Insights

Practice-level digests on governance, board alignment and executive reporting.

Industry Reports

Guidance on reading and evaluating third-party research and benchmark studies.

Webinars & Workshops

Live sessions on applying regulatory and framework requirements in practice.

Case Studies

How organizations have approached real framework and regulatory programmes.

Need Help Interpreting a Regulatory Update?

Cyber Risk, Compliance & ISMS Management turns a new requirement into an implementation plan — control mapping, policy updates and an audit-ready evidence trail.

Talk to a CISOaaS Advisor Explore Cyber Risk, Compliance & ISMS

Managed cyber governance for organizations that need continuous CISO leadership, Cyber GRC expertise and operational governance — without building the entire capability in-house.

CISO Governance Brief — practical insights on cyber governance, regulatory developments, risk, compliance and CISO leadership.