UAE IA Compliance
Navigate UAE Information Assurance Standard V2 and DESC ISR V3: 188 controls, 15 families, one clear compliance path.
Understanding UAE cybersecurity requirements
The UAE's cybersecurity landscape is governed by the Information Assurance (IA) Standard issued by TDRA, with Dubai adding its own DESC ISR V3 layer. Together, they establish 188 controls across 15 security families, a comprehensive framework that explicitly references ISO 27001 as a baseline.
For organisations also operating in Saudi Arabia, our cross-border compliance programme aligns UAE IA with NCA ECC and SAMA CSF, eliminating duplicate effort across jurisdictions.
UAE vs Saudi Arabia: compliance comparison
| Dimension | UAE | Saudi Arabia |
|---|---|---|
| Issuing Authority | TDRA / DESC | NCA / SAMA |
| Primary Standard | UAE IA Standard V2 (2025) | NCA ECC-2:2024 |
| Sector Scope | All government & critical infrastructure | All government & critical infrastructure |
| Financial Sector | CBUAE requirements | SAMA CSF |
| Control Count | 188 controls across 15 families | 108 main controls across 4 domains |
| Cloud Requirements | Embedded in IA Standard | Separate NCA CCC framework |
| Maturity Model | 5-level maturity assessment | Compliance-based assessment |
| ISO 27001 Alignment | Explicitly references ISO 27001 | ~55% overlap with Annex A |
| Audit Frequency | Annual self-assessment | Periodic NCA assessment |
| Data Residency | UAE data sovereignty requirements | Saudi data localisation rules |
Cross-border compliance
Organisations operating across the GCC face multiple overlapping frameworks. Our cross-border compliance programme delivers:
- Unified control framework mapping UAE IA + NCA ECC + ISO 27001
- Single evidence repository serving multiple regulatory requirements
- 30–40% cost reduction vs separate compliance projects
- Coordinated audit preparation across jurisdictions
- Data residency and sovereignty compliance for both countries
15 control families
Comply across the GCC
Whether you're in UAE, Saudi Arabia, or both, we simplify compliance.
UAE Information Assurance FAQ
Find answers to common questions about our services