Compliance Reference
Compliance Reference
Reference pages for the frameworks we work with daily, written from the primary source documents rather than from other people’s summaries. Where a vendor summary and the regulation disagree, we say so and cite the regulation.
United Arab Emirates
Cloud Security Controls under UAE IA and DESC ISR
TDRA for the UAE Information Assurance Regulation; Dubai Electronic Security Center for the ISR and its Cloud Service Provider expectations
Moving to the cloud does not change which controls apply in the UAE. It changes who is able to evidence them. The UAE Information Assurance Regulation reaches cloud estates throug…
Dubai DESC Information Security Regulation (ISR)
Dubai Electronic Security Center, part of Digital Dubai
The Information Security Regulation is issued by the Dubai Electronic Security Center and is mandatory for Dubai government and semi-government entities, and for the suppliers, cl…
UAE Information Assurance Standards (NESA)
TDRA, published as the UAE Information Assurance Regulation (originally issued under NESA)
The UAE Information Assurance Standards set out 188 security controls across 15 control families, split into 60 management and 128 technical controls. A subset is marked Always Ap…
UAE Personal Data Protection Law (PDPL)
UAE Data Office, under Federal Decree-Law No. 45 of 2021
Federal Decree-Law No. 45 of 2021 governs the processing of personal data of individuals in the UAE, including by controllers and processors outside the country. It grants data su…
Ready to secure your
enterprise infrastructure?
enterprise infrastructure?
Schedule a technical briefing. No sales pitch, just architects and your team.