The Dubai Electronic Security Center issues the Information Security Regulation (ISR) for Dubai government entities and other entities within its scope. It defines governance, risk management and control domains, along with compliance assessment by DESC.
We run gap assessments against the ISR domains, build policies and controls, and prepare you for DESC compliance assessments, reusing your ISO 27001 evidence.
Who it is for
- Dubai government entities
- Semi-government and critical sector organisations
- Suppliers to Dubai government
What you gain
- Readiness for DESC assessment
- Controls mapped to ISO 27001
How we get you compliant
Applicability and scoping
Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
Data and process mapping
Build a record of processing or control inventory so obligations can be tied to real systems and owners.
Gap assessment
Measure current practice against each obligation and rank the gaps by legal and business risk.
Remediation roadmap
Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
Evidence and ongoing monitoring
A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.