A practical, scoped engagement for organisations seeking NESA - UAE support.
How we work
The NESA - UAE engagement follows the activities below. The scope and outputs are agreed with you before work starts.
01
Confirm applicable UAE requirements and system scope.
02
Map controls to owners and existing safeguards.
03
Assess implementation and supporting evidence.
04
Agree a prioritised remediation plan.
05
Review closure evidence and support assessment preparation.
What you can expect
In-scope systems and applicable UAE information assurance mapping
Control assessment with evidence and gap register
Prioritised remediation and assessment-readiness plan
What we need to get started
Applicable regulatory mandate and entity classification
In-scope systems, network architecture and existing control records
Security, risk and compliance owners
NESA - UAE / ENGAGEMENT PROCESS
From first discussion to delivery
Typical activities for this service. The agreed scope determines the work and outputs.
01
Confirm applicable UAE requirements and system scope
02
Map controls to owners and existing safeguards
03
Assess implementation and supporting evidence
04
Agree a prioritised remediation plan
05
Review closure evidence and support assessment preparation
Where an independent certification or attestation applies, the relevant independent body makes its own assessment and decision. Scope and availability are agreed individually.
