Every framework your organization carries, mapped in one platform
Waaqi ships with pre-loaded control libraries for global standards and regional regulations. Assess once, reuse evidence everywhere, and stay continuously audit ready.
The frameworks you asked for
Start with the standards and regulations that matter most to your business. Each page explains the framework, shows how Waaqi automates it, and links to related workspaces.
ISO 27001
The international information security management standard, with Annex A control mapping, gap assessments, and ISMS automation.
View frameworkSAMA CSF
Saudi Central Bank Cyber Security Framework for banks, insurers, and fintechs operating in the Kingdom.
View frameworkNCA ECC
Essential Cybersecurity Controls for government entities and critical national infrastructure operators.
View frameworkADHICS v2
Healthcare information and cyber security standard mandated by the Department of Health Abu Dhabi.
View frameworkUAE & KSA PDPL
Personal Data Protection Laws for both jurisdictions, with DPIA, breach, consent, and cross-border transfer workflows.
View frameworkInternational frameworks, same control library
SOC 2
Trust Services Criteria readiness with continuous evidence collection.
View frameworkNIST CSF
Identify, Protect, Detect, Respond, Recover, and Govern, operationalized in one platform.
View frameworkGDPR
EU data protection compliance with RoPA, DPIA, and breach workflows.
View frameworkPCI DSS
Payment card security requirements with audit-ready evidence.
View frameworkHIPAA
US healthcare privacy and security rule compliance.
View frameworkRegional and specialist frameworks
UAE
UAE IA v2.1
Manage UAE IA v2.1 implementation with a control catalogue covering 15 families, 134 controls and 449 sub-controls.
View workspaceUAE
DESC ISR v3.1
Organise Dubai information security compliance with the DESC ISR v3.1 workspace, covering 71 controls and statement-level evidence.
View workspaceUAE
CBUAE ORM Regulation
Run a structured operational risk programme for banks, insurers and fintechs with 197 obligations scoped to the applicable licence type.
View workspaceUAE
VARA
Coordinate virtual asset regulatory obligations through a workspace covering all 12 VARA Rulebooks and 130 controls.
View workspaceUAE
DoE Cybersecurity
Manage energy-sector cybersecurity requirements across IT and ICS/OT with a workspace covering 144 sub-controls.
View workspaceSaudi Arabia
NCA CCC-2:2024
Assess cloud cybersecurity requirements through 55 controls, with scope determined by data level and the role of each party.
View workspaceSaudi Arabia
SAMA ITGF
Bring IT governance obligations into the same programme as SAMA CSF and BCM, using the crosswalk described in the Waaqi product deck.
View workspaceSaudi Arabia
SAMA BCM
Manage SAMA business continuity requirements alongside cybersecurity and IT governance, with linked assessments, evidence and reporting.
View workspaceSaudi Arabia
KSA Audit (CRF & CCC)
Prepare assessments for CST CRF and Saudi Aramco CCC through a dedicated audit workspace with catalogue coverage of 215 and 149 respectively.
View workspaceInternational
CIS Controls v8.1
Prioritise cybersecurity improvements using the CIS Controls v8.1 workspace and its catalogue of 153 safeguards.
View workspaceInternational
AESCSF
Coordinate Australian energy-sector cybersecurity assessments using the AEMO framework and security profiles SP1 to SP3.
View workspaceOperational Technology
IEC 62443-3-3 & 3-2
Assess industrial cybersecurity using IEC 62443-3-3 and 3-2, with zone and conduit risk and security levels SL1 to SL4.
View workspaceOperational Technology
NERC CIP
Organise Bulk Electric System cybersecurity assessments with the Waaqi NERC CIP workspace, covering four standards described in the product deck.
View workspaceOperational Technology
NCA OTCC-1:2022
Assess Saudi operational technology cybersecurity requirements with 47 controls and scope based on facility levels L1 to L3.
View workspaceOperational Technology
OT Security
Bring operational technology assessments, evidence and remediation into one workspace focused on industrial resilience.
View workspaceNot sure which frameworks apply to you?
Book a walkthrough and we will map your regulatory obligations to a concrete compliance program in Waaqi.