Workspaces
Pre-configured Waaqi environments aligned to regional regulations and standards.
Saudi Arabia
KSA PDPL Workspace
Operationalise KSA PDPL with pre-mapped controls, DPIA templates, data subject request workflows, and breach notification playbooks.
NDMO Workspace
Implement the NDMO Data Management & Personal Data Protection Standards with ready-to-use domains, specifications, and evidence trackers.
NCA ECC Workspace
Map all 114 NCA ECC controls, manage cyber risks, and produce Arabic-ready evidence packs for Saudi government and CNI entities.
SAMA CSF Workspace
Automate SAMA CSF maturity assessments, maintain the cyber risk register, and generate regulator-ready reports for Saudi financial institutions.
NCA CCC-2:2024 Workspace
Assess cloud cybersecurity requirements through 55 controls, with scope determined by data level and the role of each party.
SAMA ITGF Workspace
Bring IT governance obligations into the same programme as SAMA CSF and BCM, using the crosswalk described in the Waaqi product deck.
SAMA BCM Workspace
Manage SAMA business continuity requirements alongside cybersecurity and IT governance, with linked assessments, evidence and reporting.
KSA Audit (CRF & CCC) Workspace
Prepare assessments for CST CRF and Saudi Aramco CCC through a dedicated audit workspace with catalogue coverage of 215 and 149 respectively.
UAE
UAE PDPL Workspace
Automate data discovery, DPIAs, breach management, cross-border transfers, and consent records for UAE PDPL compliance.
ADHICS V2 Workspace
Run tiered gap assessments, manage health information risks, and generate ADHICS V2 evidence packs for Abu Dhabi healthcare entities.
DESC ISR V2 Workspace
Map DESC ISR V2 controls, manage Dubai-specific cyber risks, and maintain evidence for government and critical infrastructure entities.
NESA IAS Workspace
Map NESA IAS controls, manage UAE national cyber risks, and maintain evidence for government and critical infrastructure operators.
UAE IA v2.1 Workspace
Manage UAE IA v2.1 implementation with a control catalogue covering 15 families, 134 controls and 449 sub-controls.
DESC ISR v3.1 Workspace
Organise Dubai information security compliance with the DESC ISR v3.1 workspace, covering 71 controls and statement-level evidence.
CBUAE ORM Regulation Workspace
Run a structured operational risk programme for banks, insurers and fintechs with 197 obligations scoped to the applicable licence type.
VARA Workspace
Coordinate virtual asset regulatory obligations through a workspace covering all 12 VARA Rulebooks and 130 controls.
DoE Cybersecurity Workspace
Manage energy-sector cybersecurity requirements across IT and ICS/OT with a workspace covering 144 sub-controls.
Bahrain
International
ISO 27001 Workspace
Implement all 93 Annex A controls, manage ISMS risks, and maintain audit-ready evidence for ISO 27001:2022 certification.
SOC 2 Workspace
Map controls to the AICPA Trust Services Criteria, automate evidence collection, and prepare Type I and Type II reports.
PCI DSS Workspace
Scope your cardholder data environment, implement all 12 PCI DSS v4.0 requirements, and maintain assessor-ready evidence.
NIST CSF Workspace
Adopt NIST CSF 2.0 with mapped controls, risk register, current and target profiles, and executive reporting.
ISO 22301 BCMS Workspace
Run business impact analysis, continuity risk assessments, plan and exercise programmes, and produce certification ready evidence for ISO 22301:2019.
AIMS Workspace
Govern AI use cases, run impact assessments, and build an ISO/IEC 42001 AI Management System with pre-mapped controls.
CIS Controls v8.1 Workspace
Prioritise cybersecurity improvements using the CIS Controls v8.1 workspace and its catalogue of 153 safeguards.
AESCSF Workspace
Coordinate Australian energy-sector cybersecurity assessments using the AEMO framework and security profiles SP1 to SP3.
Pakistan
SBP Cyber Shield Workspace
Implement the SBP Cyber Security Framework, manage banking cyber risks, and produce inspection-ready evidence for Pakistani banks and DFIs.
PISF Workspace
Map PISF controls, assess national cyber risks, and maintain audit-ready evidence for government and critical sector organisations.
SECP Workspace
Implement SECP cybersecurity guidelines, manage capital-markets risks, and maintain evidence for brokers, asset managers, and listed companies.
CTDISR Workspace
Map CTDISR controls, classify critical telecom data and infrastructure, manage telecom cyber risks, and maintain inspection-ready evidence for PTA licensees.
Operational Technology
IEC 62443-3-3 & 3-2 Workspace
Assess industrial cybersecurity using IEC 62443-3-3 and 3-2, with zone and conduit risk and security levels SL1 to SL4.
NERC CIP Workspace
Organise Bulk Electric System cybersecurity assessments with the Waaqi NERC CIP workspace, covering four standards described in the product deck.
NCA OTCC-1:2022 Workspace
Assess Saudi operational technology cybersecurity requirements with 47 controls and scope based on facility levels L1 to L3.
OT Security Workspace
Bring operational technology assessments, evidence and remediation into one workspace focused on industrial resilience.