When your regulator, customer or product demands a control set no platform supports, we build it, map it and make it auditable.
Some obligations do not fit a standard checklist: a regional regulator, a large customer's own control set, or a product with unusual requirements. Custom Frameworks is how we handle those cases.
We build the control set, map it to your obligations and to frameworks you already hold, and make it auditable, so evidence collected once serves more than one purpose. This is especially useful for GCC regulatory regimes such as the Saudi NCA Essential Cybersecurity Controls, the SAMA Cyber Security Framework and PDPL.
ISONEX is based in Manama and works remotely with clients across the GCC, UK, EU and US.
Controls designed around your specific regulator, customer or product obligations.
Experience with NCA ECC, SAMA and PDPL requirements for organisations in the region.
Controls are mapped and documented so they can be assessed, even where your GRC tool has no template.
Our site lists support for the Saudi NCA Essential Cybersecurity Controls, the SAMA Cyber Security Framework and PDPL regimes. Tell us your regulator and we will confirm scope.
Yes. Mapping is a core part of the work, so overlapping controls and evidence are reused across frameworks.
Yes. We work with clients in the UK, EU and US as well, whenever a customer or regulator requires a control set that standard tools do not cover.
Book a free advisory session and we will map your fastest credible route to compliance.
Book a free advisory session