Compliance ModuleGRC Vantage
10 bundled packs · Excel and YAML import

Compliance.
Every framework, mapped and current.

Saudi and international frameworks loaded with the regulator's own control hierarchy, graded on a six-level maturity scale with fingerprinted evidence and three-stage sign-off, and reported in Arabic or English — so your team assesses against what regulators actually inspect, not a spreadsheet.

Module overview

Compliance

Assessable controls
952 across ten bundled Saudi and international packs
Frameworks
10 bundled packs; others via Excel or YAML
Coverage
Saudi-first + international
Evidence
SHA-256 fingerprint, versions, reuse across frameworks
Reporting
Excel, PDF and Word in Arabic or English
Perspective

Inspectors see the canonical control IDs they recognise.

Every framework is built from its official reference hierarchy — ECC-1-1-1, SAMA-CSF-3.4 — not a US template bent to fit. The structure your regulator wrote is the structure your team assesses against.

GRC Vantage
Saudi-first framework engine
Framework library

Ten bundled packs, more by import*

Ticked packs ship with every assessable control; the others load from an Excel or YAML template.

National — NCA
NCA ECC
Essential Cybersecurity Controls (ECC-2:2024)
NCA CSCC
Critical Systems Cybersecurity Controls
NCA CCC · OTCC · DCC · TCC
Sector-specific control sets — load by template
Financial — SAMA
SAMA CSF
Cyber Security Framework
SAMA BCM
Business Continuity Management
SAMA IT Governance
IT governance framework — load by template
International
ISO 27001
Information security management
SOC 2
Trust Services Criteria — load by template
NIST CSF 2.0 · CIS v8 · SWIFT CSCF
Bundled international packs
Privacy
PDPL
Saudi Personal Data Protection Law
GDPR · PCI DSS
Load by template
+ Any framework from an Excel or YAML template, versioned with a diff and migration

*Bundled packs as shipped in October 2026. NCA ECC-2:2024, ECC-1, CSCC, SAMA CSF, SAMA BCM, NDMO PDPL, ISO 27001:2022, NIST CSF 2.0, CIS v8 and SWIFT CSCF v2025.

See your compliance posture against every Saudi regulator — in one workspace.

Run a free assessment

No signup required. Get an instant readiness score and a prioritised remediation roadmap, delivered from Riyadh and Dammam.