Security Edge
Security assessment

A complete posture report — in two weeks.

A focused engagement that reviews your people, process, and technology against industry baselines. Delivered as a board-ready report with a 12-month action plan.

10 working days
Standard engagement
6 domains
Reviewed
120+ pages
Final report
Governance review
Policies, roles, training, and accountability.
Technical review
Architecture, identity, endpoint, and cloud.
Operational review
IR, monitoring, change management, and SDLC.
Roadmap
12-month prioritised plan with cost estimates.
Aligned with
NCA ECCSAMA CSFISO 27001NIST CSF 2.0PCI DSS 4.0SOC 2
Capabilities

Know where you stand. Know what to do next.

NIST CSF baseline

Posture mapped against NIST CSF 2.0 with maturity scoring across all six functions.

Risk register

Top 20 risks identified with impact, likelihood, and recommended treatments.

12-month roadmap

Phased plan with budget estimates and quick wins for the first 90 days.

Board-ready report

A 120-page detailed report plus a 10-page executive summary in Arabic and English.

Stakeholder workshops

Findings presented in working sessions with each business unit, not just dropped as a PDF.

90-day check-in

Free follow-up session 90 days after delivery to track progress and adjust.

Why Security Edge

What to ask any GRC vendor

Objective selection criteria, and how Security Edge answers each one.

The criterion
  • Are NCA ECC and SAMA CSF controls native, or translated from another framework?
  • Are the interface and reports fully Arabic, with correct right-to-left layout?
  • Where is the data hosted, and who can access it?
  • Are alerts linked to the asset, the responsible person and the framework?
  • Are integrations and templates available without a consulting project for each?
Security Edge
  • NCA and SAMA content authored and maintained by our Riyadh team
  • Bilingual on every screen, report and audit packet
  • Hosted in Saudi Arabia by default
  • Alerts joined to asset criticality, responsible person and framework
  • Open APIs and ready-made templates
How it works

Two weeks, four phases, one report.

1

Kickoff

1 day. Scope confirmation, document requests, and stakeholder mapping.

2

Discovery

5 days. Interviews, document review, and technical inspection across all domains.

3

Analysis

3 days. Maturity scoring, risk identification, and roadmap design.

4

Delivery

1 day. Workshops with leadership and bilingual report handover.

Compliance coverage

Baselined against the standards that matter.

We benchmark your posture against the frameworks Saudi regulators and global partners expect to see.

Saudi Arabia2 frameworks
NCA ECCEssential Cybersecurity Controls
SAMA CSFCyber Security Framework
Global3 frameworks
NIST CSF 2.0Cybersecurity Framework
ISO 27001Information Security Management
CIS ControlsCritical Security Controls
FAQ

Common questions

No — a security assessment is broader and advisory. A compliance audit checks against a specific framework with pass/fail outcomes.
Request a demo

See exactly where you stand.

Book an assessment and get a board-ready posture report with a 12-month plan in two weeks.

What happens next
1
Discovery call
30 minutes to understand your scope and frameworks
2
Live walkthrough
Platform tour against your scenarios or a sandbox
3
Tailored proposal
Custom proposal within one business day