Case study · Government & Public Sector
ISO 27001 and UAE IA readiness for a public-sector entity
A public-sector entity faced an upcoming certification audit and regulatory review with policies that were outdated and controls owned by no one.
The challenge
What was at stake
A public-sector entity faced an upcoming certification audit and regulatory review with policies that were outdated and controls owned by no one.
The organisation needed a partner that could understand its environment quickly, prioritise the risks that mattered most and deliver measurable improvement without disrupting day-to-day operations.
Our approach
What we did
- Gap assessment against ISO 27001:2022 and UAE IA
- Rewrote the policy framework and Statement of Applicability
- Established a security steering committee led by our vCISO
- Built a risk register with treatment plans
- Prepared audit evidence and coached control owners
Outcomes
The results
93
controls assessed and mapped
0
major non-conformities at audit
16
weeks from kickoff to audit
More projects
All projectsRelated case studies
Government & Public Sector
Government authority (confidential)
24/7 managed detection and response for a government authority
24/7monitoring coverage
Ongoing (managed)engagement
Retail & E-commerce
Regional fashion retailer
Securing e-commerce and payments for a regional fashion brand
28vulnerabilities found and fixed
8 weeksengagement
Healthcare
Healthcare clinic group, UAE
Protecting patient data across a clinic group
100%clinician accounts on MFA
12 weeksengagement
Talk to an expert
Facing a similar challenge?
Start with a complimentary security audit. Our consultants review your exposure and deliver a prioritised, plain-English action plan.