nca-ecc

AI-powered GRC audit toolkit for Saudi Arabia and Gulf compliance — generates policies, risk registers, gap assessments, IR playbooks, and board reports mapped to NCA ECC, SAMA CSF, SDAIA PDPL, and 5 other Saudi frameworks. Built with Python, Streamlit, Groq, and RAG.

a PHP library for grounded, retrieval-augmented Q&A over Saudi Arabia's cybersecurity and data-protection frameworks (PDPL, NCA-ECC, NCA-CCC, NCA-CSCC, SAMA-CSF, ISO 27001). No vendor lock-in; corpus is plain JSON.

AI governance compliance checker for Saudi Arabia & the Gulf — built on the AI-GRC Integrated Management Framework (AI-GRC IMF) integrating ISO/IEC 27001:2022 and ISO/IEC 42001:2023 with PDPL, SDAIA, NCA ECC, and SAMA.

GRC notes, advisory engagements, audit & compliance tooling, IAM auditing, Islamic fintech governance, and AI governance research — covering ISO 27001, NIST CSF, SOC 2, SAMA CSF, NCA ECC, GDPR, India DPDP Act, Saudi PDPL, ISO 42001, AAOIFI Shariah Standards, EU AI Act, and NIST AI RMF.

Community crosswalk mapping deployable detection content to NCA ECC-1:2018 controls — audited, honest about coverage, not an NCA attestation.

GRC gap assessment, risk register, and remediation plan for a simulated organization, aligned with NCA ECC

My GRC study notes, organized into 13 modules, covering ISO 27001, NIST CSF, SOC 2, GDPR/DPDP, Saudi frameworks (NCA ECC, NCA CCC, SAMA CSF, PDPL, NCNICC-1:2025), ISO 42001, risk assessment, and GRC tools.

Enterprise cybersecurity, Zero Trust, Defender, Sentinel, MITRE ATT&CK, and regulatory architecture labs.

Security and compliance blueprints as code. Draw a trust zoned reference architecture from a short text source, then review it for control gaps. Eight frameworks: PCI DSS, SWIFT CSP, Zero Trust, HIPAA, GDPR, SOC 2, ISO 27001, IEC 62443. Zero dependencies.

11 open-source presales tools for GCC cybersecurity and AI security: AI agent risk assessment, Zero Trust advisory, regulatory mapping (CBK, NCA, SAMA, PDPL), threat briefings, SOC simulation, phishing analysis and more. Runs locally; two work fully offline. Plus a Claude Code skill for bid drafting.

GRC analyst & auditor portfolio — ISO 27001, SOC 2, NCA ECC · CCC, SAMA CSF, PDPL, GDPR across India and Saudi Arabia. 5 engagements · 4 clients · 33 deliverables.