ncnicc

GRC analyst & auditor portfolio — ISO 27001, SOC 2, NCA ECC · CCC · NCNICC-1:2025, SAMA CSF, PDPL, GDPR across India and Saudi Arabia. 6 engagements · 5 clients · 40 deliverables.

My GRC study notes, organized into 13 modules, covering ISO 27001, NIST CSF, SOC 2, GDPR/DPDP, Saudi frameworks (NCA ECC, NCA CCC, SAMA CSF, PDPL, NCNICC-1:2025), ISO 42001, risk assessment, and GRC tools.

GRC study notes, advisory engagements, audit tooling, IAM auditing, Islamic fintech governance, ServiceNow IRM, and AI governance research — covering ISO 27001, NIST CSF, SOC 2, NCA ECC, NCA CCC, NCA NCNICC-1:2025, SAMA CSF, GDPR, India DPDP Act, Saudi PDPL, ISO 42001, AAOIFI Shariah Standards, EU AI Act, and NIST AI RMF.

Full ServiceNow IRM implementation scoped to the Saudi Arabian regulatory stack — NCA ECC, NCA CCC, NCNICC, SAMA CSF, PDPL, ISO 27001, ISO 42001. 7 frameworks, 579 citations, 7 policies, 23 controls, risk register, and executive dashboard.