sama-csf

AI-powered GRC audit toolkit for Saudi Arabia and Gulf compliance — generates policies, risk registers, gap assessments, IR playbooks, and board reports mapped to NCA ECC, SAMA CSF, SDAIA PDPL, and 5 other Saudi frameworks. Built with Python, Streamlit, Groq, and RAG.

Full ServiceNow IRM implementation scoped to the Saudi Arabian regulatory stack — NCA ECC, NCA CCC, NCNICC, SAMA CSF, PDPL, ISO 27001, ISO 42001. 7 frameworks, 579 citations, 7 policies, 23 controls, risk register, and executive dashboard.

My GRC study notes, organized into 13 modules, covering ISO 27001, NIST CSF, SOC 2, GDPR/DPDP, Saudi frameworks (NCA ECC, NCA CCC, SAMA CSF, PDPL, NCNICC-1:2025), ISO 42001, risk assessment, and GRC tools.

Enterprise cybersecurity, Zero Trust, Defender, Sentinel, MITRE ATT&CK, and regulatory architecture labs.

GRC analyst & auditor portfolio — ISO 27001, SOC 2, NCA ECC · CCC · NCNICC-1:2025, SAMA CSF, PDPL, GDPR across India and Saudi Arabia. 6 engagements · 5 clients · 40 deliverables.