GOVERNANCE · RISK · COMPLIANCE
UAE IA Compliance Matrix
Turn control requirements into a clear assurance story.
Track implementation, evidence and ownership. See the gaps that matter—and keep your next review in focus.
Quick start & methodology · Sources, mapping rules and sample data
For each control family, record the implementation status, the owner, a target date and the evidence you could show an assessor. The summary, the gap list and the per-family bars update as you type, and a draft is kept in this browser until you reset it. Export JSON to keep a dated record, or CSV to work in a spreadsheet.
The matrix opens at family level. Work at the 66 IAR v1.1 sub-families replaces the families with the regulation's sub-families (identifiers, short titles, priorities and mappings), or import your own control list with Import controls (CSV) (template). Mappings are derived from the verified UAE IAR overlay of the GRC Control Crosswalk. Read the sources and mapping rules, the limitations and the dated worked example.
Fictional statuses, to see what a filled matrix looks like.
01 / SET THE CONTEXT
Assessment workspace
02 / YOUR ASSURANCE POSTURE
Compliance at a glance
| Id | Control family / control | ISO/IEC 27001:2022 | NIST CSF 2.0 | Priority | Status | Owner | Target date | Evidence and notes |
|---|
04 / FOCUS YOUR NEXT MOVE
Gaps to close first
Items that are not implemented, ordered by priority then by status. Not-applicable items are excluded.
05 / KEEP A DATED RECORD