Free · ten minutes
How ready are you for UAE IA compliance?
Answer twenty questions on the requirements of UAE Information Assurance Regulation (TDRA), in four steps. Your readiness report, with your score for each area and your priority actions, is sent to your e-mail.
Standard: UAE Information Assurance Regulation (TDRA)Choose a different standard
Keep exploring
More quick readiness checks
What the UAE IA Standard readiness check covers
The check measures your management and technical information security controls against the UAE Information Assurance requirements. Its twenty questions are grouped into four areas: Scope and management controls; People, assets and physical security; Technical protection; and Suppliers, incidents, continuity and improvement. Each answer is scored and weighted; the questions marked “Double weight” are the ones designating authorities and customers examine first.
What you get
A readiness report sent to your e-mail: an overall score with one of four readings — Well prepared, Nearly there, Gaps to close or Starting out — a score for each of the four areas, your priority actions, a suggested order of work and a table of all your answers.
How to use it
Answer from evidence rather than intention: if a control or requirement exists on paper but is not operating, score it as not operating. Share the report with the people who own each area, and use the UAE IA Standard hub for the requirements, the route to UAE IA compliance and what it costs.
Questions people ask
Is the UAE IA Standard readiness check free?
Yes. It is free, takes about ten minutes and carries no obligation. Your readiness report is sent to your e-mail when you submit your answers.
Is this a regulator review or a certificate?
No. It is a self-assessment that shows where you stand before any review. There is no UAE IA certificate: compliance is assessed by the authority that designated your entity, and customers weigh your evidence in their own audits. Sterling's expert and experienced consultants prepare organisations for those reviews; Sterling does not assess compliance for any authority.
What happens after I submit my answers?
Your readiness report is sent by e-mail: your overall score and reading, a score for each of the four areas, your priority actions, a suggested order of work and a table of all your answers. If you want help with the result, a Sterling consultant can walk through it with you in a free discovery call.
Who should answer the questions?
Your information security lead, with input from IT, records management, HR and procurement. Answer from the evidence you could show today, for the boundary your designation or contract sets.
How is the score worked out?
Each answer is scored, and the questions marked “Double weight”, the ones designating authorities and customers examine first, count twice. The total gives one of four readings: Well prepared, Nearly there, Gaps to close or Starting out.
Who is the UAE IA readiness check for?
Entities designated as critical under the UAE Critical Information Infrastructure Protection (CIIP) Policy, which must implement the Information Assurance Regulation, and organisations that hold or process information for them where a contract requires the controls. Confirm with your designating authority which version of the requirements applies to you.