sama-csf

AI-powered GRC audit toolkit for Saudi Arabia and Gulf compliance — generates policies, risk registers, gap assessments, IR playbooks, and board reports mapped to NCA ECC, SAMA CSF, SDAIA PDPL, and 5 other Saudi frameworks. Built with Python, Streamlit, Groq, and RAG.

GRC study notes, advisory engagements, audit tooling, IAM auditing, Islamic fintech governance, ServiceNow IRM, and AI governance research — covering ISO 27001, NIST CSF, SOC 2, NCA ECC, NCA CCC, NCA NCNICC-1:2025, SAMA CSF, GDPR, India DPDP Act, Saudi PDPL, ISO 42001, AAOIFI Shariah Standards, EU AI Act, and NIST AI RMF.

Full ServiceNow IRM implementation scoped to the Saudi Arabian regulatory stack — NCA ECC, NCA CCC, NCNICC, SAMA CSF, PDPL, ISO 27001, ISO 42001. 7 frameworks, 579 citations, 7 policies, 23 controls, risk register, and executive dashboard.

My GRC study notes, organized into 13 modules, covering ISO 27001, NIST CSF, SOC 2, GDPR/DPDP, Saudi frameworks (NCA ECC, NCA CCC, SAMA CSF, PDPL, NCNICC-1:2025), ISO 42001, risk assessment, and GRC tools.

Enterprise cybersecurity, Zero Trust, Defender, Sentinel, MITRE ATT&CK, and regulatory architecture labs.

GRC analyst & auditor portfolio — ISO 27001, SOC 2, NCA ECC · CCC · NCNICC-1:2025, SAMA CSF, PDPL, GDPR across India and Saudi Arabia. 6 engagements · 5 clients · 40 deliverables.