Regulation briefs
The mandates, in plain language
A regulation brief states what a mandate requires, who it binds, when it applies and who supervises it, then shows how DECIMA answers each requirement from live evidence. Each brief is written to be quoted, in every language this site is published in.
Pick the mandate your regulator names.
Briefs
DORA — Digital Operational Resilience Act
The EU’s Digital Operational Resilience Act: ICT risk management, incident reporting within fixed clocks, resilience testing and third-party risk for financial entities.
Read the briefSAMA Cyber Security Framework
The Saudi Central Bank’s Cyber Security Framework: four domains, a maturity scale and an annual self-assessment for every SAMA-regulated institution.
Read the briefNCA Essential Cybersecurity Controls
The Saudi National Cybersecurity Authority’s Essential Cybersecurity Controls: the national baseline for government entities and critical national infrastructure.
Read the briefBangladesh Bank ICT Security Guideline
Bangladesh Bank’s Guideline on ICT Security for banks and non-bank financial institutions: the control areas the inspection checks.
Read the brief
Map this mandate to your own controls
Bring one requirement and one system; we will show the same control as a policy statement and as a dated, re-verifiable verdict.
Talk to us