THIQA ثقة NCAC by Niyyasoft

18 frameworks from 7 regulators and 761 questions, each mapped to its official control reference: NCA ECC-2:2024, NCNICC-1:2025, CSCC, CCC-2:2024, DCC, OTCC, TCC, OSMACC and NCS; the SDAIA PDPL and NDMO standards; the CST CRF and cloud regulations; the SAMA Cyber Security and Business Continuity frameworks; CMA; DGA; and the health information exchange policies.

Guided setup: answers on sector, size and personal data decide which frameworks are required, and NCNICC Class A or Class B scope is applied automatically. Cloud providers and cloud customers each see only their own controls.

Four answers for every control — implemented, partial, not implemented or not applicable — with evidence tips, notes, bulk answers per domain and autosave.

A weighted score, in which critical controls count three times and high ones twice, with a compliance level, charts, a pillar-by-framework heatmap and a regulator-to-framework compliance map.

A prioritized gap table and a three-phase, 12-month roadmap: critical gaps in the first three months, high ones in the next three, and the rest by month twelve.

Penalty exposure taken from the official texts of the Personal Data Protection Law and the Anti-Cyber Crime Law.

An executive report for the CEO, CIO, CISO, DPO and the board: the bottom line, the decisions needed, the top business risks, who owns what, and the first 90 days.

A plan to 100% compliance: five phases with milestone dates and projected scores, a 12-month time plan, the kinds of technology that close the open gaps, and a risk register.

Word, PowerPoint and Excel exports with native, editable charts, your company name and logo, and a gap action-plan tracker with owners and target dates.

The whole app and every report in English, in Arabic (right to left) or in both side by side.