Enquire Us

Contact Us

This field is for validation purposes and should be left unchanged.

ISR COMPLIANCE
IN THE UAE

For Faster, Transparent and Cost Effective
Compliance Support

Contact Us

This field is for validation purposes and should be left unchanged.

ISR COMPLIANCE
IN THE UAE

For Faster, Transparent and Cost Effective
Compliance Support

ISR (INFORMATION SECURITY REGULATION)

WHAT IS IT?

The ISR, or Information Security Regulation, is the information security framework issued by the Dubai Electronic Security Center (DESC). It sets the minimum requirements that protect the confidentiality, integrity and availability of information held by Dubai Government entities, and it is technology neutral rather than tied to any specific product or platform.

DESC was established under Dubai Law No. 11 of 2014, which was later replaced by Law No. 15 of 2024, and it maintains the ISR as the baseline for government information security across the Emirate of Dubai. The regulation is structured into domains, main controls and sub-controls covering governance, operations and assurance. Its latest revision, ISR Version 3.0, updates these controls to reflect current information security best practice.

Our Locations

Achieve ISR Compliance in the UAE: Protect the Confidentiality, Integrity and Availability of Information

When an organisation aligns with the ISR, it puts structured measures in place to manage sensitive information securely across people, processes and technology. This matters for organisations that serve Dubai Government, as the Emirate continues to strengthen its cyber security posture.

By adopting the DESC Information Security Regulation, an organisation establishes a repeatable approach to identifying threats and applying controls, with continuous monitoring of its security measures. This helps prevent data breaches and manage security incidents efficiently.

The ISR is built around protecting personal and official information so that Dubai Government entities and their partners maintain trust with citizens and stakeholders. Demonstrating compliance signals that your organisation takes information security seriously in a market where data protection is a priority.

GET OUR FREE CONSULTATION TODAY

Experience best in class services by Univate’s information security consultants from GAP Analysis to final assessment and till you achieve compliance

ISR (Information Security Regulation) in the UAE

Key Benefits of ISR Compliance for UAE Organisations

There are numerous benefits that Dubai Government entities and their suppliers can derive from ISR compliance:

  • Enhanced Security: Aligning with the ISR ensures your organisation follows recognised information security controls, helping protect sensitive data from unauthorised access.
  • Regulatory Alignment: The ISR is the mandated baseline for Dubai Government information security. Meeting it demonstrates your commitment to the requirements set by DESC.
  • Improved Stakeholder Trust: It is easier for government partners and citizens to trust entities that put information safety first. Aligning with the DESC ISR shows that your organisation takes data protection seriously.
  • Risk Management: The domains and controls help you identify security threats and implement measures to reduce them, lowering the likelihood of data breaches and other incidents.
  • Eligibility to Serve Government: ISR compliance is often a precondition for working with Dubai Government entities, distinguishing your organisation from competitors that cannot evidence the same assurance. Learn more from the Dubai Electronic Security Center and from Univate’s information security consultants in the UAE.

Customised ISR Implementation Plans for UAE Organisations

Every entity that serves Dubai Government is different, so an ISR implementation must be tailored to its structure, systems and risk profile. This focused approach keeps the compliance effort practical and aligned with your operational goals.

The work usually starts with a comprehensive risk assessment against the ISR domains and controls. This identifies where your organisation is most exposed, so remediation can be prioritised. Once the gaps are understood, policies, procedures and technical controls are put in place and evidenced ahead of a DESC compliance review.

GET OUR FREE CONSULTATION TODAY

Experience best in class services by Univate’s information security consultants from GAP Analysis to final assessment and till you achieve compliance

ISR Compliance Cost in Dubai

In the UAE, the cost of achieving ISR compliance depends on several factors. The size of your organisation, the complexity of your IT infrastructure and the security controls already in place all influence the effort involved. Smaller entities with few systems in scope typically incur lower costs than large organisations with complex networks.

Typical cost drivers include the initial gap and risk assessment, implementing the required policies and technical controls, training staff, and the internal audit and evidence gathering needed before the formal DESC compliance review. Investing early in a structured programme usually reduces rework later.

ISR compliance cost in Dubai

Meet Dubai Government Requirements with ISR Compliance

Organisations operating with Dubai Government must meet the information security requirements set by DESC. The Emirate has invested heavily in strengthening its cyber security architecture, which is why entities in scope are expected to align with the ISR.

Demonstrating ISR compliance shows that your organisation respects local requirements while safeguarding sensitive information through robust controls within its information security management system. It also provides a clear, auditable baseline that supports continued eligibility to handle Dubai Government data.

ISR compliance in the UAE

Expert Consultation for ISR Compliance in the UAE

Achieving ISR compliance can be a demanding exercise, which is why it helps to work with professionals who understand both the DESC requirements and the realities of operating in the UAE.

Experienced consultants can guide you through every stage of the programme. They help conduct a thorough risk analysis against the ISR domains, develop tailored action plans, and make sure the required documentation and evidence are ready for the DESC compliance review.

To help us better address your ISR requirements,

Please contact us

OUR CLIENTS

Datasoft, BangladeshTCS eSERVEBan Vien, VietnamCME, LebanonWakeb Data, Saudi ArabiaSolutions by stc, Saudi ArabiaMEWAStradegiInfrrdDatasoft, BangladeshTCS eSERVEBan Vien, VietnamCME, LebanonWakeb Data, Saudi ArabiaSolutions by stc, Saudi ArabiaMEWAStradegiInfrrd
Datasoft, BangladeshTCS eSERVEBan Vien, VietnamCME, LebanonWakeb Data, Saudi ArabiaSolutions by stc, Saudi ArabiaMEWAStradegiInfrrdDatasoft, BangladeshTCS eSERVEBan Vien, VietnamCME, LebanonWakeb Data, Saudi ArabiaSolutions by stc, Saudi ArabiaMEWAStradegiInfrrd

CLIENT TESTIMONIALS

Google
Sultan profile picture
Sultan
30/07/2023
Google star 1Google star 2Google star 3Google star 4Google star 5Trustindex verifies that the original source of the review is Google.
It was really a great partnership with their team.
Google
Amulya P profile picture
Amulya P
25/07/2023
Google star 1Google star 2Google star 3Google star 4Google star 5Trustindex verifies that the original source of the review is Google.
I had the pleasure and opportunity of working with Univate Solutions on couple of High Maturity (ML5) CMMi appraisals & found them to be one of the best Authorised CMMi (ISACA’s) Partner in terms of Understanding, Approach, Collaboration & Execution throughout the whole journey. As the SEPG head, got extensive exposure to interact/work with them during the appraisals and got to know a lot more on the models, the value proposition & Process approach. It was an incredible journey! Their professional approach, understanding of the model and execution process was invaluable for the successful appraisal. Their approach right from GAP Analysis to Final Assessment through implementation was a journey of amazing learning experience for everyone. Univate Solutions provided very practical guidance and advice on our processes tailored to our type of business. They were excellent in communicating with our team on our progress and always made our people feel comfortable during the process. Univate Solutions excels at mapping an organization’s process to the model as much as possible, identifying where shortfalls lie, and helps organizations develop an effective process improvement plan. With their thorough understanding and experience, they guide organizations to appraisals that will withstand any level of post-appraisal scrutiny.
Google
Ashish Sherlekar profile picture
Ashish Sherlekar
24/07/2023
Google star 1Google star 2Google star 3Google star 4Google star 5Trustindex verifies that the original source of the review is Google.
Team Univate holds many professional approach.
Google
Doaa Sharaf profile picture
Doaa Sharaf
23/07/2023
Google star 1Google star 2Google star 3Google star 4Google star 5Trustindex verifies that the original source of the review is Google.
Proud to work with the company during the gap analysis in RTA and the work that have been done during 2 months, Thanks for the cooperation and the detailed and clear reports and looking forward for more achievements.
Google
Naveen Kumar M.L. profile picture
Naveen Kumar M.L.
21/07/2023
Google star 1Google star 2Google star 3Google star 4Google star 5Trustindex verifies that the original source of the review is Google.
I had the pleasure of working with a phenomenal CMMI partner firm for CMMI ML 5 V2.0. From start to finish, their exceptional services and commitment to excellence surpassed all my expectations. First and foremost, the team at Univate Solutions demonstrated an unparalleled level of professionalism throughout our collaboration. They showcased an in-depth understanding of CMMI best practices and utilized their expertise to guide us seamlessly through the entire process. Their vast knowledge of the CMMI model was truly impressive and played a vital role in our successful journey towards maturity Level 5. Communication with Univate Solutions was outstanding, with prompt responses to our inquiries and an unwavering dedication to keeping us informed at every stage. They listened attentively to our specific requirements and tailored their approach to fit our unique organizational needs. The level of support provided by Univate Solutions was exceptional.The guidance they provided was not only insightful but also practical, enabling us to implement meaningful improvements and achieve tangible results. It was evident that they possess a deep passion for their work and a genuine desire to help organizations achieve excellence. In conclusion, I wholeheartedly recommend Univate Solutions as a CMMI partner firm. I am confident that any organization seeking to enhance their processes and achieve CMMI maturity will greatly benefit from their exceptional services. Thank you, Univate Solutions, for the outstanding work you do!
Google
Satyakam Sahu profile picture
Satyakam Sahu
21/07/2023
Google star 1Google star 2Google star 3Google star 4Google star 5Trustindex verifies that the original source of the review is Google.
Univate solution has been LEA Associates South Asia Pvt. Ltd.,’s consultant for CMMI certification since 4 years. They have exemplary expertise and have handholded our team very well for the certification. I wish them well for their future endeavours.
Google
Gurneet Kaur profile picture
Gurneet Kaur
12/07/2023
Google star 1Google star 2Google star 3Google star 4Google star 5Trustindex verifies that the original source of the review is Google.
The quality and philosophy of support at Univate are unparalleled. The Univate team significantly reduced the time to collect and manage the systems, policies, and procedures to be ready for the report audit. Through the Univate audit center, Zluri was able to significantly speed up their audits by collaborating with auditors, from sharing artifacts to tracking progress. With the support of the Univate team, compliance with SOC2 Type 2 was no longer the arduous task it used to be.
Google
Tariq Abubaker profile picture
Tariq Abubaker
11/07/2023
Google star 1Google star 2Google star 3Google star 4Google star 5Trustindex verifies that the original source of the review is Google.
Very excellent experience,Univate team are very much focused and they always give the their customers attention
Google
Siddhartha Dehury profile picture
Siddhartha Dehury
11/07/2023
Google star 1Google star 2Google star 3Google star 4Google star 5Trustindex verifies that the original source of the review is Google.
Univate helped Gemini Consulting Services in the complete evaluation, assessment and final awarding of CMMi Lev 3 certification. The entire process was very smooth and systematic. The services rendered by Univate are highly recommended.
Google
Amit Bhargava profile picture
Amit Bhargava
10/07/2023
Google star 1Google star 2Google star 3Google star 4Google star 5Trustindex verifies that the original source of the review is Google.
Univate Solutions team works in very professional manner . All engagements finishes in with time scoped. Would recommend to engage them for quality and process management consulting .

Univate Solutions- Trusted Partner for ISR Compliance in the UAE

Organisations in the UAE seeking ISR compliance trust Univate Solutions. We have wide experience helping entities of different sizes align with the Dubai Electronic Security Center requirements. Throughout the programme our experts stay with you, offering a broad range of support services. Every engagement begins with a risk assessment before we move into implementation, so your controls comply with the applicable ISR domains. We also provide continuous support so your information security management system keeps improving after the review.

Univate Solutions understands the particular challenges that organisations serving Dubai Government face, and we provide tailor made solutions to match. This includes a bespoke approach that helps you achieve and sustain ISR compliance while safeguarding your operations against evolving security threats.

Common FAQs on ISR Compliance in the UAE

What is the ISR (Information Security Regulation)?
The ISR is the information security framework issued by the Dubai Electronic Security Center (DESC). It sets minimum requirements to protect the confidentiality, integrity and availability of information held by Dubai Government entities. The framework is technology neutral and is organised into domains, main controls and sub-controls that cover governance, operations and assurance.
Who governs the ISR and under what authority?
The ISR is owned and maintained by the Dubai Electronic Security Center (DESC), the government body responsible for cyber security across the Emirate of Dubai. DESC was established by Dubai Law No. 11 of 2014, which was later replaced by Law No. 15 of 2024. DESC develops the regulation, its standards and its compliance requirements.
Which organisations must comply with the ISR in Dubai?
The ISR applies to all Dubai Government entities and their personnel, regardless of the format in which information is held. In practice, semi government bodies, contractors and private suppliers that handle Dubai Government data or connect to government systems are also expected to align with the regulation as a condition of doing business.
What is ISR Version 3.0?
ISR Version 3.0 is the latest revision of the regulation. It builds on Version 2.0 with updated controls that reflect current information security best practice, strengthening protection of confidentiality, integrity and availability. DESC updates the ISR periodically so that its controls stay aligned with the evolving threat landscape.
How is the ISR structured?
The ISR is arranged into a set of security domains, each broken down into main controls and sub-controls. The domains span governance, risk management, human resource security, operations and assurance. Because the framework is technology neutral, it defines what must be achieved rather than prescribing specific products or technologies.
What does the ISR compliance process involve?
A typical ISR programme starts with a gap assessment against the applicable domains and controls, followed by remediation and implementation of the required policies, procedures and technical measures. The entity then runs internal audits and evidences its controls before a formal DESC compliance review. The overall timeline depends on the size of the entity, its existing maturity and the number of systems in scope.

If you have more questions regarding ISR (Information Security Regulation) compliance in the UAE then get in touch with our experts today, or email us at info@univateglobal.com for more information.