Contact Us
ISR COMPLIANCE
IN THE UAE
For Faster, Transparent and Cost Effective
Compliance Support
Contact Us
ISR COMPLIANCE
IN THE UAE
For Faster, Transparent and Cost Effective
Compliance Support
ISR (INFORMATION SECURITY REGULATION)
WHAT IS IT?
The ISR, or Information Security Regulation, is the information security framework issued by the Dubai Electronic Security Center (DESC). It sets the minimum requirements that protect the confidentiality, integrity and availability of information held by Dubai Government entities, and it is technology neutral rather than tied to any specific product or platform.
DESC was established under Dubai Law No. 11 of 2014, which was later replaced by Law No. 15 of 2024, and it maintains the ISR as the baseline for government information security across the Emirate of Dubai. The regulation is structured into domains, main controls and sub-controls covering governance, operations and assurance. Its latest revision, ISR Version 3.0, updates these controls to reflect current information security best practice.

Achieve ISR Compliance in the UAE: Protect the Confidentiality, Integrity and Availability of Information
When an organisation aligns with the ISR, it puts structured measures in place to manage sensitive information securely across people, processes and technology. This matters for organisations that serve Dubai Government, as the Emirate continues to strengthen its cyber security posture.
By adopting the DESC Information Security Regulation, an organisation establishes a repeatable approach to identifying threats and applying controls, with continuous monitoring of its security measures. This helps prevent data breaches and manage security incidents efficiently.
The ISR is built around protecting personal and official information so that Dubai Government entities and their partners maintain trust with citizens and stakeholders. Demonstrating compliance signals that your organisation takes information security seriously in a market where data protection is a priority.
GET OUR FREE CONSULTATION TODAY
Experience best in class services by Univate’s information security consultants from GAP Analysis to final assessment and till you achieve compliance

Key Benefits of ISR Compliance for UAE Organisations
There are numerous benefits that Dubai Government entities and their suppliers can derive from ISR compliance:
- Enhanced Security: Aligning with the ISR ensures your organisation follows recognised information security controls, helping protect sensitive data from unauthorised access.
- Regulatory Alignment: The ISR is the mandated baseline for Dubai Government information security. Meeting it demonstrates your commitment to the requirements set by DESC.
- Improved Stakeholder Trust: It is easier for government partners and citizens to trust entities that put information safety first. Aligning with the DESC ISR shows that your organisation takes data protection seriously.
- Risk Management: The domains and controls help you identify security threats and implement measures to reduce them, lowering the likelihood of data breaches and other incidents.
- Eligibility to Serve Government: ISR compliance is often a precondition for working with Dubai Government entities, distinguishing your organisation from competitors that cannot evidence the same assurance. Learn more from the Dubai Electronic Security Center and from Univate’s information security consultants in the UAE.
Customised ISR Implementation Plans for UAE Organisations
Every entity that serves Dubai Government is different, so an ISR implementation must be tailored to its structure, systems and risk profile. This focused approach keeps the compliance effort practical and aligned with your operational goals.
The work usually starts with a comprehensive risk assessment against the ISR domains and controls. This identifies where your organisation is most exposed, so remediation can be prioritised. Once the gaps are understood, policies, procedures and technical controls are put in place and evidenced ahead of a DESC compliance review.
GET OUR FREE CONSULTATION TODAY
Experience best in class services by Univate’s information security consultants from GAP Analysis to final assessment and till you achieve complianceISR Compliance Cost in Dubai
In the UAE, the cost of achieving ISR compliance depends on several factors. The size of your organisation, the complexity of your IT infrastructure and the security controls already in place all influence the effort involved. Smaller entities with few systems in scope typically incur lower costs than large organisations with complex networks.
Typical cost drivers include the initial gap and risk assessment, implementing the required policies and technical controls, training staff, and the internal audit and evidence gathering needed before the formal DESC compliance review. Investing early in a structured programme usually reduces rework later.

Meet Dubai Government Requirements with ISR Compliance
Organisations operating with Dubai Government must meet the information security requirements set by DESC. The Emirate has invested heavily in strengthening its cyber security architecture, which is why entities in scope are expected to align with the ISR.
Demonstrating ISR compliance shows that your organisation respects local requirements while safeguarding sensitive information through robust controls within its information security management system. It also provides a clear, auditable baseline that supports continued eligibility to handle Dubai Government data.

Expert Consultation for ISR Compliance in the UAE
Achieving ISR compliance can be a demanding exercise, which is why it helps to work with professionals who understand both the DESC requirements and the realities of operating in the UAE.
Experienced consultants can guide you through every stage of the programme. They help conduct a thorough risk analysis against the ISR domains, develop tailored action plans, and make sure the required documentation and evidence are ready for the DESC compliance review.
To help us better address your ISR requirements,
Please contact us
OUR CLIENTS




































CLIENT TESTIMONIALS
Univate Solutions- Trusted Partner for ISR Compliance in the UAE
Organisations in the UAE seeking ISR compliance trust Univate Solutions. We have wide experience helping entities of different sizes align with the Dubai Electronic Security Center requirements. Throughout the programme our experts stay with you, offering a broad range of support services. Every engagement begins with a risk assessment before we move into implementation, so your controls comply with the applicable ISR domains. We also provide continuous support so your information security management system keeps improving after the review.
Univate Solutions understands the particular challenges that organisations serving Dubai Government face, and we provide tailor made solutions to match. This includes a bespoke approach that helps you achieve and sustain ISR compliance while safeguarding your operations against evolving security threats.
Common FAQs on ISR Compliance in the UAE
What is the ISR (Information Security Regulation)?
Who governs the ISR and under what authority?
Which organisations must comply with the ISR in Dubai?
What is ISR Version 3.0?
How is the ISR structured?
What does the ISR compliance process involve?
If you have more questions regarding ISR (Information Security Regulation) compliance in the UAE then get in touch with our experts today, or email us at info@univateglobal.com for more information.








