ncnicc

GRC study notes, advisory engagements, audit tooling, IAM auditing, Islamic fintech governance, ServiceNow IRM, and AI governance research — covering ISO 27001, NIST CSF, SOC 2, NCA ECC, NCA CCC, NCA NCNICC-1:2025, SAMA CSF, GDPR, India DPDP Act, Saudi PDPL, ISO 42001, AAOIFI Shariah Standards, EU AI Act, and NIST AI RMF.

GRC analyst & auditor portfolio — ISO 27001, SOC 2, NCA ECC · CCC · NCNICC-1:2025, SAMA CSF, PDPL, GDPR across India and Saudi Arabia. 6 engagements · 5 clients · 40 deliverables.

Full ServiceNow IRM implementation scoped to the Saudi Arabian regulatory stack — NCA ECC, NCA CCC, NCNICC, SAMA CSF, PDPL, ISO 27001, ISO 42001. 7 frameworks, 579 citations, 7 policies, 23 controls, risk register, and executive dashboard.

My GRC study notes, organized into 13 modules, covering ISO 27001, NIST CSF, SOC 2, GDPR/DPDP, Saudi frameworks (NCA ECC, NCA CCC, SAMA CSF, PDPL, NCNICC-1:2025), ISO 42001, risk assessment, and GRC tools.