United Arab Emirates
UAE Cyber Security Council, CBUAE, ADGM, DIFC
Markets
Seven markets, one control set
A regulatory pack per jurisdiction, built on the same control library. Adding a market is a mapping exercise against controls you already operate — not a second compliance programme.
Saudi Arabia
NCA, SAMA, SDAIA, CST
Qatar
NCSA, Qatar Central Bank, QFC
Oman
OCERT-MTCIT, Central Bank of Oman, FSA
Bahrain
National Cyber Security Centre, CBB, PDPA
Kuwait
CITRA, Central Bank of Kuwait
United Kingdom
NCSC, ICO, FCA and PRA
How the packs are built
The proposition does not change by market. The mapping does.
- One control library. Your organisation operates one normalised control set. Every framework and regulation maps to it many-to-many.
- Packs, not products. A market pack is the regulatory content: the instruments, their control requirements, notification clocks, classification rules and reporting formats.
- Maintained, not shipped once. Regulatory change in any of the seven markets is tracked, assessed and routed to the affected control and policy owners.
- Residency handled per market. Hosting position is set per tenant against the classification and cloud rules that apply, rather than assumed from a single regional default.
- Group and subsidiary view. A group operating in four of these markets sees consolidated exposure and per-entity regulatory position from the same tenant.
Where we contract
Falconry holds registered entities in Saudi Arabia, the United Arab Emirates, Oman, Qatar and the United Kingdom. Contracting entity and hosting are confirmed per client. Qatar, Bahrain and Kuwait are served from our established Gulf entities, and a local entity in any of them will follow a client requirement rather than precede it.