ISQM 1 evaluation cycle ACTIVE lobal

FRC / PCAOB inspections 2026 PLANS FILED

SOCPA peer review UNDERWAY

PDPL fully enforceable — SAR 5M exposure

EU audit reform oversight RAMPING

IRBA, ICPAK, FRC Nigeria QR CYCLES LIVE

Audit firms live on falconry.one across 4 REGIONS

ISQM 1 evaluation cycle ACTIVE — global

FRC / PCAOB inspections 2026 PLANS FILED

SOCPA peer review UNDERWAY

EU audit reform oversight RAMPING

IRBA, ICPAK, FRC Nigeria QR CYCLES LIVE

Audit firms live on falconry.one across 4 REGIONS

Book a Demo
Book a Demo
Pillar 02

Risk, Cyber & Data Protection

Manage firm-wide risk, meet NCA and UAE Cybersecurity Council requirements, and comply with Saudi PDPL and UAE data protection laws — through one integrated platform.

ISQM 1 · AML · PDPL · NCA ECC · Independence · CPD · Performance

Arabic & English · Live in 8 weeks · Powered by Falconry Solutions

SOCPA peer review inspections active

PDPL fully enforceable — SAR 5M exposure

✦ 3 of the Big 10 KSA audit firms live on falconry.one

NCA ECC controls now mandatory

Five Core Modules

Firm-Wide Risk & Data Governance

Five integrated modules managing every dimension of risk, cybersecurity, and data protection — aligned to KSA NCA, UAE Cybersecurity Council, PDPL, DFSA, and international standards. Delivered on an ISO 27001 certified platform.
Module 01

Enterprise Risk Management

Firm-wide risk registers and governance frameworks helping leadership identify, assess, and monitor operational and regulatory risks. A single view across strategic, operational, compliance, financial, and reputational risks — required by professional services regulators and increasingly by large audit clients.
  • Firm-wide risk register
  • Risk scoring and owner assignment
  • Real-time mitigation status tracking
  • Leadership risk dashboards
  • Firm-wide visibility
  • Proactive risk management
Module 02

Cybersecurity Governance

Strengthen cyber risk oversight aligned to Saudi NCA Essential Cybersecurity Controls (ECC) and UAE Cybersecurity Council guidelines. Security governance frameworks, cyber risk assessments, vulnerability oversight, and third-party cyber risk monitoring — delivered through Falconry.one’s ISO 27001 certified platform.
  • NCA ECC aligned cyber risk assessments
  • Security governance frameworks
  • Third-party cyber risk monitoring
  • Vulnerability tracking and incident management
  • NCA ECC aligned
  • UAE Cyber Council
  • ISO 27001 platform
Module 03

Data Privacy Compliance

A single unified module managing data protection obligations across Saudi PDPL (Royal Decree M/19), UAE Federal Decree-Law No. 45 of 2021, DIFC Data Protection Law 2020, ADGM Data Protection Regulations 2021, and GDPR — eliminating the need for separate compliance tools across jurisdictions.
  • Saudi PDPL compliance workflows
  • UAE Federal, DIFC & ADGM data protection
  • Data mapping, DPIA automation, breach management
  • Regulatory reporting
  • Saudi PDPL
  • UAE privacy laws
  • DIFC & ADGM
Module 04

Third-Party Risk Management

Evaluate and monitor risks associated with vendors, service providers, and external partners. Supplier risk assessments, contract monitoring, and automated due diligence workflows — ensuring every third party your firm relies on is assessed and monitored continuously, in line with NCA and DFSA expectations.
  • Vendor risk assessments
  • Contract monitoring and compliance tracking
  • Automated due diligence workflows
  • Continuous monitoring
  • NCA aligned
Module 05

Regulatory Monitoring

Real-time monitoring across SOCPA, CMA, SAMA, ZATCA, NCA in KSA; DFSA, FSRA, SCA, CBUAE, and UAE Cybersecurity Council in UAE; and international standards including ISQM1, FATF, and IESBA — with impact assessments and required action alerts surfaced to responsible partners immediately.
  • KSA regulatory change monitoring (SOCPA, CMA, SAMA, ZATCA)
  • UAE regulatory monitoring (DFSA, FSRA, SCA, CBUAE)
  • International standards monitoring (ISQM1, FATF, IESBA)
  • KSA regulators
  • UAE regulators
  • Global standards

ISO 27001 Certified Platform

All risk and data protection modules are delivered through Falconry.one’s ISO 27001 certified platform — meaning your governance data and client information is protected to the highest international standard for information security management, independently verified.
  • ISO 27001:2022
  • Saudi PDPL
  • UAE privacy laws
  • NCA aligned

Protect Your Firm with
Integrated Risk Governance

See how Falconry.one manages risk, cyber, and data protection across your entire firm
on an ISO 27001 certified platform.

Request a Demo
Next: Performance