Compliance Assessment for SAMA, NCA, PDPL, CMA, Tadawul & Aramco CCC

The organization needed to understand its compliance position across multiple regulatory and industry requirements.

Policies, procedures, controls, and evidence were not fully mapped to frameworks such as SAMA, NCA, PDPL, CMA, Tadawul, and Aramco CCC.

Compliance evidence was scattered across departments, emails, folders, and manual trackers.

Control owners were not clearly assigned for every requirement.

Management did not have a clear view of compliance gaps, risk exposure, and remediation priorities.

Audit readiness was difficult because documents, approvals, and evidence were not centrally maintained.

We conducted a structured compliance assessment covering applicable regulatory and industry requirements, including SAMA, NCA, PDPL, CMA, Tadawul requirements, and Aramco CCC. Our team reviewed policies, procedures, controls, evidence, ownership, implementation status, and compliance gaps.

We also prepared a clear gap assessment, compliance mapping, risk-based findings, remediation roadmap, and management-level reporting to help the organization understand what needs to be improved and prioritized.