Get audit-ready for Dubai ISR
Dubai Information Security Regulation (ISR v3.1) · Dubai Electronic Security Center (DESC)
Dubai Government's information security regulation, issued by DESC: 13 domains covering governance, asset management, risk, incidents, access control, operations, continuity, development, physical security, HR, compliance, performance and cloud. Applies to Dubai Government entities and the suppliers that serve them.
Dubai ISRWhat is Dubai ISR?
Dubai Government's information security regulation, issued by DESC: 13 domains covering governance, asset management, risk, incidents, access control, operations, continuity, development, physical security, HR, compliance, performance and cloud. Applies to Dubai Government entities and the suppliers that serve them.
Who it applies to
Dubai Government entities and the suppliers that provide services or systems to them.
How the standard is organised
Thirteen domains: governance, asset management, risk, incidents, access control, operations, continuity, development, physical security, human resources, compliance, performance and cloud.
Framework names, marks and abbreviations (ISO, SOC 2, PCI DSS, TISAX, HIPAA, GDPR and others) are trademarks of their respective standards bodies and are used here only to describe what the Bitkosh Readiness Platform helps you track and prepare for. The badges shown are original Bitkosh artwork, not the official marks. Bitkosh Technologies is not affiliated with, sponsored by, or endorsed by ISO, AICPA, the PCI Security Standards Council, ENX/VDA, or any other framework owner, and using this platform does not by itself confer or guarantee certification — certification/attestation is granted only by the relevant accredited third-party body.
Dubai ISR on the Bitkosh platform
The 71 Dubai ISR controls sit in one workspace with gap assessment, evidence collection and your readiness score, and shared controls count towards the equivalent requirement in the other 47 ready frameworks at the same time — so a second framework costs a fraction of the first.
How the platform worksSample controls
Six controls from the platform's control library, chosen because they are the most specific to this framework.
- 11.1Federal and local legal requirements
Comply with the UAE federal and Dubai laws and regulations that apply to the entity.
Compliance and Audit - 6.6Electronic messaging
Secure email — policy, confidentiality and integrity, disclaimers, retention, strong authentication and non-repudiation where needed.
Operations, Systems and Communication Management - 1.6Contacts with authorities and security communities
Maintain contacts with relevant authorities, key security and judicial contacts, and specialist security groups or forums.
Information Security Management and Governance - 6.7Online transactions and public information
Protect online transactions and the integrity of publicly available information.
Operations, Systems and Communication Management - 4.3Evidence gathering
Identify, collect and preserve incident evidence so it remains usable.
Incident and Problem Management - 2.2Asset ownership and custodianship
Assign owners accountable for each information asset and custodians responsible for its day-to-day protection.
Information and Information Assets Management
More information security & cybersecurity frameworks
Frequently Asked Questions
Who publishes Dubai ISR, and who does it apply to?
How is Dubai ISR conformance demonstrated?
How is Dubai ISR structured?
Ready to get audit-ready for Dubai ISR?
See how the Bitkosh Readiness Platform gets you audit-ready for Dubai ISR — and the other 47 ready frameworks — from a single control library.