Interactive Platform Preview
Your GRC command center
A real preview of RASSAD — click the sidebar modules, hover cards for insights, explore every screen.
🔒
app.rassad.sa / dashboard
Good morning, Naif 👋
Sunday 1 Mar 2026 · Q1 2026 · 42 days to quarter-end
📊
▲ +4%
73%
Compliance Score
🔴
2 overdue
8
Critical Risks
📋
1 due soon
3
Open Audits
📄
2 expiring
14
Active Policies
Live Alerts
Updated 2 min ago
🔴 CRITICAL · 14 MIN AGO
Unauthorized access attempt on SAMA-regulated API endpoint detected
🟡 HIGH · 1H AGO
NCA ECC audit due in 7 days — 4 open findings require closure
🔵 INFO · 3H AGO
Policy "Cloud Security Standard v3.0" approved and published
Risk Register
24 risks tracked · 8 critical · Last updated 14 min ago
| ID | Risk Description | Framework | Severity | Owner | Due | Status |
| #001 |
Unauthorized access to SAMA-regulated systems |
SAMA CSF |
CRITICAL |
IT Security |
Mar 15 |
● In Progress |
| #002 |
Ransomware vulnerability in legacy OT systems |
NCA ECC |
CRITICAL |
CISO |
Overdue |
● Overdue |
| #003 |
Third-party vendor without compliant data handling |
NCA ECC |
HIGH |
Compliance |
Mar 30 |
● In Progress |
| #004 |
Unpatched cloud environment systems (CVE-2024-1234) |
ISO 27001 |
HIGH |
IT Team |
Apr 10 |
● Planned |
| #005 |
Insufficient cybersecurity awareness training coverage |
NCA ECC |
MEDIUM |
HR |
Apr 20 |
● On Track |
Framework Compliance
9 frameworks · Avg score 73.8% · Q1 2026 assessment
Nearly certified · A.12 gap
Audit Management · Q1 2026
3 active audits · 1 closed · 42 total findings
NCA ECC Internal Audit 2026
Lead: Ahmed Al-Ghamdi · Due Mar 30, 2026
IN PROGRESS
✓ 18 closed⚠ 4 open75% complete7 days left
SAMA CSF Compliance Review
Lead: Sara Al-Otaibi · Due Apr 15, 2026
PLANNED
Kick-off: Mar 180 findings10% complete
ISO 27001 Surveillance Audit
Lead: Khalid Al-Rashidi · Closed Feb 28, 2026
CLOSED ✓
✓ 31 closed0 non-conformitiesCertificate renewed
Vendor Risk Assessment
4 vendors · 1 high risk · Questionnaire due Mar 10
⚠️
CloudPro Solutions
Data processor · Questionnaire overdue 14 days
HIGH RISK
🔍
DataVault KSA
Storage provider · Review in progress
MEDIUM
✅
SecureNet Arabia
Network provider · Assessed Jan 2026 · ISO 27001
LOW RISK
✅
Al-Jazeera IT Services
Managed services · NCA ECC compliant · SLA 99.9%
LOW RISK
Policy Library
14 policies active · 2 expiring within 30 days
Information Security Policy
ACTIVE
v4.2 · Approved Jan 15 · Expires Jan 2027
Cloud Security Standard
ACTIVE
v3.0 · Approved Mar 1 · Expires Mar 2027
Data Classification Policy
EXPIRING
v2.1 · Expires Mar 31 · Review required
Incident Response Plan
ACTIVE
v5.0 · Approved Dec 10 · Expires Dec 2026
Control Coverage Heatmap
NCA ECC domains · Q1 2026 · Hover for details
← Click sidebar modules · Hover any element for details