Free Cyber Health Check

Do you have a written information-security policy that your staff know about?

Is one person or team clearly responsible for cybersecurity in your organisation?

Do you keep an up-to-date list of your important IT assets (devices, systems, data, cloud apps)?

Have you reviewed your main cyber risks in the last 12 months?

Is multi-factor authentication (MFA) turned on for email and your key systems?

Do your staff get regular security-awareness or phishing training?

Is sensitive data access limited to those who need it (and encrypted where appropriate)?

Are your systems and software kept patched and up to date?

Do all your computers and servers have active endpoint/antivirus protection?

Would you actually notice if an account or device were hacked?

Do you have a plan for what to do during a cyber attack or data breach?

Do staff know how and where to report something suspicious?

Are your critical systems and data backed up regularly?

Have you successfully tested restoring from a backup in the last 12 months?

Are you handling personal data in line with Oman PDPL (consent, breach notification, data-subject rights)?

Could you report a serious cyber incident to the national authorities (CDC / OCERT) within required timelines?

Are you meeting the Central Bank of Oman / FSA cyber requirements?

Are you handling personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021)?

Are you aligned with the UAE Information Assurance Regulation (NESA/SIA) or your emirate standards (e.g. Dubai ISR)?

Are you meeting Central Bank of the UAE (CBUAE) cybersecurity requirements?

Are you handling personal data in line with the DPDP Act 2023 (consent, data-principal rights, breach notification)?

Could you report a serious cyber incident to CERT-In within the required 6-hour window?

Are you meeting your financial regulator cyber requirements (RBI / SEBI / IRDAI)?