Small and medium entities
Assess the requirements specified for Category B, with implementation records, gaps, and a remediation plan within the project.
GATGap Assessment Tool
Cybersecurity gap and compliance assessment
A local application for assessing applicable controls, documenting evidence and gaps, and preparing a clear remediation plan. Supports both private-sector control categories and the National Cybersecurity Authority’s Essential Cybersecurity Controls.
Supported regulatory frameworks
- NCNICCCategory B
- NCNICCCategory A
- ECCEssential controls
Inside the application
Assessment reports and workbooks
A detailed Excel workbook for controls, implementation status, gaps, and remediation planning, alongside a PDF report presenting findings and priorities for management and the assessment team.
A mobile-formatted preview based on the application interface. Tap to view it at full size.
Assessment frameworks
Supported regulatory frameworks
The application supports both categories of the Non-CNI private-sector controls, alongside the Essential Cybersecurity Controls. Framework and category selection depend on the organization’s scope and applicable requirements.
Large entities
Assess Category A as a distinct scope, keeping its requirements separate from Category B.
Entities within the ECC scope
Assess the Essential Cybersecurity Controls for entities within their scope, with results separated by framework.
Entity category is determined using the relevant classification criteria; headcount alone does not resolve it. The application assists with scope selection while retaining direct framework selection for specialists.
Explore the interface
Assessment and remediation screens
High-resolution previews based on the application interface, using demonstration data. Select a screen to explore, then open it at full size.
Application images
Assessment, results and reporting
Mobile-formatted previews based on the application interface. Tap an image to view it at full size.
Assessment indicators
Review progress, the implementation index, and recorded gaps, with assessment coverage displayed separately from implementation.
Tap the image to open the viewer, then zoom in when needed.
Assessment dashboard
Review the implementation index, assessment completion, and recorded project gaps.
A mobile-formatted preview. Tap to view it at full size.
Application interface previews · demonstration dataApplication interface previews · demonstration data
Gap Assessment Tool
Control assessment, gap records, and remediation tracking
Framework selection, assessment records, gap review, and reporting within one application, with Arabic and English interfaces and a lifetime license.
About the application
Scope and deliverables
Is the application limited to ECC?
No. It supports Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC), categories A and B, alongside Essential Cybersecurity Controls (ECC). The appropriate framework and category depend on the organization’s scope and applicable requirements.
How do the private-sector categories differ?
Category A is for large entities and Category B is for small and medium entities within the scope of the Non-CNI private-sector controls. Category selection considers entity classification and applicability; availability in the application does not mean every framework applies to every organization.
Do the results constitute an NCA compliance certificate?
No. Results describe the assessment, gaps, and remediation plan based on the recorded information and evidence. They are not a compliance certificate or endorsement from the National Cybersecurity Authority.
Does the application run locally?
Yes. The application runs locally on your device after license activation, with assessment records and evidence managed within the local workspace.
Does the application include a lifetime license?
Yes. The application includes a lifetime license.
Start with what you need