Run phishing simulations, assign training and issue certificates to
staff in English and Arabic, with the evidence filed straight into the
ADHICS, UAE IA, DESC ISR and CBUAE controls your auditor assesses.
Request a
demonstration · See
the GRCLens UAE page
Who this is for in the UAE
Organisations in Dubai and Abu Dhabi that must show a regulator or
auditor that staff awareness is tested, trained and recorded: hospitals
and clinics licensed by the Department of Health Abu Dhabi, Dubai
Government entities, CBUAE-licensed banks and payment firms, and federal
entities under the UAE IA Standard.
Which UAE frameworks
PhishLens evidences
PhishLens runs on the shared control model of GRCLens, so evidence
captured once is mapped to every framework you are assessed against. In
the UAE that means:
| Framework | Awareness and training requirement it evidences |
|---|---|
| ADHICS v2 (Abu Dhabi healthcare) | HR 3.2 periodic awareness campaigns and participation tracking, HR 3.3 training at onboarding and review of records, HR 3.4 role-based training before access and periodic evaluation of effectiveness |
| UAE Information Assurance Standard (NESA) | awareness and training controls for federal and critical-sector entities |
| Dubai DESC ISR | awareness obligations for Dubai Government entities |
| CBUAE technology and cyber risk rules | staff awareness for licensed financial institutions |
| UAE PDPL | training staff who handle personal data |
| ISO 27001:2022 | A.6.3 information security awareness, education and training |
Built for the UAE
The first PhishLens governance deployment is a UAE hospital preparing
for its ADHICS v2 audit. Every KPI on its scorecard names the ADHICS
control it evidences, so the coverage figure the auditor asks for under
HR 3.2 and HR 3.3 is one click, not a spreadsheet. Arabic screens,
lessons, emails and certificates use the Arabic terms of the official
ADHICS v2 text, so lesson wording and audit evidence use the same
vocabulary.
What PhishLens does, in brief
Think of PhishLens as the awareness programme in a box for a UAE entity: simulations sent through a dry-run gate, courses by role in both languages, a governance dashboard for the CISO and the board, a 15-KPI scorecard read against your own baseline, a certificate for each person who passes, and evidence filed to the ADHICS or NESA control by date. The complete feature description and FAQs live on the PhishLens product page.
Frequently asked questions
Does
PhishLens produce evidence for an ADHICS audit?
Yes. Campaign results, training completion and the quarterly KPI
snapshot are filed as dated evidence against ADHICS v2 HR 3.2, HR 3.3
and HR 3.4 inside GRCLens, which already holds the standard in English
and Arabic.
Is the training available
in Arabic?
Every lesson, email, dashboard and certificate ships in English and
Modern Standard Arabic, right to left, with the ar-AE locale. Scenario
dialogue uses Gulf Arabic so it feels local.
Can it be hosted in the UAE?
GRCLens is available as a cloud tenant or as an on-premise deployment
inside your own data centre, which suits entities with data residency
obligations under NESA or DESC.
How is this
different from a free phishing test?
A free test measures clicks once. PhishLens runs a programme:
baseline, training by role, monthly simulations, certificates and a
board scorecard, with every number filed to the control it
evidences.
Talk to us about PhishLens
Request a demonstration and we will run a baseline simulation design
for your organisation, show the executive dashboard with demo data, and
map the evidence to the frameworks you are assessed against.
Looking for professional certification courses (lead auditor, implementer, regulator-specific classes) rather than a staff awareness programme? See our UAE cyber security compliance training courses.
Request a
demonstration · Explore
the GRCLens platform · On-premise
deployment
