03 · GRC

Evidence ready before the audit.

NCA ECC, SAMA CSF, NDMO, PDPL and ISO 27001, all managed in Wathiq.

Book a consultation

What we do

  1. Gap assessments

    NCA ECC and CCC, SAMA CSF, NDMO, PDPL, ISO 27001, PCI DSS

  2. Policy and procedure writing

  3. Risk register and treatment plans

  4. Third-party risk

  5. Business continuity

  6. Audit evidence preparation

  7. Wathiq onboarding

Wathiq

Know your controls,
policies, and gaps.
All in one place.

Wathiq, our GRC platform, tracks every control and every piece of evidence, so the gaps show up before the audit does.

  • 2,087 controls ready
  • 19 Saudi frameworks
Explore Wathiq
How an engagement runs

Scope, work, handover.

  1. Scope

    We agree on the goals, the systems in scope and the evidence you need at the end.

  2. Work

    The team from the right track does the work and keeps you updated as it goes.

  3. Handover

    You receive the documentation and reports, with a clear view of the next step.

Clients

Trusted where it matters

Government entities and companies across the Kingdom.

  • Alinma Bank
  • Emkan
  • Monshaat
  • PwC
  • stc
  • Saudi Aramco
  • solutions by stc
  • Quess

Contact us
today

Tell us what your entity needs and a specialist from the right track will get back to you.

Step 1 of 3 · Entity

Start with the country code, for example +966

Prefer WhatsApp? Message us