nca-ecc

a PHP library for grounded, retrieval-augmented Q&A over Saudi Arabia's cybersecurity and data-protection frameworks (PDPL, NCA-ECC, NCA-CCC, NCA-CSCC, SAMA-CSF, ISO 27001). No vendor lock-in; corpus is plain JSON.

GRC notes, advisory engagements, audit & compliance tooling, IAM auditing, Islamic fintech governance, and AI governance research — covering ISO 27001, NIST CSF, SOC 2, SAMA CSF, NCA ECC, GDPR, India DPDP Act, Saudi PDPL, ISO 42001, AAOIFI Shariah Standards, EU AI Act, and NIST AI RMF.

AI governance compliance checker for Saudi Arabia & the Gulf — built on the AI-GRC Integrated Management Framework (AI-GRC IMF) integrating ISO/IEC 27001:2022 and ISO/IEC 42001:2023 with PDPL, SDAIA, NCA ECC, and SAMA.

Security and compliance blueprints as code. Draw a trust zoned reference architecture from a short text source, then review it for control gaps. Eight frameworks: PCI DSS, SWIFT CSP, Zero Trust, HIPAA, GDPR, SOC 2, ISO 27001, IEC 62443. Zero dependencies.

My GRC study notes, organized into 13 modules, covering ISO 27001, NIST CSF, SOC 2, GDPR/DPDP, Saudi frameworks (NCA ECC, NCA CCC, SAMA CSF, PDPL, NCNICC-1:2025), ISO 42001, risk assessment, and GRC tools.

10 AI-powered cybersecurity presales tools built with the Claude Code covering threat intelligence briefing, SOC simulation, phishing analysis, ZTA advisory, regulatory compliance mapping, and many more. Includes a Claude Code skill for automated bid drafting.

Enterprise cybersecurity, Zero Trust, Defender, Sentinel, MITRE ATT&CK, and regulatory architecture labs.

GRC analyst & auditor portfolio — ISO 27001, SOC 2, NCA ECC · CCC, SAMA CSF, PDPL, GDPR across India and Saudi Arabia. 5 engagements · 4 clients · 33 deliverables.