AI-assisted ECC readiness for the Kingdom
Turn scattered evidence into a defensible ECC readiness picture.
BazGrid guides your team through the assessment, analyses the evidence behind every answer, and turns the gaps into a prioritised plan — with your assessment data staying in the Kingdom.
NCA ECC 2.2024 · Evidence with citations · Human-validated results · KSA-hosted
Readiness assessment — not regulatory certification
BazGrid intelligence layer
- 12
- evidence signals
- 10
- gaps identified
- 8
- areas mapped
Privileged accounts are not reviewed on a defined schedule.
Evidence confidence: medium
Restore testing is recorded monthly with sign-off.
Evidence confidence: high
Supplier agreement omits security obligations.
Evidence confidence: low
Recommendation awaiting review
Company registrations & product ownership
Explore our trust facts
Registered
SWSAM Solutions Company
Copyright Registered
BazGrid
Registered
SWSAM Solutions Company
Registered
SWSAM Solutions Company
Assessment data & AI in Saudi Arabia
What you get
Evidence-backed readiness, not another questionnaire
Guided assessment
Only the ECC questions that apply to your environment, with guidance along the way.
Evidence you can trace
Every finding cites the passage it came from, and gaps are flagged with follow-ups.
Deterministic maturity results
Explainable, versioned scores by domain and subdomain — never an AI guess.
A prioritised plan
Gaps become actions with owners, target dates and closure evidence.
From answers to assurance
- Stage 1
Understand
BazGrid builds a profile of the organisation, systems and dependencies.
- Stage 2
Assess
Users answer only the questions relevant to their environment.
- Stage 3
Analyse
Evidence is mapped to controls, gaps and follow-up questions.
- Stage 4
Confirm
AI recommendations require human review before they affect results.
- Stage 5
Improve
Results become a prioritised remediation and maturity roadmap.
One platform, the Kingdom's frameworks
Start with NCA ECC 2.2024 today. SAMA CSF and PDPL readiness are on our roadmap.
NCA ECC 2.2024
The Essential Cybersecurity Controls, assessed as 200 controls and 176 scored units with evidence-mapped maturity.
SAMA Cybersecurity Framework
Planned mapping and maturity assessment for entities supervised by SAMA. Talk to us about early access.
PDPL readiness
Planned data-protection controls and evidence. PDPL-aligned data handling is available today.
More than a digital questionnaire
Traditional assessment tools collect answers. BazGrid helps organisations understand the question, review the evidence and decide what to do next.
Traditional assessment
- Static Yes/No questions
- Manual document review
- Generic gap reports
- Difficult-to-explain scores
- Remediation planned separately
BazGrid
- Adaptive AI-assisted questioning
- Evidence mapped with citations
- Missing proof identified automatically
- User-confirmed recommendations
- 30/60/90-day improvement roadmap
Inside the platform
The same guided questions, evidence intelligence and management views your team will use.
BazGrid · Employees, identity and access
Identity and access management
Does every employee use their own named account to sign in to work systems?
AI guidance
Named accounts let activity be traced to a person. Shared logins usually appear in older finance or operational systems.
Assign to a colleague
AI accelerates the work. People remain in control.
Explainable
Every recommendation shows the answers and evidence used.
Confirmable
AI cannot change assessment answers without user approval.
Deterministic
Readiness and maturity results are calculated by controlled assessment rules.
AI recommendation
Human confirmation
Deterministic result
Move from self-assessment to expert review
When the organisation is ready, a BazGrid specialist can review the scope, answers and evidence and provide a validated readiness assessment.
AI-assisted self-assessment
Expert-validated readiness
Built in the Kingdom
Residency is a design decision, not a deployment detail. Your assessments, evidence, results and AI inference stay in Saudi Arabia. Payments use TAP hosted checkout; minimum payment data and hosted checkout information may be processed outside the Kingdom under its privacy notice.
Hosted in Saudi Arabia
Assessments, evidence and results stay in the Kingdom.
In-Kingdom AI inference
AI assistance runs on in-Kingdom infrastructure, not offshore endpoints.
Retention you can defend
Uploaded evidence is destroyed 30 days after expert validation, unless the law requires longer retention.
ECC readiness questions
What do I get at the end?
Maturity results by domain and subdomain, the gaps behind them, a prioritised remediation plan with owners and dates, and — on expert-validated engagements — a validated readiness report.
How does evidence analysis work?
Uploaded evidence is scanned, mapped to the controls it supports, and every finding cites the passage it came from. AI recommendations cannot change your saved answers without your confirmation. Human expert review is included in Expert-Validated Readiness.
How long does an assessment take?
Most teams complete the guided assessment in days, not months. AI-reviewed reports are generated once you submit and your evidence is analysed; expert validation follows the review schedule you agree with your specialist.
Do we have to upload evidence?
No. The free self-assessment works without evidence. Evidence upload starts with the AI-Reviewed tier and is what makes findings traceable and defensible.
Where is my data hosted?
In Saudi Arabia. Your assessments, evidence and results stay in the Kingdom, AI inference runs in-Kingdom, and uploaded evidence is destroyed 30 days after expert validation unless the law requires longer retention. Payments use TAP hosted checkout with disclosed processing outside the Kingdom; see our Privacy Policy and data residency page.
Which frameworks do you support?
NCA ECC 2.2024 is available today, with SAMA CSF and PDPL readiness on our roadmap. Talk to us about early access to the next frameworks.
See where you stand — and what to fix first.
Start a guided readiness assessment, or speak with a BazGrid specialist about your assurance objectives.