The CNI (Critical National Infrastructure) Assessment module helps organizations determine their classification under the UAE's critical infrastructure protection framework.

Classification Tiers

  • Tier 1 — National-level critical infrastructure with highest security requirements
  • Tier 2 — Sector-level critical infrastructure with enhanced controls
  • Tier 3 — Supporting infrastructure with standard IA requirements
  • Not Classified — Non-CNI entities following baseline IA Standards

Data Localization

CNI entities may be required to store and process data within UAE borders. The assessment tracks data localization requirements and applicable CNI-specific controls.

Sectors

CNI assessment covers entities in energy, telecommunications, healthcare, finance, government, water, transportation, and other critical sectors defined by the UAE Cyber Security Council.