RISYS maps findings from your Microsoft estate to the Saudi regulatory controls you're assessed against and carries them through triage, risk treatment and evidence. The framework library holds 1,240 controls across 10 Saudi frameworks from NCA, SAMA and SDAIA, with NCA ECC assessed end-to-end today.