Cybersecurity
AI driven cybersecurity maturity, assessed against the SAMA Cyber Security Framework. Yani reads your security policies and evidence, scores every control across design, implementation and effectiveness, and produces an audit ready maturity assessment.
- SAMA Cyber Security Framework
- Design, implementation and effectiveness
- Grounded in your evidence
- Audit ready maturity reports

The challenge
Cyber compliance is high stakes and hard to evidence
The SAMA Cyber Security Framework is mandatory for regulated entities, with hundreds of controls across multiple domains. Assessing them against scattered policies by hand is slow, inconsistent, and risky when regulators come knocking.
How it works
From security documentation to a maturity rating in four steps
Upload policies and evidence
Bring in security policies, charters, standards and audit reports.
AI maps to controls
Yani maps content to SAMA Cyber Security Framework domains and controls.
Score maturity
Each control is scored on design, implementation and effectiveness, with rationale.
Report and close gaps
Generate a structured maturity assessment and a prioritised list of gaps.
Capabilities
A complete cyber security maturity engine
SAMA CSF coverage
Assess every domain, subdomain and control of the framework.
Three lens scoring
Design, implementation and effectiveness assessed for each control.
Evidence references
Every score cites the exact source documents behind it.
Gap identification
Pinpoint missing or weak controls and the evidence to close them.
Drill down detail
Expand any domain to its subdomains and controls.
Enterprise security
Role based access and on premise, cloud or hybrid deployment.

Deep assessment
Every control, scored and evidenced
For each control, Yani assesses design, implementation and effectiveness against your documentation, assigns a maturity level, and references the exact evidence behind the rating.

Outcomes
What security and compliance teams gain
Who it's for
Built for security, risk and audit teams
Banks and financial institutions
Demonstrate SAMA Cyber Security Framework compliance with defensible evidence.
CISOs and security teams
Benchmark cyber maturity and prioritise the gaps that matter most.
Internal audit and compliance
Validate security controls with traceable, source cited assessments.
FAQ
Common questions
Which framework does Yani assess against?
Cybersecurity assesses against the SAMA Cyber Security Framework across all domains, subdomains and controls. Additional frameworks such as NCA ECC and ISO 27001 can be added.
How is each control scored?
Every control is assessed on design, implementation and effectiveness, with a structured maturity level and rationale based only on your uploaded evidence.
Is our data secure and where does it live?
Role based access and on premise, cloud or hybrid deployment keep sensitive security documentation inside your environment.
Can it tell us what to fix?
Yes. Yani highlights missing or weak controls and the evidence needed to raise maturity, so you can remediate before an examination.
More products
Explore the rest of the Yani suite
Assess your cyber security maturity
Book a 30 minute walkthrough on the SAMA Cyber Security Framework with your own evidence.
Book a demo