ADHICS Explained: Abu Dhabi Healthcare Information and Cyber Security Standard

Who Typically Faces ADHICS

• Abu Dhabi healthcare providers and facilities
• Health-tech and ICT vendors supporting those providers
• Partners processing clinical or administrative health data

Programme Themes

• Governance, risk, and clinical/IT accountability
• Identity, access, and clinical-system hardening
• Logging, monitoring, and incident response for care systems
• Third-party and cloud assurance for health workloads
• Alignment with PDPL where personal health data is processed

How CyberSilo Helps

• IAR / PDPL evidence maps in CyberSilo CSA
• Logging and detection evidence with ThreatHawk SIEM
• Advisory scoping — contact CyberSilo

Frequently Asked Questions

Is ADHICS only for hospitals?

Providers are central, but vendors and processors supporting Abu Dhabi healthcare commonly face ADHICS flow-down.

Does ADHICS replace PDPL?

No. ADHICS is a security standard; PDPL is personal-data law. Health data usually triggers both conversations.

Can we reuse ISO 27001 evidence?

Yes as a base — still map ADHICS-specific healthcare controls and sampling explicitly.

Related UAE Resources

IAR · DESC ISR · PDPL