ADHICS Explained: Abu Dhabi Healthcare Information and Cyber Security Standard

ADHICS (Abu Dhabi Healthcare Information and Cyber Security Standard) is the sector standard healthcare organisations and many vendors face in Abu Dhabi.

Related: UAE IAR · UAE PDPL · CSA.

Sector overlay: ADHICS adds healthcare-specific information security and cyber expectations on top of national IAR/IAS and privacy duties. Do not assume a generic ISO 27001 certificate satisfies ADHICS sampling.

Who Typically Faces ADHICS

Abu Dhabi healthcare providers and facilities
Health-tech and ICT vendors supporting those providers
Partners processing clinical or administrative health data

Programme Themes

Governance, risk, and clinical/IT accountability
Identity, access, and clinical-system hardening
Logging, monitoring, and incident response for care systems
Third-party and cloud assurance for health workloads
Alignment with PDPL where personal health data is processed

How CyberSilo Helps

IAR / PDPL evidence maps in CyberSilo CSA
Logging and detection evidence with ThreatHawk SIEM
Advisory scoping — contact CyberSilo

Evidence ADHICS Alongside IAR and PDPL

Map healthcare controls and privacy artefacts in CSA with ThreatHawk monitoring proof.

Talk to CyberSilo UAE IAR Guide

Frequently Asked Questions

Is ADHICS only for hospitals?

Providers are central, but vendors and processors supporting Abu Dhabi healthcare commonly face ADHICS flow-down.

Does ADHICS replace PDPL?

No. ADHICS is a security standard; PDPL is personal-data law. Health data usually triggers both conversations.

Can we reuse ISO 27001 evidence?

Yes as a base — still map ADHICS-specific healthcare controls and sampling explicitly.

IAR · DESC ISR · PDPL

ADHICS Explained: Abu Dhabi Healthcare Information and Cyber Security Standard

Who Typically Faces ADHICS

Programme Themes