UAE IAS includes 188 security controls and standards grouped into 4-tiers based on priority (from PI to P4). NESA designed these controls based on 24 threats collected from various industry reports and prioritized them based on the recorded breach ratio. P1 marks the tier with the highest priority and P4 with the lowest. Of the 188 security controls, 39 belong to tier P1, helping address 80 % of the breaches identified by NESA. Hence, implementing PI controls illustrates an organization’s foremost step towards achieving compliance with NESA requirements.