Regional Coverage Matrix
This matrix is the authoritative inventory of published regional and country-specific coverage for Middle East sovereign adaptation use cases.
Use this matrix before describing an implementation as "regional" or "Middle East-aligned."
Status and Interpretation Rules
Publishedmeans a document exists in this repository.ReadinessandDepthvalues describe framework coverage quality, not regulator recognition.Confidencereflects documentation maturity and maintenance confidence, not legal certainty.
Country Coverage Matrix
| Country | Published Annex | Government Overlay Readiness | Banking Overlay Readiness | Telecom Overlay Readiness | Health Overlay Readiness | Data Residency Guidance | Audit Readiness Depth | Last Assessment Date | Confidence |
|---|---|---|---|---|---|---|---|---|---|
| Saudi Arabia (KSA) | Yes (ksa-regulatory-profile) | Medium-High | High (with sama-csf-integration) | Low-Medium | Low-Medium | High | Medium-High | 2026-02-24 | Medium |
| UAE | Yes (uae-ai-governance-profile) | Medium | Medium | Low | Low-Medium | Medium | Medium | 2026-02-24 | Medium |
| Egypt | Yes (egypt-pdpl-profile) | Low-Medium | Low-Medium | Low-Medium | Low-Medium | Medium | Medium | 2026-02-24 | Medium |
| Qatar | No | Low | Low | Low | Low | Low | Low | 2026-02-24 | Low |
| Kuwait | No | Low | Low | Low | Low | Low | Low | 2026-02-24 | Low |
| Bahrain | No | Low | Low | Low | Low | Low | Low | 2026-02-24 | Low |
| Oman | No | Low | Low | Low | Low | Low | Low | 2026-02-24 | Low |
| Jordan | No | Low | Low | Low | Low | Low | Low | 2026-02-24 | Low |
Regional Overlay Coverage
| Overlay | Status | Scope | Notes |
|---|---|---|---|
| Government (Middle East) Profile | Published | Regional public-sector baseline | Reference overlay; national authority precedence applies |
| SAMA CSF Integration | Published | KSA banking/finance cyber | Strong KSA financial cyber mapping; not a regional banking overlay |
| Telecom Sector Overlay (Middle East) | Planned | Regional telecom baseline | Pending |
| Islamic Finance / Sharia Overlay | Planned | Regional financial governance addendum | Pending |
| Digital Identity and Zero Trust Profile | Planned | Cross-cutting identity/security baseline | Pending |
| API Interoperability and Data Exchange Profile | Planned | Cross-border interoperability baseline | Pending |
| Critical Infrastructure AI Governance Overlay | Planned | Energy/OT/high-impact services | Pending |
| SME-Lite Conformance Profile | Planned | Cost-reduced adoption path | Pending |
Coverage Gaps (Current)
- Broader GCC national annex coverage (Qatar, Kuwait, Bahrain, Oman) is not yet published.
- Telecom and Islamic finance overlays are not yet published.
- Cross-cutting digital identity, Zero Trust, and API interoperability profiles are not yet published.
- Country-level coverage quality is uneven (KSA/UAE/Egypt depth exceeds other jurisdictions).
Update Policy
Update this matrix whenever:
- a national annex is added or materially revised
- a sector overlay is added
- coverage confidence changes due to source updates or identified gaps