-8A2BE2){kind=icon}
A complete Governance, Risk & Compliance (GRC) simulation for a virtual healthcare clinic, aligned with ISO/IEC 27001:2022, ISO/IEC 27701:2019, and Saudi PDPL.
Al‑Safa Virtual Clinic is a simulated telemedicine organisation operating entirely within the Kingdom of Saudi Arabia. This project demonstrates the full lifecycle of a GRC implementation using the SimpleRisk platform. All work was conducted as part of the FC472 – Security & Privacy Policies course at University of Prince Mugrin (UPM), Spring 2026.
- ✅ Healthcare industry selection and organisational context (ISO Clause 4)
- ✅ Leadership structure with 5 team roles (ISO Clause 5)
- ✅ Risk assessment – 10 identified risks with mitigation plans (ISO Clause 6 & 8)
- ✅ 16 security & privacy policies uploaded and mapped to controls (ISO Clause 7)
- ✅ Guidelines & procedures for operationalising policies
- ✅ Internal audit simulation (meeting minutes + findings) (ISO Clause 9)
- ✅ Final report and presentation.
| Name | Role | Team |
|---|---|---|
| Khaled Al‑Mutairi | CISO / Risk Management Lead | Risk Management |
| Eyad Salem | IT Security Manager | IT Security |
| Farooq Memarji | Privacy & Compliance Officer | Privacy & Compliance |
| Muhannad Al‑Mukhlifi | Clinical Operations Representative | Staff |
| Hazem Al‑Amri | Internal Auditor | Internal Audit |
All project resources – including policies, procedures, guidelines, the final report, presentation, and VM access – are shared through our Telegram channel.
By joining, you get:
- 🔗 Direct links to all resources (no searching required)
👉 If you need any resource, join here → Al‑Safa Virtual Clinic GRC Project on Telegram
| Type | Credentials |
|---|---|
| Web UI | wqfh / asd |
| VM Console | simplerisk / simplerisk |
- ISO/IEC 27001:2022 – Information Security Management System (Clauses 4‑10, Annex A controls)
- ISO/IEC 27701:2019 – Privacy Information Management System (PIMS) extension
- Saudi PDPL – Personal Data Protection Law
This project is for academic submission only. All content is original work of the named team members.
Built with ❤️ using SimpleRisk