TechRisk Atlas Templates, courses and tools for AI governance in the Gulf

A working atlas of AI governance and technology risk, drawn for the Gulf.

Templates, courses and tools for the IT manager, project manager or GRC analyst who has been told to govern AI this year. Built in Excel and Word, mapped to the rules that actually apply here, usable on Monday.

One email a week on what changed in Gulf AI and technology risk rules and the control that answers it. Nothing else, ever.

Hand-drawn map of the Arabian Gulf with the regulators and standards plotted Abu Dhabi — CBUAE AI guidance, DoH ADHICS Dubai — DIFC Regulation 10 Doha Manama Riyadh — NCA AI guidelines Kuwait Overlaid everywhere: ISO/IEC 42001, NIST AI RMF, EU AI Act tiers, OWASP agentic Top 10 N
Regulatory survey of the Gulf, autumn 2026. Not to scale; the rules are.Sheet 1 of many

The sheets

Each sheet is a template or toolkit you can open and use: Excel with a Google Sheets twin, or Word. Sample data, a start-here tab, a dashboard, a plain licence. Standards are referenced by control number; their text is never copied.

  1. i

    AI acceptable-use policy, with staff GenAI guidelines

    A policy HR and IT will both sign. The lite edition is free for any organisation that wants to start this week.

    Free / $49November 2026
  2. ii

    AI system inventory and risk register

    Every AI system in one register, tiered the EU AI Act way, carrying the fields CBUAE expects, feeding a one-page dashboard.

    $79November 2026
  3. iii

    AI governance starter toolkit

    Policy pack, inventory, risk register, AI impact assessment, model card, vendor questionnaire. A consultant edition licenses reuse across clients.

    $249December 2026
  4. iv

    ISO/IEC 42001 gap assessment workbook

    All 38 controls in original wording, scored, with a statement-of-applicability equivalent and a plan that prints neatly on A4.

    $149early 2027

Prices in US dollars; the checkout provider is the merchant of record and handles VAT. These are templates and guidance, not certification or legal advice.

The GCC AI Risk Brief

Four to six hundred words on one thing that moved: a regulator's circular, a revision to a standard, an agent incident worth learning from. Every issue ends with the control or template that answers it. Free, by email and on LinkedIn.

Subscribe by email

AI Governance Fundamentals

For IT leaders, project managers and GRC teams in the Gulf. Four to five hours: three frameworks, an inventory, a risk method, a policy set, vendor AI, agents, and a 90-day implementation plan, with the sheets included. ISO/IEC 42001 implementation and Securing AI agents follow later in 2027.

The cartographer

Abrar Ahmed

Programme manager and CISM in Abu Dhabi, with more than a decade running technology programmes in the Gulf. TechRisk Atlas is where that work turns into sheets other practitioners can open, courses they can finish, and tools they can run. Everything here is written in a personal capacity and reflects no employer's views.

Corrections, questions, or a sheet you wish existed: hello@techriskatlas.com.