By document type
| Category | Files |
|---|---|
| Manuals | 2 |
| Policies | 1 |
| Procedures & SOPs | 13 |
| Forms & Records | 16 |
| Checklists & Audit Tools | 7 |
| Registers, Logs & Matrices | 1 |
| Training & Awareness | 2 |
| Guides & Work Instructions | 1 |
Key documents
| Reference | Document | Format |
|---|---|---|
| AGS-QM-001 | Information Security Quality Manual | Word |
| AGS-PR-02 | Risk Assessment and Treatment | Word |
| AGS-PR-05 | Access Control Management | Word |
| AGS-PR-11 | Incident Management | Word |
| AGS-F-10 | Incident Report | Word |
| AGS-REC-03 | Risk Register | Word |
- Need the complete document list? Request it — same day
- Want to check the quality first? Preview free samples
Overview
ADHICS, the Abu Dhabi Healthcare Information and Cyber Security Standard issued by the Department of Health, sits structurally close to ISO/IEC 27001 without being identical to it. That near-resemblance is where providers come unstuck: a control an ISO 27001 toolkit answers in general terms is a specific ADHICS requirement, and the space between the two is a finding. This system is written to ADHICS directly, aligned with the Department of Health ADHICS Implementation Guidelines of 9 December 2019, the edition all 43 documents follow. ADHICS V2 (2024) has since replaced them, so check the current controls against the documents before use.
The Information Security Governance Committee is named as the approving authority and the Information Security Manager carries ownership, both built into the approval routing of every document. From there the system works through the ADHICS control structure: risk assessment and treatment, asset management and classification, human resources security, physical and environmental security, access control and identity management, operations and change management, backup and restoration, third party security, incident management, information security continuity, and internal audit with corrective action. The risk register, incident log and asset inventory arrive as working registers, and a Scheme document fixes numbering and classification so the system can be extended without breaking its logic.
What this system covers
- Governance and risk — the Information Security Governance Committee, risk assessment and treatment
- Asset management and classification — asset inventory and the classification of information
- Access control and identity — user, mailbox and application access through to employee separation
- Human resources and physical security — personnel obligations and control of secure areas
- Operations, change management, backup and restoration — controlled change and recoverable data
- Third party and supplier security — pre-engagement and ongoing assessment of vendors
- Incident management and continuity — reporting, investigation and corrective action
- Internal audit and ADHICS self-assessment — verifying controls domain by domain
Who it's for
Hospitals, clinics, diagnostic centres, pharmacies, insurers and health-tech providers operating in Abu Dhabi, their Information Security Managers and CISOs, and the consultants delivering ADHICS compliance programmes. The trigger is a Department of Health compliance obligation that has become urgent, or a self-assessment that exposed how far a generic policy set falls short; the implementation roadmap gives the sequence to work in.
Everything you get
Every toolkit gives you a full set of working documents for your standard, ready to edit and use.
Native Microsoft files. Add your logo and adapt every document to how you work.
Your full toolkit arrives as a ZIP the moment payment clears.
One purchase covers everyone in your organisation. No per-seat fees.
Built by people who run real audits, so the content matches what assessors check.
One payment, perpetual licence for your organisation. No subscriptions, no renewals.
Full refund if your files are faulty, incomplete or not as described and we can't put it right
Frequently asked questions
What exactly do I receive?
A downloadable ZIP containing the full set of ready-to-use documents for this toolkit — manuals, procedures, forms, records, checklists, guidance and training material, all in editable Word and Excel format. The exact document count is shown at the top of this page.
Are the documents really editable?
Yes. Every file is native Microsoft Word or Excel — no locked PDFs. Add your logo, change wording, and tailor the content to your organisation. The toolkit is yours to keep and reuse.
Does this certify my organisation?
No. These are documentation toolkits aligned to the relevant standard to help you prepare. Certification itself is issued by an accredited certification body after their audit. Our toolkits give you a strong, audit-ready starting point.
How is it delivered?
Instantly and digitally. There's no physical shipment — you download the files right after payment and receive a backup link by email.
Do I get updates?
Yes. If we revise this toolkit, you're entitled to the updated version at no extra cost — just contact us with your order details.
What is your refund policy?
These are digital products, so once a toolkit has been downloaded we cannot take it back. If you have not downloaded yet, contact us and we will cancel the order and refund you in full. We also refund in full if the files are damaged, incomplete, or not what the product page described.
Cannot find your standard?
Tell us which scheme you work to. We will point you to the right toolkit.




