ADHICS is mandatory in Abu Dhabi and it is enforced, and a generic ISO 27001 toolkit will not map onto it.
Overview
ADHICS, the Abu Dhabi Healthcare Information and Cyber Security Standard issued by the Department of Health, sits structurally close to ISO/IEC 27001 without being identical to it. That near-resemblance is where providers come unstuck: a control an ISO 27001 toolkit answers in general terms is a specific ADHICS requirement, and the space between the two is a finding. This system is written to ADHICS directly, aligned with the Department of Health implementation guidelines.
The Information Security Governance Committee is named as the approving authority and the Information Security Manager carries ownership, both built into the approval routing of every document. From there the system works through the ADHICS control structure: risk assessment and treatment, asset management and classification, human resources security, physical and environmental security, access control and identity management, operations and change management, backup and restoration, third party security, incident management, information security continuity, and internal audit with corrective action. The risk register, incident log and asset inventory arrive as working registers, and a Scheme document fixes numbering and classification so the system can be extended without breaking its logic.
What this system covers
- Governance and risk — the Information Security Governance Committee, risk assessment and treatment
- Asset management and classification — asset inventory and the classification of information
- Access control and identity — user, mailbox and application access through to employee separation
- Human resources and physical security — personnel obligations and control of secure areas
- Operations, change management, backup and restoration — controlled change and recoverable data
- Third party and supplier security — pre-engagement and ongoing assessment of vendors
- Incident management and continuity — reporting, investigation and corrective action
- Internal audit and ADHICS self-assessment — verifying controls domain by domain
Who it's for
Hospitals, clinics, diagnostic centres, pharmacies, insurers and health-tech providers operating in Abu Dhabi, their Information Security Managers and CISOs, and the consultants delivering ADHICS compliance programmes. The trigger is a Department of Health compliance obligation that has become urgent, or a self-assessment that exposed how far a generic policy set falls short; the implementation roadmap gives the sequence to work in.
By document type
Key documents
Need the complete document list for this toolkit? Request it — sent the same day.
Everything you get
Every toolkit gives you a full set of working documents for your standard, ready to edit and use.
Native Microsoft files. Add your logo and adapt every document to how you work.
Your full toolkit arrives as a ZIP the moment payment clears.
One purchase covers everyone in your organisation. No per-seat fees.
Built by people who run real audits, so the content matches what assessors check.
Buy once and own it. No subscription and no renewals.
If the toolkit is not right for you, tell us within 14 days for a full refund.
From purchase to audit-ready
Buy & download instantly
Pay securely by card. Your ZIP download link appears immediately on the confirmation page and in your email.
Edit & brand as your own
Open the native Word & Excel files, add your logo and details, and adapt everything to your organisation.
Implement & get audit-ready
Roll out the manuals, procedures, forms and checklists to build a working, certification-ready system.
Frequently asked questions
What exactly do I receive?
A downloadable ZIP containing the full set of ready-to-use documents for this toolkit — manuals, procedures, forms, records, checklists, guidance and training material, all in editable Word and Excel format. The exact document count is shown at the top of this page.
Are the documents really editable?
Yes. Every file is native Microsoft Word or Excel — no locked PDFs. Add your logo, change wording, and tailor the content to your organisation. The toolkit is yours to keep and reuse.
Does this certify my organisation?
No. These are documentation toolkits aligned to the relevant standard to help you prepare. Certification itself is issued by an accredited certification body after their audit. Our toolkits give you a strong, audit-ready starting point.
How is it delivered?
Instantly and digitally. There's no physical shipment — you download the files right after payment and receive a backup link by email.
Do I get updates?
Yes. If we revise this toolkit, you're entitled to the updated version at no extra cost — just contact us with your order details.
What is your refund policy?
Because these are digital products delivered instantly, all sales are final once downloaded. If you have any issue with your files, contact us and we'll make it right. See our Refund Policy for full details.
Tell us which scheme you work to. We will point you to the right toolkit.