Case studies
What our work looks like in production.
Anonymised engagements drawn from MAST's portfolio across banking, healthcare, energy and government. Client names are withheld; metrics, durations and approaches reflect the actual delivery.
Banking & Financial ServicesUnited Arab Emirates
ISO 27001 certificate issued in 14 weeks across three legal entities — with CBUAE alignment built in.
Tier-1 UAE Bank · ISO/IEC 27001 Implementation & Certification
14 weeks
Time to certificate
3
Legal entities covered
0
Major nonconformities
Read case study
Banking & Financial ServicesGCC (UAE & KSA)
PCI DSS v4.0 Level 1 attestation achieved with 58% reduction in cardholder data environment scope.
GCC Payments Processor · PCI DSS v4.0 Compliance & QSA Validation
58%
CDE scope reduction
PCI DSS v4.0 + SWIFT CSP
Frameworks evidenced
CBUAE + SAMA
Regulators satisfied
Read case study
HealthcareUnited Arab Emirates
ADHICS V2 attestation and ISO 27001 certification delivered as one programme for an Abu Dhabi healthcare entity.
UAE Health Authority · ADHICS V2 & ISO 27001 Combined Programme
ADHICS V2 + ISO 27001
Frameworks evidenced
18 weeks
Programme duration
~80%
Evidence reuse rate
Read case study
Oil, Gas & EnergyKingdom of Saudi Arabia
NCA OTCC compliance achieved across 14 operational sites without disrupting production.
KSA Energy Major · NCA OTCC & SAMA-aligned OT/IT Cybersecurity
14
Sites covered
0 hours
Production downtime
22 weeks
Programme duration
Read case study
HealthcareIndia
DPDP Act readiness and ISO 27701 PIMS delivered ahead of India's Data Protection Board enforcement window.
India Hospital Group · DPDP Act 2023 Readiness & ISO 27701 PIMS
12
Hospitals onboarded
ISO 27701 + DPDP + ISO 42001-aligned
Frameworks evidenced
20 weeks
Programme duration
Read case study