What is ADHICS?
Abu Dhabi Healthcare Information & Cyber Security Standard v2.0 (2024)
ADHICS is a mandatory cybersecurity standard issued by the Department of Health – Abu Dhabi (DoH). It applies to all healthcare entities in Abu Dhabi that store, process, or handle health information. The latest ADHICS v2.0 (released 2024) significantly expands the original 2019 standard, adding 11 comprehensive security domains including AI governance, IoMT security, and cloud healthcare controls. Non-compliance can result in license suspension, fines, and operational restrictions.
72-Hour Breach Notification
Mandatory reporting of security incidents to DoH within 72 hours with full incident playbooks
AAMEN Platform
DoH's digital platform for ADHICS compliance tracking, self-assessment submissions, and audit management
AI & Emerging Tech Governance
New v2.0 requirements for AI-powered diagnostics, health tools, and emerging technology oversight
ITSEC ensures your Abu Dhabi healthcare entity meets every ADHICS v2.0 requirement
ADHICS v2.0 Core Requirements
The Department of Health – Abu Dhabi mandates 12 comprehensive cybersecurity domains for all healthcare entities operating in the emirate.
Tailored Solutions for Every Abu Dhabi Healthcare Entity
5-Step ADHICS Compliance Process
Week 1
Gap Assessment & Scoping
Deliverables:
ADHICS v2.0 gap analysis ●
Entity type assessment ●
AAMEN readiness review ●
Entity type assessment ●
AAMEN readiness review ●
Weeks 2-3
Risk Assessment & Controls Review
Deliverables:
● PHI protection assessment
● IoMT inventory & scanning
● Network segmentation review
● IoMT inventory & scanning
● Network segmentation review
Weeks 3-6
Remediation & Implementation
Key Deliverables:
Security controls deployment ●
Policy & procedure development ●
Staff awareness training ●
Policy & procedure development ●
Staff awareness training ●
Week 7
AAMEN Submission & DoH Audit
Key Deliverables:
● Self-assessment submission
● Evidence package preparation
● DoH audit support
● Evidence package preparation
● DoH audit support
Ongoing
Certification & Ongoing Monitoring
Key Deliverables:
ADHICS certification ●
Continuous compliance monitoring ●
Annual reassessment ●
Continuous compliance monitoring ●
Annual reassessment ●
Transparent Compliance Pricing
Choose the package that fits your compliance needs
Essential ADHICS
Contact Us
Perfect for clinics, pharmacies, and labs
✔ ADHICS v2.0 Gap Assessment
✔ PHI Security Review
✔ Basic Vulnerability Scanning
✔ AAMEN Self-Assessment Support
✔ Incident Response Plan Template
✔ Email Support
✔ PHI Security Review
✔ Basic Vulnerability Scanning
✔ AAMEN Self-Assessment Support
✔ Incident Response Plan Template
✔ Email Support
Complete ADHICS Compliance
Contact Us
Comprehensive coverage for hospitals and telehealth
Everything in Essential, plus:
✔ Full Penetration Testing
✔ IoMT Security Assessment
✔ Monthly Security Reviews
✔ 24/7 Incident Response Hotline
✔ DoH Audit Preparation
✔ Dedicated Compliance Manager
✔ Full Penetration Testing
✔ IoMT Security Assessment
✔ Monthly Security Reviews
✔ 24/7 Incident Response Hotline
✔ DoH Audit Preparation
✔ Dedicated Compliance Manager
Enterprise Health Shield
Contact Us
White-glove service for hospital networks and health systems
Everything in Complete, plus:
✔ Multi-Facility Coordination
✔ (SEHA)Medical Device Security Audits
✔ AI Governance Framework
✔ Weekly Status Meetings
✔ Priority DoH Liaison
✔ Continuous Threat Monitoring
✔ SLA-Backed Response Times
✔ Multi-Facility Coordination
✔ (SEHA)Medical Device Security Audits
✔ AI Governance Framework
✔ Weekly Status Meetings
✔ Priority DoH Liaison
✔ Continuous Threat Monitoring
✔ SLA-Backed Response Times
Need a Custom Solution?
Trusted by Abu Dhabi Healthcare Leaders
ITSEC's deep understanding of ADHICS v2.0 was instrumental in achieving our compliance certification. Their AAMEN platform expertise saved us weeks of preparation time.
M
Dr. Mariam Al-Mazrouei
Chief Information Security Officer
Abu Dhabi Hospital Network
Abu Dhabi Hospital Network
Our telehealth platform passed the DoH audit with zero findings thanks to ITSEC's comprehensive ADHICS assessment. Their IoMT security expertise was particularly valuable.
M
Omar Al-Hashimi
CTO
Abu Dhabi Digital Health
Abu Dhabi Digital Health
ITSEC helped us navigate the transition from ADHICS v1.0 to v2.0 seamlessly. Their AI governance framework was exactly what we needed for our diagnostic AI systems.
M
Dr. Aisha Al-Kaabi
Director of Health Informatics
SEHA Affiliated Hospital
SEHA Affiliated Hospital
Case Study: Abu Dhabi Hospital Chain
How a multi-facility healthcare network achieved full ADHICS v2.0 compliance in 8 weeks
The Challenge
A major Abu Dhabi hospital network with 5 facilities needed to transition from ADHICS v1.0 to v2.0 compliance before the DoH deadline. Key challenges included IoMT security across 500+ connected medical devices, AI diagnostic system governance, and AAMEN platform submissions for all locations.
8 Weeks
Compliance Achievement
0 Findings
Inspection Findings
5 Facilities
Weeks to Compliance
ITSEC Solution
☑ Comprehensive IoMT inventory and segmentation across all 5 facilities
☑ 72-hour incident response procedures with DoH notification protocols
☑ Staff training program covering all 11 ADHICS v2.0 domains
☑ 72-hour incident response procedures with DoH notification protocols
☑ Staff training program covering all 11 ADHICS v2.0 domains
☑ AI governance framework for 3 diagnostic AI systems
Framework
☑ AAMEN platform submissions with audit-ready evidence packages
☑ Continuous monitoring dashboard for ongoing compliance
Framework
☑ AAMEN platform submissions with audit-ready evidence packages
☑ Continuous monitoring dashboard for ongoing compliance
Frequently Asked Questions
ADHICS v2.0 Compliance Explained
What is ADHICS and who must comply?
ADHICS (Abu Dhabi Healthcare Information & Cyber Security Standard) is a mandatory cybersecurity standard issued by the Department of Health – Abu Dhabi (DoH). All healthcare entities in Abu Dhabi must comply, including hospitals, clinics, pharmacies, labs, telehealth platforms, health insurers, health tech companies, and medical device manufacturers — any entity that stores, processes, or handles health information.
What's new in ADHICS v2.0 compared to v1.0?
ADHICS v2.0 (released 2024) significantly expands the original 2019 standard with new domains including AI & Emerging Technology Governance, comprehensive IoMT/Medical Device Security, healthcare-specific Cloud Security controls, mandatory 72-hour breach notification, full Third-Party Risk Management requirements, digital AAMEN platform compliance tracking, and detailed PHI data classification with consent management.
What is the AAMEN platform?
AAMEN is the Department of Health – Abu Dhabi's digital platform for ADHICS compliance tracking and management. Healthcare entities use AAMEN to submit self-assessments, upload compliance evidence, track remediation progress, and manage DoH audit processes. ITSEC provides full AAMEN readiness and submission support.
What happens if we don't comply with ADHICS?
Non-compliance with ADHICS can result in license suspension by the DoH, significant financial penalties, operational restrictions on healthcare activities, and potential reputational damage. The DoH actively enforces ADHICS requirements through audits and inspections.
How long does ADHICS compliance take?
For organizations new to ADHICS, expect 6-10 weeks for full compliance. Organizations transitioning from v1.0 to v2.0 typically require 4-8 weeks depending on existing maturity and the gap in new requirements. Multi-facility networks (like SEHA hospitals) may require 8-12 weeks for coordinated compliance across all locations.
Is ADHICS the same as DHA compliance?
No. ADHICS is issued by the Department of Health – Abu Dhabi (DoH) and applies to Abu Dhabi healthcare entities. DHA (Dubai Health Authority) has separate compliance requirements for Dubai-based healthcare providers. Different regulator, different emirate, different requirements. ITSEC provides compliance services for both.
Do medical device manufacturers need ADHICS compliance?
Yes. ADHICS v2.0 includes specific requirements for medical device security, particularly IoMT (Internet of Medical Things) devices. This covers connected medical devices, PACS/DICOM systems, patient monitoring equipment, and any device that processes or transmits health data within Abu Dhabi healthcare facilities.
How does the 72-hour breach notification work?
Under ADHICS v2.0, healthcare entities must report confirmed security incidents to the DoH within 72 hours of detection. This requires pre-established incident response playbooks, designated notification contacts, evidence preservation procedures, and communication protocols. ITSEC helps develop and test these through tabletop exercises.
Ready to Secure Your Digital Assets?
Get a comprehensive security assessment from our expert team. Protecting businesses since 2011.
NDA Protected
24hr Response
Global Coverage