Security Risk Assessment,
standardized and auditable
Taqyeem is a multi-tenant platform for conducting Security Risk Assessments of industrial facilities to the ANSI/API 780 methodology, aligned with the directives of the Supreme Authority for Industrial Security (SAIS). It replaces scattered spreadsheets with one standard, defensible method that produces professional assessments the Authority can trust.
One method, from asset to assessment
Taqyeem guides a facility through the complete assessment workflow and produces consistent, traceable results every time.
Assets & Facilities
Register facilities and critical assets, classify them with a Business Criteria Analysis worksheet, and verify asset lists with the facility proponent.
Threats & Scenarios
Draw on a shared threat catalog, build credible attack scenarios, and analyze vulnerability against each critical asset.
Risk on the 8×5 ERM
Score risk on the eight by five Enterprise Risk Matrix across five consequence categories, with a transparent, formula-based likelihood.
Countermeasures
Map existing and recommended countermeasures, measure their effect on residual risk, and track what still needs to be done.
Compliance
Work through the SAIS SEC 01 to SEC 19 directive checklist, record status and resolutions, and raise waivers where needed.
Professional Reports
Generate the final Security Risk Assessment report in PDF, Word and Excel, reflecting every tab with full color and traceability.
Built on a recognized standard
ANSI/API 780 methodology
The assessment engine follows the ANSI/API 780 (2nd Edition) Security Risk Assessment methodology, a recognized, sector-neutral standard for industrial facilities.
- Eight by five Enterprise Risk Matrix.
- Five consequence categories: Health & Safety, Environmental, Business Interruption, Financial, and Reputation.
- Snapshot-on-create assessments, so every result is reproducible and auditable.
Aligned with SAIS oversight
Taqyeem is built to the directives of the Supreme Authority for Industrial Security (SAIS) and supports its oversight role directly.
- Facility classification and the SEC 01 to SEC 19 compliance directives.
- A dedicated oversight portal for the Authority: all-tenant heatmap, waiver decisions, and a shared catalog.
- Revalidation cadence with reminders when a facility is due for reassessment.
Multi-sector, ready for Vision 2030
The same standard method extends across the Kingdom's industrial base, supporting economic diversification.
Hydrocarbon & petrochemical
The core domain: oil, gas and petrochemical facilities, with classification criteria and reporting tuned to the sector.
Mining & minerals
Sector-aware classification and catalogs extend the platform to mining and minerals, including lithium, with no change to the underlying method.
Secure and in the Kingdom
Multi-tenant by design
Each organization has its own isolated database schema within shared infrastructure, so assessment data is kept completely separate between organizations while remaining cost efficient.
Protected and compliant
Data is hosted inside the Kingdom of Saudi Arabia with encryption in transit and at rest, optional two-factor authentication, audit logging, and data-subject controls aligned with PDPL and NCA cloud requirements.
How it works
Register the facility
Capture the facility, its critical assets, and classify them with the Business Criteria Analysis.
Assess the risk
Build threat scenarios and score risk on the 8×5 Enterprise Risk Matrix.
Apply countermeasures
Record countermeasures and compliance, then measure the residual risk.
Report & oversee
Produce the professional report; the Authority reviews across all facilities.
Who it is for
Operating companies
Industrial facility operators conducting and maintaining their own Security Risk Assessments.
Security consultants
Assessors and reviewers who need a consistent, defensible method and ready-made reports.
The Authority (SAIS)
Regulatory oversight across every facility, with a heatmap, waiver decisions, and a shared catalog.
Ready to get started?
Get in touch to arrange a demonstration and see Taqyeem applied to your facilities.