Clarity under uncertainty.

THIQL is an independent Saudi research initiative in governance, risk, compliance, and resilience — studying how organizations are governed and how they endure, publishing what it finds, and building a picture of how organizations manage uncertainty.

Take the ERM assessment →
18 questions · no registration
Explore the current research
The initiative

Every organization manages uncertainty. Almost none can prove how well.

That gap is the reason THIQL exists. We measure how well organizations govern themselves, manage risk in every form it takes, and withstand what they can't predict — and turn it into a picture of how governance, risk, and resilience are practiced across the Kingdom's organizations, one that grows with every organization that takes part. Not impression. Evidence.

Our field is the whole of what keeps an organization standing — governance, risk, compliance, cybersecurity, information security, data protection, continuity, resilience, and the disciplines still taking shape — measured across every sector that carries consequence. The work is led by practitioners who have run these functions at scale, grounded in the international standards and Saudi frameworks boards and regulators already trust. Research comes first, so the findings answer only to the data.

Resilience is never improvised. It is designed.

The current research

The ERM Maturity Index — measured, not assumed.

Eighteen questions across six domains produce a maturity index out of 100, a domain-by-domain profile, and a written diagnosis — generated on your device, with no login and no identifying information required.

Governance & Culture Risk Appetite Risk Identification Risk Assessment Risk Treatment Monitoring & Reporting
Written against Saudi national risk guidance, structured on ISO 31000, COSO ERM and the Three Lines Model, with risk-assessment definitions from IEC 31010. Its maturity levels are THIQL’s own
Take the ERM assessment → 18 questions · no registration