THIQL studies how organizations in the Kingdom are governed and how they endure — and publishes what it finds.
THIQL (ثقل — "weight") is an independent research initiative focused on governance, risk, compliance, resilience, and the disciplines that keep organizations standing in Saudi Arabia. The name is the promise: weight behind every decision — judgment grounded in evidence, not impression. We build measurement instruments, gather anonymized data from organizations across sectors, and publish selected findings as independent research. The goal is a clear, honest picture of how well organizations across the Kingdom manage uncertainty — measured, not assumed.
Research comes first: what THIQL offers are research products — measurement instruments, published findings, detailed reports, and benchmark insight. That focus is what keeps the research honest.
Every instrument is grounded in the recognized standards of its field — ISO 31000 and COSO ERM for enterprise risk, ISO 27001 and NIST for cybersecurity and information security, ISO 22301 and 22316 for continuity and resilience, ISO 28000 for supply chain, and others as each discipline requires — alongside the Saudi regulatory landscape, from the National Risk Council and SAMA to the National Cybersecurity Authority and the National Data Management Office. Scoring and methodology are published in full, including each instrument's limitations and the sample thresholds we require before publishing any aggregate claim.
Current research: the ERM Maturity Index — a free, bilingual, 18-question diagnostic of enterprise risk maturity. Each completion produces an immediate score for the respondent and contributes an anonymized datapoint to the growing national benchmark.
Independence — findings reflect the data alone; no one dictates what we conclude. Anonymity — published findings are aggregated and can never be traced to a person or an organization. Consent — contact details are collected only when a respondent asks for something that requires them, are used for that purpose, and are kept out of the research dataset THIQL publishes. Restraint — no cookies, no trackers, no fingerprinting, anywhere on this site.