THIQL·ثـقلSTRATEGIC RISK & RESILIENCE
Enterprise Risk Maturity Diagnostic

Where does your organization stand on risk maturity?

An 18-question diagnostic developed by THIQL, an independent Saudi risk & resilience research initiative. Nine minutes. An honest score. A clear picture of the gap between your risk practice and where regulators and boards expect it to be.

Written against Saudi national risk guidance, structured on ISO 31000, COSO ERM and the Three Lines Model, with risk-assessment definitions from IEC 31010. Its maturity levels are THIQL’s own

LIVE SCORE
55
MATURITY / 100
Governance & Culture Risk Appetite Risk Identification Risk Assessment Risk Treatment Monitoring & Reporting
About your organization
A few quick selections so your results are read in the right context. No identifying information is requested — your anonymized scores and this organization profile become a datapoint in THIQL’s research dataset.
Privacy notice

By continuing, you agree to how THIQL handles data: this record joins THIQL’s research dataset, which is published as findings and used to build THIQL’s benchmarks, reports and research products. Read the Privacy Policy

TWO LAST QUESTIONS — NOT SCORED
Which of the following risk areas are formally recorded in your organization’s risk register?
Select all that apply. This is not scored and does not affect your result — it feeds THIQL’s research into what risk registers actually contain.
Technology & information
Artificial intelligence
Cyber security
Digital transformation & technology adoption
Operations & supply chains
Third parties and supply chains
Business continuity and operational disruption
Natural catastrophe & physical damage
Finance & economy
Financial (liquidity, credit, market)
Economic volatility & cost pressure
Fraud
External environment & compliance
Geopolitical
Regulatory & legislative change
Climate & environment
The organization & its reputation
Workforce and capability
Reputation
Other — please specify
None of these is formally recorded
And which of the following does the risk report your leadership receives actually contain?
Select all that apply. Also unscored — it feeds THIQL’s research into what risk reports actually say.
The principal risks facing the organization
How each risk has moved since the last report
Where risks stand against risk appetite
Key risk indicators, and which limits have been crossed
The status of treatment plans and who owns them
Emerging risks
Risks that have materialized, and what was learned
The objectives each principal risk threatens
Effectiveness of controls and actions taken
Assurance summary
Breakdown of risks by category
No risk report reaches leadership
About your organization
Four final selections complete your organization’s research profile. Your score follows immediately.
Your Result

Enterprise Risk Maturity Profile

0
MATURITY / 100
DOMAINSCORE

See the full picture behind your score

The full report gives your overall score and a domain-by-domain diagnosis, each domain referenced against the standards and guidance the instrument is built on, showing where you stand and why. Prepared by THIQL, an independent Saudi research initiative in governance, risk, compliance and resilience, drawing on senior practice across the government and private sectors, from major national operators to Big Four advisory.

Detailed Diagnostic Report

A full written profile of your six domain scores — what each level means for your organization and why — downloaded to your device once you submit your details.
Privacy notice

By sending, you agree to THIQL’s terms and data practices. These details are used to answer and follow up on your request — and, if you ticked the boxes above, to send you research updates or THIQL’s marketing. They are not part of the research dataset. Privacy Policy · Terms

Your scores are attached automatically.

Sector-mapped editions — SAMA, NCA, PDPL, the National Risk Council and more — are in development. Register your organization's interest →

© 2026 THIQL — Risk & Resilience Research · Clarity under uncertainty · An independent research initiative. Questions authored against Saudi national risk guidance and international practice; mapped to ISO 31000:2018 and COSO ERM 2017. This diagnostic is a directional self-assessment reflecting the respondent’s perspective — indicative only, not a formal audit or an audited maturity rating. Responses are recorded anonymously — no name, no email, no login — and become part of THIQL’s research dataset, which THIQL publishes and uses to build its benchmarks and reports.
Home · About · How the index is scored — full methodology · Contact · Privacy · Terms