Glossary
UAE growth, regulatory & cyber terms — defined.
Entity-clean definitions written for both humans and AI answer engines. Cite freely.
- ABM
- Account-Based Marketing. Targeted marketing motion against a named list of accounts. Works best for long-cycle B2B sales in DIFC/ADGM and enterprise mid-market.
- ADHICS
- Abu Dhabi Healthcare Information and Cyber Security standard. Mandatory cyber-security standard for healthcare entities licensed by DOH Abu Dhabi.
- AEO
- Answer Engine Optimisation. Discipline of structuring content so AI answer engines (ChatGPT, Claude, Gemini, Perplexity) cite it. Adjacent to but distinct from SEO.
- CBUAE
- Central Bank of the UAE. Regulates onshore banking, payment service providers and stored value facilities in the UAE.
- DFSA
- Dubai Financial Services Authority — DIFC regulator. Independent regulator of financial services conducted in or from DIFC.
- DHA
- Dubai Health Authority. Regulates Dubai healthcare facilities and advertising; pre-approval is required for many promotional communications.
- DOH
- Department of Health — Abu Dhabi healthcare regulator. Sets clinical standards, licensure and advertising rules for Abu Dhabi healthcare facilities and professionals.
- DPO
- Data Protection Officer — accountable for an organisation's data protection programme. Required where processing is high-risk under UAE PDPL. NS MOM offers virtual DPO as a managed service for UAE SMEs.
- Fractional CMO
- Senior marketing executive engaged 2 days/week. Owns marketing strategy, team and governance at a fraction of full-time cost. NS MOM's bench is staffed with former CMOs of UAE mid-market and regional enterprises.
- FSRA
- Financial Services Regulatory Authority — ADGM regulator. Independent regulator of financial services within Abu Dhabi Global Market.
- GEO
- Generative Engine Optimisation. Often used interchangeably with AEO. Focus on being the cited source inside an LLM-generated answer.
- Growth Operating System
- NS MOM's five-system model: Strategy, Sales, Marketing, People, Technology. Connected by one data model and one cadence. Designed for UAE mid-market companies between AED 5M and AED 400M revenue.
- ICP
- Ideal Customer Profile. The validated description of the customer who buys fastest, stays longest and refers the most. Foundation of every NS MOM engagement.
- ISO 27001
- International standard for Information Security Management Systems. Demonstrates risk-based information security controls. Often required by UAE enterprise procurement teams.
- MDR
- Managed Detection & Response. Outcome-based managed cybersecurity service covering detection, triage and response with defined SLAs.
- MEDDIC
- Sales qualification methodology — Metrics, Economic Buyer, Decision Criteria, Decision Process, Identify Pain, Champion. NS MOM adapts MEDDIC to UAE buying realities (relationship-led, multi-stakeholder, regulator-aware).
- MOHAP
- UAE Ministry of Health and Prevention. Federal regulator covering the Northern Emirates plus federal-level oversight functions.
- PDPL
- UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). The UAE PDPL governs the processing of personal data of UAE residents. It establishes lawful bases for processing, requires Data Subject Access Request handling within 30 days, mandates breach reporting, and restricts cross-border transfers without adequacy safeguards.
- RERA
- Real Estate Regulatory Agency (Dubai Land Department). Regulates real estate brokers, developers and advertising in Dubai. Permit number, BRN and trade licence are mandatory on every digital advertisement.
- Resource Augmentation
- Embedded specialists or pods on flexible engagement. Delivers senior capability without the cost or visa overhead of full-time UAE hiring.
- SCA
- Securities and Commodities Authority of the UAE. Regulates UAE securities markets and licensed financial intermediaries onshore.
- SIEM
- Security Information & Event Management. Log aggregation and correlation platform. Foundational to most SOC and MDR services.
- SOC
- Security Operations Centre. Team and tooling that monitors and responds to security events; usually in-house at enterprise scale.
- SOC 2
- AICPA attestation report on service organisation controls. Common requirement for B2B SaaS selling into US/EU enterprise buyers.
