We map the work to the controls that apply to you, such as the NCA Essential Cybersecurity Controls and the Personal Data Protection Law, and prepare the evidence in a form your compliance team can file.
Riyadh Solutions
Best BI, analytics and embedded insights company in Riyadh
Metrics defined once, dashboards people trust and insights inside the applications where decisions are made. Hosn Al Tomoh works with organisations in Riyadh on analytics, agreeing scope, responsibilities and proof of completion for each phase from the start.
Business intelligence turns operational data into numbers people trust: a semantic layer that defines each metric once, dashboards built on it, and insights embedded where decisions are made. Most of the effort goes into agreeing definitions, such as what counts as revenue or an active customer, before any chart is drawn.
Saudi programmes usually have to account for the Essential Cybersecurity Controls of the National Cybersecurity Authority (NCA), the Personal Data Protection Law overseen by SDAIA and, for government entities, the standards of the Digital Government Authority. Banks answer to SAMA, and insurers to the Insurance Authority. We plan hosting, data classification and evidence around these from the start, and quote in Saudi riyals.
Your teams keep oversight throughout, and before we step back we hand over the runbooks and train the people who will run the work.
Where you already work with systems integrators or vendors, we can deliver in partnership with them, with each party's responsibilities written into the contract.
What the work covers
We measure success in working systems and agreed metrics, not in recommendations.
- One definition per metric, owned by the business and published in the semantic layer.
- Row-level security that follows the same roles as the source systems.
- Warehouse costs tracked per workload, so expensive queries show up early.
Where programmes go wrong
Dashboards lose trust when two reports show different numbers for the same metric. We settle each definition and its owner before building reports, and retire duplicates as we go.
We record decisions, responsibilities and test results as we go, so internal audit and regulators can trace every decision and who approved it.
Common questions
What buyers usually ask before a first workshop.
Often, yes. The semantic layer and the metric definitions matter more than the tool, and they can serve more than one front end.
Yes. We document the current integrations first and keep existing systems running alongside the new ones until the switch-over is proven.
Stages of the work
A phased approach, from assessment to knowledge transfer.
Assess
We review the current state, the risks and the quick wins.
Plan
We draw up a phased plan with scope, team, responsibilities and acceptance criteria for each phase.
Deliver and verify
We deliver in phases and show that each one meets its criteria.
Transfer knowledge
We document what we built and train your teams to run and change it.
Ready to mature your operations?
Book a technical consultation with our principal engineers to map out your architecture and transition plan.