We map the work to the controls that apply to you, such as the NCA Essential Cybersecurity Controls and the Personal Data Protection Law, and prepare the evidence in a form your compliance team can file.
Riyadh Services
Best Managed services company in Riyadh
Managed operations, runbooks and agreed service levels, planned around your business peaks. Hosn Al Tomoh works with organisations in Riyadh on managed services, agreeing scope, responsibilities and proof of completion for each phase from the start.
Managed services take the day-to-day operation of systems off your team: monitoring, incident handling, patching, changes and reporting against agreed service levels. Capacity and change freezes are planned around your business peaks, such as Ramadan, month-end close or major sales.
Saudi programmes usually have to account for the Essential Cybersecurity Controls of the National Cybersecurity Authority (NCA), the Personal Data Protection Law overseen by SDAIA and, for government entities, the standards of the Digital Government Authority. Banks answer to SAMA, and insurers to the Insurance Authority. We plan hosting, data classification and evidence around these from the start, and quote in Saudi riyals.
Before go-live, we run a full rehearsal of the cutover with the team who will operate the service, and agree in advance how problems will be escalated in the first weeks after launch.
The scope can run from a short diagnostic to a phased rollout, and each phase is fixed before it starts.
Where the effort goes
We concentrate on the points below, because that is where the work usually stumbles.
- Service levels you can observe in your own tools.
- Runbooks agreed before transition and updated after every major incident.
- Monthly service reviews that show trends, not only ticket counts.
Where programmes go wrong
Transitions to a managed service fail when knowledge leaves with the old team. We shadow the current operation, document it and run it jointly before taking full responsibility.
We record decisions, responsibilities and test results as we go, so internal audit and regulators can trace every decision and who approved it.
Common questions
What buyers usually ask before a first workshop.
Yes. The contract includes an exit plan with documentation and a handover period, so you can bring the service in-house or move it elsewhere.
Yes. We document the current integrations first and keep existing systems running alongside the new ones until the switch-over is proven.
Stages of the work
A phased approach, from assessment to knowledge transfer.
Assess
We review the current state, the risks and the quick wins.
Plan
We draw up a phased plan with scope, team, responsibilities and acceptance criteria for each phase.
Deliver and verify
We deliver in phases and show that each one meets its criteria.
Transfer knowledge
We document what we built and train your teams to run and change it.
Ready to mature your operations?
Book a technical consultation with our principal engineers to map out your architecture and transition plan.