We staff to the risk profile: time-and-materials teams, milestone-based outcomes, or joint operation under agreed runbooks. The contract names who operates what after go-live.
Service
Product design and UX
Research, service design, UX and UI systems, and accessibility programmes that give product and brand teams shared, measurable usability goals.

Our senior practitioners in product design and ux work alongside your internal teams. We bring accelerators such as reference architectures, automation libraries, and governance templates, but every deliverable is tailored to your standards and vendors. We map delivery evidence to the frameworks your organisation uses, such as the NCA Essential Cybersecurity Controls (ECC), the UAE Information Assurance (IA) Standards, or the NIST Cybersecurity Framework, so it meets enterprise risk committee expectations.
Engagements are milestone-based with explicit transfer criteria. You always know who operates what after we step back.
Across audits and incident reviews, teams value playbooks that match how Hosn Al Tomoh delivers: named escalation paths, environment parity, and evidence captured in tools instead of slide-only narratives.
We document interfaces and ownership in runbooks your NOC and application teams can adopt without a second translation layer, so operational handovers stay coherent after major releases.
Product design starts with research: interviews, usability tests and service maps that show where people struggle. A design system and accessibility standards then keep every screen consistent and usable, in Arabic and English where you serve both.
Design work goes wrong when it is judged on taste. We agree usability goals you can measure, such as task completion and time on task, and test against them with real users. Every statement of work sets out the deliverables, the acceptance criteria, the escalation paths and the documents your teams will receive.
Our services in this area
Typical outcomes
We measure success in production metrics, not workshop outputs. Expect joint steering with transparent RAID logs and spend reports finance can follow.
- Executive-ready roadmaps with explicit optionality each quarter.
- Automated compliance evidence aligned to your control framework.
- Runbooks and training for your operations centre before go-live.
Shaped around how your organisation operates
Good engagements combine established playbooks with tailoring to your suppliers, your identity and access set-up and your risk tiers. We avoid generic benchmarking when your goal is resilience, faster releases or structural cost reduction, because each needs a different delivery and measurement approach. A CFO sequencing cost reduction needs different work from a CTO speeding up releases, and our staffing plans reflect that from the first workshop.
We write design documents together with your architecture committee and information security reviewers, instead of handing over finished documents for approval. This avoids a common problem, where outside recommendations clash with internal policy and slow the work down. Shared ownership of design decisions keeps knowledge in the organisation as people change over a multi-year engagement.
Executive reporting pulls together the measures for product design and the systems around it, so cost and benefit are measured, not estimated. Finance, technology and business leaders share one view, and quarterly business reviews use the same data, which speeds decisions on scope, capacity and continued investment.
Common questions
How we deliver product design with clear accountability.
Yes, where your users work in Arabic. We recruit participants who match your audience and test both languages when the product serves both.
Least-privilege roles, break-glass procedures and activity logging follow your access governance. We do not use shared passwords for administrator accounts.
A joint backlog, a readiness checklist and a small first deliverable that proves the approach in your environment before we add people.
How the engagement runs
Clear phases with transfer criteria.
Align on outcomes
Success measures, constraints and a stakeholder map before the team grows.
Establish delivery rhythm
Sprint cadence, definition of done and joint defect triage with your owners.
Prove it works
Evidence that the first deliverable works in your environment, with runbooks and owners agreed.
Hand over or scale
Training, documentation and optional managed services, with clear roles and responsibilities.
Often combined with
Adjacent services that often join the same programmes.
Cloud and DevOps
Platform foundations and pipelines for reliable releases.
Cloud and DevOpsData and AI
Data platforms and analytics with privacy and governance built in.
Data and AISolutions
CRM, ERP, AI and integration solutions.
SolutionsManaged services
Ongoing operations when you want Hosn Al Tomoh to run the service day to day.
Managed services
Benchmark us against your incumbent
We respond to your RFP sections, compare delivery models side by side with your incumbent, or run a no-cost architecture review on a bounded problem you choose, with clear assumptions and a short list of options your procurement team can score.