Policies and standards
Digital, data and service standards written for your organisation, each with an owner and a review cycle.
Industry context
We set up digital governance so leadership can see whether each programme follows the standards that apply to it.

Most of the work is agreeing the rules before writing them: who owns each decision, which national standards apply and what evidence will show compliance. We then set up the policies, the decision forums and the measures that show leadership whether digital programmes follow them.
Schools and universities plan around the academic calendar, with admissions, exams and term breaks deciding when change is possible, and they answer to regulators such as KHDA in Dubai, ADEK in Abu Dhabi and the Ministry of Education in Saudi Arabia. Academic leaders and campus IT need to agree each change, so we time go-live between terms wherever possible. In the UAE, TDRA's digital government policies and emirate programmes such as Digital Dubai set expectations, and in Saudi Arabia the Digital Government Authority's standards and SDAIA's data management and personal data rules.
We hand over with runbooks and training, and can stay on under agreed service levels.
Alongside sector regulation, we often map delivery evidence to cross-industry baselines such as the UAE Information Assurance Regulation issued by TDRA, the NCA Essential Cybersecurity Controls in Saudi Arabia and the NIST Cybersecurity Framework, which many risk reviewers already use.
We design, deliver and stay until operation is stable, with evidence your procurement and risk teams can rely on.
Digital, data and service standards written for your organisation, each with an owner and a review cycle.
Terms of reference for the boards that approve digital investment, architecture and data sharing.
Indicators and evidence that show how each programme meets the standards your regulator or authority sets.
We plan reporting and data handling around the requirements of your regulator, such as KHDA in Dubai, ADEK in Abu Dhabi or the UAE Ministry of Education, or the Saudi Ministry of Education, and the personal data law that applies in each market.
Data ownership, classification and sharing rules set out for each data domain.
A view of digital programmes against the standards, reviewed by the decision forums on a set cycle.
Digital governance is ready to set up when leadership agrees who decides on digital investment and data, and is prepared to enforce the rules.
Share your current systems, compliance themes and timeline. We will return a phased plan, a staffing model and a risk register for your stakeholders to review.