Executive Case Studies — Governance, ERP, Cybersecurity and AI Delivery
Eight decision narratives: the situation as it was found, the complexity that made it hard, the decision taken, how it was executed, and the outcome — followed by the founder-built platforms and delivery work the studies do not cover.
Executive Case Studies
Not project summaries. Decision narratives — showing how complexity was diagnosed, strategy was chosen, and outcomes were measured.
- 01
Governance from Zero to Audit-Ready
Before
- No IT governance
- No SLAs
- No risk management
- No executive reporting
After
- SLA coverage on 100% of defined services
- Executive-ready KPI visibility
- Audit-ready documentation
- IT as strategic enabler
SITUATION
Multi-entity groups typically arrive at IT governance late: services are delivered without a catalog, SLAs are informal, risk sits undocumented, and leadership has no single view of technology operations.
COMPLEXITY
Multiple entities on different systems, no baseline data, resistance to formalization, and almost nothing documented.
DECISION
Build governance from first principles — start with policy, then SLA, then KPI, then reporting — rather than buying a framework tool.
EXECUTION
Designed policy libraries, SLA matrices, KPI dashboards in Power BI, risk registers, and quarterly governance reviews over 8 months.
OUTCOME
SLA coverage on every defined service, executive reporting on a fixed cadence, and audit-ready documentation. IT repositioned from cost center to strategic enabler.
SITUATION
Multi-entity groups typically arrive at IT governance late: services are delivered without a catalog, SLAs are informal, risk sits undocumented, and leadership has no single view of technology operations.
COMPLEXITY
Multiple entities on different systems, no baseline data, resistance to formalization, and almost nothing documented.
DECISION
Build governance from first principles — start with policy, then SLA, then KPI, then reporting — rather than buying a framework tool.
EXECUTION
Designed policy libraries, SLA matrices, KPI dashboards in Power BI, risk registers, and quarterly governance reviews over 8 months.
OUTCOME
SLA coverage on every defined service, executive reporting on a fixed cadence, and audit-ready documentation. IT repositioned from cost center to strategic enabler.
Executive Takeaway
Governance anchored in policy, SLA, and reporting earns audit-ready credibility and board-level confidence before any tool spend.
Power BISharePointITIL FrameworkCustom KPI ModelsServiceDesk - 02
ERP Transformation Across a Disconnected Organization
Before
- Fragmented operations on spreadsheets
- Manual handoffs
- Data silos
- No integration
After
- Unified ERP platform
- Automated workflows
- Single source of truth under governance
- Handoffs inside the system, not between spreadsheets
SITUATION
Business running on spreadsheets and manual handoffs. No integration between sales, HR, inventory, and accounting.
COMPLEXITY
Legacy data, resistance to change, no IT culture, and a need to maintain operations during transition.
DECISION
Deploy Odoo ERP as a unified platform with phased rollout — starting with the highest-friction departments first.
EXECUTION
Full needs analysis, process mapping, custom module development, data migration, training, and go-live support across 5+ modules.
OUTCOME
Sales, HR, inventory, and accounting on one ERP, with handoffs inside the system instead of between spreadsheets, and a governed single source of truth.
SITUATION
Business running on spreadsheets and manual handoffs. No integration between sales, HR, inventory, and accounting.
COMPLEXITY
Legacy data, resistance to change, no IT culture, and a need to maintain operations during transition.
DECISION
Deploy Odoo ERP as a unified platform with phased rollout — starting with the highest-friction departments first.
EXECUTION
Full needs analysis, process mapping, custom module development, data migration, training, and go-live support across 5+ modules.
OUTCOME
Sales, HR, inventory, and accounting on one ERP, with handoffs inside the system instead of between spreadsheets, and a governed single source of truth.
Executive Takeaway
Phased ERP replaces spreadsheet chaos with a single governed backbone the organization can operate and audit.
Odoo 17/18PythonPostgreSQLXMLREST APIs - 03
Cybersecurity Hardening Under Regulatory Pressure
Before
- No formal security policies
- Unmanaged endpoints
- Regulatory gaps
After
- Endpoints managed under central policy
- SAMA-aligned documentation and posture
- No escalated critical incidents in stabilization scope
- Tested BCP
SITUATION
Insurance brokerages — supervised by SAMA at the time, and by the Insurance Authority since the 2024 transfer — face a recurring gap: security practice runs ahead of security policy, endpoints outgrow central management, and evidence for the regulator is assembled after the fact rather than produced continuously.
COMPLEXITY
24/7 operational environment with limited tolerance for visible outages, constrained budget, and staff still maturing on security protocols.
DECISION
Implement layered defense — perimeter first, then endpoint, then monitoring, then policies — with parallel compliance documentation.
EXECUTION
Deployed FortiGate firewalls, Sophos endpoint protection, SOC monitoring, access control policies, backup/DR, and BCP procedures.
OUTCOME
Perimeter, endpoint, and SOC controls in place under written access policy. Regulator evidence produced continuously rather than assembled at audit time. Business continuity tested and documented. No critical incident escalated within the stabilization scope.
SITUATION
Insurance brokerages — supervised by SAMA at the time, and by the Insurance Authority since the 2024 transfer — face a recurring gap: security practice runs ahead of security policy, endpoints outgrow central management, and evidence for the regulator is assembled after the fact rather than produced continuously.
COMPLEXITY
24/7 operational environment with limited tolerance for visible outages, constrained budget, and staff still maturing on security protocols.
DECISION
Implement layered defense — perimeter first, then endpoint, then monitoring, then policies — with parallel compliance documentation.
EXECUTION
Deployed FortiGate firewalls, Sophos endpoint protection, SOC monitoring, access control policies, backup/DR, and BCP procedures.
OUTCOME
Perimeter, endpoint, and SOC controls in place under written access policy. Regulator evidence produced continuously rather than assembled at audit time. Business continuity tested and documented. No critical incident escalated within the stabilization scope.
Executive Takeaway
Layered defense with documented continuity meets SAMA-grade expectations without trading away operational uptime.
Perimeter securityEndpoint protectionSOCISO 27001 FrameworkSAMA - 04
Building an AI-Powered SaaS from Concept to Market
Before
- Hours spent on manual content creation
- Inconsistent quality
- No optimization
After
- Production AI platform
- Automated content workflows
- Human review and approval before publish
- Data-driven iteration
SITUATION
Professional content creators spending hours on LinkedIn posts with inconsistent quality and no data-driven optimization.
COMPLEXITY
LLM integration reliability, content personalization at scale, scheduling infrastructure, and user experience for non-technical professionals.
DECISION
Build a full-stack platform combining AI generation, human editing controls, scheduling, and analytics — not just a wrapper around GPT.
EXECUTION
Designed architecture with Next.js, TypeScript, Python backend, OpenAI integration, PostgreSQL, and Docker deployment pipeline.
OUTCOME
A production platform that carries a post from generation through review, approval, scheduling, and analytics in one loop, iterating on user feedback.
SITUATION
Professional content creators spending hours on LinkedIn posts with inconsistent quality and no data-driven optimization.
COMPLEXITY
LLM integration reliability, content personalization at scale, scheduling infrastructure, and user experience for non-technical professionals.
DECISION
Build a full-stack platform combining AI generation, human editing controls, scheduling, and analytics — not just a wrapper around GPT.
EXECUTION
Designed architecture with Next.js, TypeScript, Python backend, OpenAI integration, PostgreSQL, and Docker deployment pipeline.
OUTCOME
A production platform that carries a post from generation through review, approval, scheduling, and analytics in one loop, iterating on user feedback.
Executive Takeaway
Shippable AI demands full-stack rigor across generation, controls, and observability — not a thin GPT wrapper.
Next.jsTypeScriptPythonOpenAIPostgreSQLDockerLinkedIn workflows - 05
Microsoft 365 Tenant and Domain Transition
Before
- Legacy email
- Fragmented identity
- Multiple disconnected domains
After
- Unified identity
- Modern workplace
- Continuity as the acceptance condition
- Teams + SharePoint + Exchange
SITUATION
Organization on legacy email infrastructure with fragmented identity management, no centralized collaboration, and multiple disconnected domains.
COMPLEXITY
Strict continuity expectations during migration, MX record cutover timing, legacy data preservation, and user training across multiple locations.
DECISION
Execute a phased migration — tenant setup first, then mailbox migration with parallel running, then domain cutover with tested rollback.
EXECUTION
Provisioned Microsoft 365 tenant, configured Azure AD, migrated mailboxes via Exchange Online, deployed Teams, and cut over domains with a sequenced plan to minimize user-facing disruption.
OUTCOME
Unified identity and collaboration. Roughly 150 named users and 58 shared departmental mailboxes moved with continuity as the acceptance condition. Teams, SharePoint, and Exchange Online in place.
SITUATION
Organization on legacy email infrastructure with fragmented identity management, no centralized collaboration, and multiple disconnected domains.
COMPLEXITY
Strict continuity expectations during migration, MX record cutover timing, legacy data preservation, and user training across multiple locations.
DECISION
Execute a phased migration — tenant setup first, then mailbox migration with parallel running, then domain cutover with tested rollback.
EXECUTION
Provisioned Microsoft 365 tenant, configured Azure AD, migrated mailboxes via Exchange Online, deployed Teams, and cut over domains with a sequenced plan to minimize user-facing disruption.
OUTCOME
Unified identity and collaboration. Roughly 150 named users and 58 shared departmental mailboxes moved with continuity as the acceptance condition. Teams, SharePoint, and Exchange Online in place.
Executive Takeaway
Phased mailbox and tenant work modernizes workplace identity while avoiding a disruptive flash cutover.
Microsoft 365Azure ADExchange OnlinePowerShellTeams - 06
Infrastructure Modernization and Network Redesign
Before
- Aging network
- Bottlenecks
- Security gaps
- Unreliable wireless
After
- Documented network topology
- Centralized firewall policy and monitoring
- VLAN-segmented security zones
- VPN remote access for distributed teams
SITUATION
Aging network causing bottlenecks, security gaps, and unreliable wireless connectivity across office locations.
COMPLEXITY
Business-critical operations running 24/7, no network documentation, mixed vendor hardware, and limited change windows.
DECISION
Complete network redesign with enterprise-grade wireless, VLAN segmentation, and centralized security — executed in phases to minimize disruption.
EXECUTION
Deployed Aruba wireless infrastructure, FortiGate firewall, VLAN architecture, VPN for remote access, and enterprise-grade monitoring.
OUTCOME
Enterprise wireless across the office locations, VLAN-segmented security zones, centralized firewall policy, and monitored links with VPN access for distributed teams.
SITUATION
Aging network causing bottlenecks, security gaps, and unreliable wireless connectivity across office locations.
COMPLEXITY
Business-critical operations running 24/7, no network documentation, mixed vendor hardware, and limited change windows.
DECISION
Complete network redesign with enterprise-grade wireless, VLAN segmentation, and centralized security — executed in phases to minimize disruption.
EXECUTION
Deployed Aruba wireless infrastructure, FortiGate firewall, VLAN architecture, VPN for remote access, and enterprise-grade monitoring.
OUTCOME
Enterprise wireless across the office locations, VLAN-segmented security zones, centralized firewall policy, and monitored links with VPN access for distributed teams.
Executive Takeaway
Segmented wireless and centralized controls turn brittle network friction into a dependable enterprise fabric.
ArubaFortiGateVLANVPNMonitoring Tools - 07
Digital Insurance Platform Enablement
Before
- Legacy insurance platforms
- Compliance gaps
- Fragmented systems
After
- Regulatory-aligned posture
- Integrated operations
- Veeam backup and DR in place
- Compliance evidence produced in routine, not at audit
SITUATION
Insurance brokerage running on disconnected legacy platforms with compliance gaps and no integrated technology strategy.
COMPLEXITY
Regulated industry with SAMA requirements, 24/7 operations, core insurance platform dependencies, and limited IT maturity.
DECISION
Build compliant infrastructure first, then layer security controls, then optimize platform integrations — compliance as the foundation, not an afterthought.
EXECUTION
Deployed SAP Business One, implemented FortiGate security, Veeam backup/DR, tested BCP procedures, and built SAMA-aligned processes.
OUTCOME
Core insurance operations running on SAP Business One with Veeam backup and DR behind them, and compliance evidence produced as part of the operating routine rather than at audit time.
SITUATION
Insurance brokerage running on disconnected legacy platforms with compliance gaps and no integrated technology strategy.
COMPLEXITY
Regulated industry with SAMA requirements, 24/7 operations, core insurance platform dependencies, and limited IT maturity.
DECISION
Build compliant infrastructure first, then layer security controls, then optimize platform integrations — compliance as the foundation, not an afterthought.
EXECUTION
Deployed SAP Business One, implemented FortiGate security, Veeam backup/DR, tested BCP procedures, and built SAMA-aligned processes.
OUTCOME
Core insurance operations running on SAP Business One with Veeam backup and DR behind them, and compliance evidence produced as part of the operating routine rather than at audit time.
Executive Takeaway
Compliance-first infrastructure keeps core insurance platforms on a regulator-ready cadence — not last-minute scrambling.
SAP B1Perimeter securityBackup & DRActive DirectoryExchange - 08
BI Dashboards and KPI Executive Operating Model
Before
- No executive visibility
- Data scattered across tools
- No unified reporting
After
- Real-time dashboards
- Data-driven decisions
- Board-ready reporting
- Measurable accountability
SITUATION
Executive leadership had no real-time visibility into IT performance, cost, risk, or vendor performance.
COMPLEXITY
Data scattered across ticketing systems, spreadsheets, and vendor portals. No unified data model or reporting cadence.
DECISION
Build a KPI operating model from scratch — define the metrics, build the data pipeline, design the dashboards, establish the reporting cadence.
EXECUTION
Designed KPI framework, built Power BI dashboards tracking SLA compliance, incident trends, service availability, vendor performance, and budget utilization.
OUTCOME
Real-time executive visibility. IT decisions argued from dashboards rather than anecdote. Board-ready reporting on SLA compliance, incident trends, service availability, vendor performance, and budget utilization.
SITUATION
Executive leadership had no real-time visibility into IT performance, cost, risk, or vendor performance.
COMPLEXITY
Data scattered across ticketing systems, spreadsheets, and vendor portals. No unified data model or reporting cadence.
DECISION
Build a KPI operating model from scratch — define the metrics, build the data pipeline, design the dashboards, establish the reporting cadence.
EXECUTION
Designed KPI framework, built Power BI dashboards tracking SLA compliance, incident trends, service availability, vendor performance, and budget utilization.
OUTCOME
Real-time executive visibility. IT decisions argued from dashboards rather than anecdote. Board-ready reporting on SLA compliance, incident trends, service availability, vendor performance, and budget utilization.
Executive Takeaway
An explicit KPI operating model compresses fragmented signals into board-defensible executive decisions.
Power BISharePointExcel ModelsSQL
Signature Projects
Not a portfolio. Environments diagnosed, strategies chosen, outcomes measured.
Moatheny / موذني
UAT / TestingProblem: Islamic daily utilities need trustworthy UX, prayer-time clarity, and a foundation that can grow without turning into short-lived experiments.
Founder · Islamic utility platform
Solution: A free Islamic utility app, currently in user acceptance testing. It covers prayer-time display, daily Islamic utility features, and a foundation built to carry further community-focused capabilities.
Impact: Free to use, and in user acceptance testing ahead of public release.
Sheikha Age
In developmentProblem: Family health follow-up for children is often scattered across notes, messages, and ad-hoc reminders — producing friction instead of clarity.
Founder · Social-impact platform
Solution: A planned family and child-care support application that will help parents and households track children's age milestones, health records, vaccination schedules, reminders, and family support services. Scoped as a free social-impact platform that gathers family health follow-up in one place.
Impact: At design stage, scoped free at the point of use.
Odoo 18 Modules & ERP Customizations
CompletedProblem: Organizations need ERP that reflects real process, governance, and service structure — not generic defaults that decay in production.
ERP Architect & Module Lead
Solution: Designed and guided Odoo 18 modules, ERP customizations, workflows, service structures, and business-process enhancements across operational and governance needs.
Impact: ERP extensions anchored in how teams actually work and report.
Vendor Optimization & Cost Control
CompletedProblem: Unmanaged vendor relationships with redundant contracts and no performance measurement.
Vendor Governance Lead
Solution: Implemented vendor management framework with performance SLAs, contract reviews, consolidation strategy, and cost benchmarking.
Impact: Took 40% off contracted vendor spend, with every vendor scored against its SLA
Start a Strategic Conversation
Executive, advisory, or confidential briefings — use the form below. I read every message directly.
Open to executive and technical conversations
Direct Channels
Phone / WhatsApp
0502484422Email
[email protected]Location
Riyadh, Saudi Arabia
Start with the challenge. I will understand the system behind it.
Use this form for advisory, transformation, ERP, governance, cybersecurity, or executive technology discussions.
Direct inquiry
Where to go next