Skip to main content

IT Governance, KPI/SLA and Cybersecurity Operating Model

How the estate is actually run: eight operating domains and the layer beneath each one, the governance, security, and platform capabilities they rest on, and the control that sits between every business problem and its outcome.

The Executive Technology Command Center

Eight operational domains. One integrated technology strategy.

HAMAD.OSCOMMAND CENTERREFERENCE SNAPSHOT · CUMULATIVE OPERATING SCOPE
03Cybersecurity

HardenedMONITORED

01Strategy

IT RoadmapACTIVE

02Governance

SLA programOPERATIONAL

04ERP

5+ ModulesDEPLOYED

06AI

In ProductionACTIVE

05Cloud

Hybrid estateOPERATIONAL

07KPI / SLA

100+ ServicesTRACKING

08 · Digital Transformation

Enterprise · PORTFOLIO

  • Business-aligned roadmaps, budgeting, and executive reporting — including partner onboarding, integration delivery, and service transition run against governance checkpoints.

    Operating layerStrategy Layer

    IT roadmap development, budgeting, executive reporting, board-level communication, business-technology alignment, and technology relationship governance across partners and onboarding lifecycles.

    Examples: Annual IT roadmaps, partner and stakeholder alignment forums, onboarding readiness checkpoints, board presentations, technology investment cases

    Leadership decides on technology with data behind it, defensible ROI, and controlled transitions from relationship to execution.

    Power BISharePointExecutive Reporting

  • ITIL processes, policy libraries, change management, and audit readiness that does not lapse

    Operating layerGovernance Layer

    ITIL-aligned processes, change management, risk registers, policy libraries, vendor SLAs, and audit preparedness.

    Examples: SLA matrices, change advisory boards, risk registers, policy compliance tracking

    Audit-ready operations with predictable service delivery and clear accountability.

    ITILServiceDeskPolicy Frameworks

  • Layered defense across FortiGate, Sophos, and SOC, with access control and SAMA / Insurance Authority / PDPL alignment where applicable

    Operating layerCybersecurity Layer

    FortiGate firewalls, Sophos Central, SOC services, access control, backup/DR, business continuity, and alignment with SAMA, the Insurance Authority, and PDPL.

    Examples: Perimeter hardening, endpoint protection, SOC monitoring, BCP testing, regulatory audits

    Controls layered from perimeter to endpoint, access governed by written policy, and continuity tested rather than assumed.

    FortiGateFortiWebSophosSOC

  • Odoo 17/18 and SAP Business One across core business operations, integrated with updated workflows

    Operating layerERP & Automation Layer

    Odoo 18 programs run the full cycle — custom modules, ERP customizations, workflow automation, integration, and business process enhancement alongside SAP Business One where applicable.

    Examples: Odoo 18 module design, ERP customization and workflows, data migration, service-aligned automation, governed integrations

    Business operations unified on integrated systems, with a governed single source of truth anchored in Odoo 18 delivery practice.

    Odoo 18SAP B1PythonPostgreSQL

  • AWS, Azure, DigitalOcean, Docker, and hybrid infrastructure

    Operating layerInfrastructure Layer

    Server estates, virtualization, cloud platforms, networking, VPN, VLAN, and high-availability architecture.

    Examples: Cloud migration, network redesign, VLAN segmentation, VPN deployment, HA failover

    Redundant paths and monitored links, with capacity added to the estate without re-architecting it.

    AWSAzureArubaVMwareDocker

  • An LLM-powered SaaS platform in production, with content automation and AI integrations

    Operating layerAI & Product Layer

    AI-assisted SaaS, LLM integration, content automation, and founder-built products — from enterprise-grade publishing workflows to community and social-impact platforms.

    Examples: PostEngine Co (LinkedIn publishing), Moatheny Islamic utility app, Sheikha Age family-care platform, LLM integrations, scheduling and analytics loops

    One AI publishing platform in production, and public-benefit apps carried under the same delivery discipline rather than left as experiments.

    Next.jsOpenAIAWS LambdaRedis

  • Power BI dashboards and KPI scorecards that tie each service to its target and surface variance early

    Operating layerData & KPI Layer

    Power BI dashboards, KPI scorecards, SLA compliance tracking, executive reporting, and data-driven decision frameworks.

    Examples: Real-time KPI dashboards, SLA compliance reports, trend analysis, executive scorecards

    Executives read live operating state instead of estimating it between reports.

    Power BISQLKPI ModelsExcel

  • End-to-end digitization, process automation, and operating-culture change — proven across brokerage, holding-group, and founder-product contexts.

    Operating layerPeople & Vendor Layer

    Team building and mentoring, partner and stakeholder onboarding, vendor negotiation, contract governance, outsourcing management, technology relationship stewardship, and cross-functional leadership.

    Examples: Onboarding runbooks for partners, stakeholder touchpoints, vendor scorecards, contract renegotiation, RACI across IT and business owners

    Partner and service transitions run to a checklist, vendors are scored against contract terms, and every relationship has a named owner.

    Vendor ScorecardsRACI ModelsSLA Contracts

Governance, KPI & SLA

I build IT departments that are measurable, accountable, and ITIL-aligned.

SLA & Service Management

  • Tiered SLA frameworks with response/resolution matrices
  • Service catalog of 100+ defined services, tiered and owned
  • Incident prioritization and escalation governance
  • Quarterly SLA performance reviews with stakeholders

KPI & Executive Reporting

  • Power BI dashboards tracking service performance
  • Executive scorecards aligned to business objectives
  • Trend analysis, variance reporting, and forecasting
  • Board-ready IT performance presentations

Policy & Compliance

  • IT policy libraries spanning security, procurement, and change
  • Risk registers with pragmatic mitigation roadmaps
  • ITIL-aligned process documentation
  • Audit preparedness with a continuously updated evidence repository

Delivery benchmarks

Delivery signals with named targets, owners, and artifacts — confidence built on record, not vanity stats.

Service Levels

Tbar Holding had none — I wrote the service catalog and the first SLAs behind it

Vendor Cost Reduction

40% off contracted spend

Incident Resolution

<4h target for priority incidents

Impact Matrix

Each row: friction point → technical move → control → outcome you can inspect.

→

Measurable Outcome

Leadership visibility grounded in KPIs and service reporting

Tap to see full flow

→

Measurable Outcome

Sales, HR, inventory, and accounting operating on one ERP with a single data backbone

Tap to see full flow

→

Measurable Outcome

Documented security policy, managed endpoints, SOC monitoring, and a tested BCP — none of which existed before

Tap to see full flow

→

Measurable Outcome

Contracts consolidated, with every vendor scored against its SLA at renewal

Tap to see full flow

→

Measurable Outcome

Unified identity, collaboration, and communication

Tap to see full flow

→

Measurable Outcome

Every service in a 100+ entry catalog carries a tier, a named owner, and a measured SLA

Tap to see full flow

→

Measurable Outcome

Core workflows run inside the ERP with automated handoffs instead of manual re-entry

Tap to see full flow

Start a Strategic Conversation

Executive, advisory, or confidential briefings — use the form below. I read every message directly.

Open to executive and technical conversations

Direct Channels

Download CV (PDF)
WhatsAppCall Directly

Start with the challenge. I will understand the system behind it.

Use this form for advisory, transformation, ERP, governance, cybersecurity, or executive technology discussions.

Direct inquiry

Where to go next