№ 01
SMO for the KSA Human Rights Commission
A national-strategy Strategy Management Office, engaging 30+ governmental entities, aligned to the UN Sustainable Development Goals.
KSA · Public sector · Multi-entity
Practice·Enterprise GRC
Enterprise GRC
Enterprise risk, IT governance, project assurance, integrated risk and compliance — designed to make GRC an enabler of strategy, not a tax on it.
COBITPMBOKISO 31000CGEITCOSO
Capabilities
What the practice does.
Enterprise risk registerA single taxonomy across regions, brands, and entities — feeding the audit plan and the board view.
IT governanceGovernance models that link IT investment to enterprise outcomes — COBIT-aligned.
Project assuranceIndependent assurance over major programmes — before, during, and after go-live.
Integrated risk & complianceOne register, one taxonomy, one cadence — across risk, audit, compliance, and privacy.
Third-party riskTPRM operating model from intake to off-boarding — tiered to risk.
Policy frameworkTiered policy architecture — board-level intent down to operational standards.
Selected work
Stories from the practice.
№ 02
Banking front-office automation
RPA and AI deployed across four front-office process areas at a global bank — CRM, marketing, credit management, and credit-card campaigns.
Global · Banking · RPA · AI
№ 06
IPO SOX compliance — USA restaurant
A two-year programme readying a USA restaurant chain for IPO — 100+ IT general and application controls implemented and tested.
USA · Retail · SOX
The conversation
Start with a baseline conversation.
No commercials. No proposal pressure. Just a partner reading the situation honestly.
Begin a conversation