What is the Digital Government Authority (DGA)?+
The regulator that issues mandatory frameworks for Saudi government digital work. The main ones: NORA, Qiyas, and the cybersecurity frameworks for government services.
Which entities fall under the DGA framework?+
Government entities and any party that develops or operates digital government services. Scope covers ministries, authorities, public institutions, and national centres.
What is the difference between NORA and Qiyas?+
NORA sets how the entity designs and manages its EA. Qiyas measures the entity's performance across 10 perspectives, 24 axes, and 89 standards. You apply NORA first, then enter the Qiyas cycle.
Is NORA accreditation mandatory?+
Applying NORA is the unified national reference. The accreditation certificate has its own track set by the DGA. For operational detail check /services/nora-accreditation or the DGA directly.
What role does SAHM play between the entity and the DGA?+
SAHM is an execution arm that applies DGA frameworks inside the entity. We do not represent the DGA and are not commercially endorsed by it. Our outputs arrive in a form the assessment team accepts, so audit moves without surprises.
Do you use recognised EA tools?+
We work in Avolution ABACUS, ranked first in Gartner's EA repository evaluation. It supports the General Model of EA Components under NORA, and we import the model without manual conversion.
Do you raise maturity before the annual assessment?+
Yes. Internal assessment across the ten perspectives, gaps identified at the standard level, a dated remediation plan, and accompaniment through to final verification.