We score your capabilities on a maturity model that actually works in the field, and hand you a roadmap with numbers you can defend in front of the board.
A structured read of digital capabilities across seven dimensions: strategy, governance, EA, data, services, culture, and technology. The aim is simple: a documented answer to "where are we today" before the argument about "where do we want to go" even starts. The worst calls we have seen were made by entities that jumped to an ambitious plan without this page in hand.
Agree which capabilities, dimensions, and units are in scope. Short step, but skipping it sinks the rest of the project.
Surveys, leadership interviews, document review, and on-site evidence inspection.
Score each capability, build the heatmap, and benchmark you against your Saudi sector first, then DGA standards.
Initiatives with priorities, costs, and a phased delivery plan. Not a wish list.
A leadership session with measurable KPIs and a set of decisions you walk out with on paper.
Four government entities reached NORA accreditation with us, covering all 10 perspectives, 24 axes, and 89 standards in V5.0. The experience comes from files that were submitted, not from slide decks.
Every gap in the report ships with a written corrective action, a named owner, and a time-to-close estimate. We answer the "and what do we do with this number?" question before clients have to ask it.
The outputs feed straight into the current-state diagnosis stage of the national EA methodology. No duplicated effort, and no two separate reports contradicting each other.
Qiyas is a formal framework DGA runs annually with strict evidence rules, and you do not pick the date. A DMA is internal and runs on your schedule. We tell clients to run one about three months before the Qiyas cycle, so the gaps surface while you still have time to fix them.
Five levels: Initial, Repeatable, Defined, Managed, Optimised. Each level is tied to an evidence guide an auditor can verify.
A full assessment runs 6 to 12 weeks depending on the size of the entity. A quick scan finishes in two or three weeks and is usually enough to give leadership a first read before the bigger commitment.
Yes. The team has covered all 10 perspectives, 24 axes, and 89 standards in V5.0. We run the gap analysis, write the corrective actions, and prep the entity for the formal review step by step.
A maturity report per capability, a heatmap that shows strengths and weak spots at a glance, a prioritisation, a roadmap with KPIs, and a board-ready executive deck.
Yes, and we recommend running it yearly on the same model. Re-running on a different model kills your ability to compare year over year, which is the whole point of doing this in the first place.
Saudi sector peers first, then regional averages, then international frameworks like Gartner IT Score and CMMI, alongside DGA references. In our experience the local comparison is the one leadership actually argues with, because the numbers are genuinely comparable.
A two-week quick scan tells you where you stand before you commit to the full assessment or to a bigger budget.
Back to all services
