The iCore Services Guide: From Strategy to Delivery

A guide to 33 core services across seven technology and advisory areas, a financial-sector edition as the eighth practice area, and separate training and capability building.

Professional Consulting

Independent, senior advice for leaders making high-stakes technology decisions, and academic advisory for schools, institutes and universities.

CO-01 · Academic and Educational Advisory

Assessment and development of academic and training programs and curricula in schools, institutes and universities, supervised by an academic advisory team of PhD holders.

CO-02 · Executive Transformation Advisory

Independent advisory opinion for leaders on digital transformation, AI, cybersecurity and governance decisions, linking technology investment to organizational objectives.

AI Solutions & Assurance

From use-case selection to production models, Arabic NLP assistants, computer vision and automation, governed to SDAIA principles.

AI-01 · AI Adoption Advisory

Identifying value-adding AI use cases, assessing the feasibility and data readiness of each, then sequencing them in an implementation roadmap.

AI-02 · Custom AI Model Development

Building forecasting, classification and recommendation models on the organization's data and deploying them to production, for example demand forecasting, inventory optimization and predictive maintenance.

AI-03 · NLP & Arabic Assistants

Arabic conversational assistants grounded in the organization's content, with automated data extraction from documents and semantic search across knowledge bases.

AI-04 · Computer Vision

Image and video analysis for quality control, monitoring, counting and tracking, for example detecting product defects on production lines.

AI-05 · AI Systems Integration

Embedding AI capabilities into enterprise resource planning (ERP), customer relationship management (CRM) and existing workflows.

AI-06 · Robotic Process Automation

Automating repetitive, rule-based tasks such as data entry from forms, report preparation and supply-chain transactions, with AI capabilities added where needed.

AI-07 · AI Governance & Assurance

AI policies and model registers, bias testing and model security controls, in line with the relevant AI Ethics Principles issued by the Saudi Data & AI Authority (SDAIA).

Data & Analytics

Trusted, classified data turned into Power BI dashboards and forecasts that leaders act on.

DA-01 · Dashboards, Business Intelligence & Business Analysis

Business requirements analysis and documentation, followed by interactive Power BI dashboards connected to data sources, with role-based viewing permissions and secure publishing.

DA-02 · Predictive Analytics

Statistical and machine learning models that forecast trends, demand and behaviour, with results shown in dashboards that support planning and decision-making.

DA-03 · Data Governance & Classification

Data governance policies, data owner and steward roles, and classification of data by sensitivity, in line with National Data Management Office (NDMO) controls and specifications and the Personal Data Protection Law.

Digital Transformation

Maturity assessment, masterplans, process redesign and change management that make transformation stick.

DT-01 · Digital Maturity Assessment

Measuring the organization's digital maturity across multiple dimensions and comparing it with local and international standards and with peer organizations in the sector.

DT-02 · Gap Analysis & Opportunity Mapping

Defining the target state, analysing gaps and their root causes, and ranking improvement opportunities by impact, effort and potential for early wins.

DT-03 · Transformation Roadmap & Masterplan

A digital transformation strategy with performance indicators, a phased roadmap, a target operating model, technology and vendor recommendations, and feasibility studies for the options identified.

DT-04 · Business Process Reengineering

Improving operational processes, addressing inefficiencies and reducing waste before automating them.

DT-05 · Change Management & Adoption

Stakeholder analysis, organizational readiness assessment, communication and training plans, resistance management and adoption metrics.

DT-06 · Cloud Strategy & KPI Governance

A secure, scalable cloud migration strategy, a reference architecture, and dashboards that track the impact of transformation with measurable indicators.

Cybersecurity

Security architecture, offensive testing, red teaming, detection engineering, incident response and secure development.

CY-01 · Enterprise Security Architecture

An enterprise security architecture that starts from the business context and covers risk, logical and technical architecture, assets and service management, using the SABSA methodology and aligned with TOGAF and ITIL.

CY-02 · Vulnerability & Secure Configuration Assessment

Systematic vulnerability assessment of applications, networks, mobile applications and databases, and review of server, network and database configurations against appropriate hardening standards.

CY-03 · Penetration Testing

Penetration tests that simulate attacks on applications, networks and mobile applications to assess whether vulnerabilities can be exploited, using black-box, grey-box or white-box approaches within the agreed scope.

CY-04 · Red Teaming

Realistic simulation of advanced attacks through tailored scenarios that test people, processes and technology, measuring the organization's ability to detect and respond to threats.

CY-05 · Intrusion Analysis & IDS Optimization

Network traffic analysis, tuning of intrusion detection systems, development of custom signatures, and analysis of data exfiltration paths and command- and-control channels.

CY-06 · Threat Intelligence

Collecting and analysing threat intelligence relevant to the organization's sector, and producing periodic reports and indicators that can be used in detection systems throughout the engagement.

CY-07 · Incident Response Capability (CSIRT)

Establishing and enabling the organization's cyber incident response team: roles and responsibilities, procedures, containment and recovery plans, and simulation exercises.

CY-08 · Secure Development (Secure SDLC)

Building security into the software development lifecycle: static application security testing (SAST), dynamic application security testing (DAST), secrets and key management, and developer training.

Governance, Risk & Compliance

Demonstrable compliance with SAMA, NCA and ISO 27001, and cyber risk expressed in business terms.

GR-01 · Security Strategy & Governance

Aligning the cybersecurity program with the organization's objectives and regulatory requirements, covering strategy, policies, organizational structure, roles and the regulatory reporting calendar.

GR-02 · National Regulatory Compliance: Assessment & Implementation

Independent assessment of compliance with the Essential Cybersecurity Controls (ECC) and the Cloud Cybersecurity Controls (CCC) issued by the National Cybersecurity Authority, with a gap-remediation plan and follow-up on its implementation.

GR-03 · ISO/IEC 27001 ISMS Implementation

Building and implementing an information security management system and preparing the organization for certification against ISO/IEC 27001:2022, including an internal audit before the certification audit.

GR-04 · Cyber Risk Management

A cyber risk management methodology linked to business objectives that identifies, assesses and tracks the treatment of risks to support leadership decisions.

GR-05 · Digital & Internal Audit

IT and cybersecurity audit, mock internal audits before regulatory visits, and follow-up on closing findings.

Data Privacy & Protection

PDPL compliance that starts with knowing your data and ends with procedures your people follow every day.

DP-01 · PDPL Gap Assessment

Assessing personal data collection and processing practices against the Personal Data Protection Law and its implementing regulations, identifying gaps and preparing a prioritized action plan.

DP-02 · PDPL Implementation & Privacy Framework

Developing and implementing policies, procedures and controls, including a privacy governance framework, a record of processing activities (ROPA), data protection impact assessments (DPIA), privacy notices, and management of data subject rights and data breaches.

FinTech & Financial Services Edition

A sector edition for banks, fintechs, insurers and payment providers: 23 services built on our core services, two of them fully specialised (SAMA & NCA compliance and fraud-detection models).

FinTech & Financial Services: 23-Service Edition

A dedicated edition for banks, finance and insurance companies, fintechs and payment providers, adapting the core services to financial-sector requirements.

Training & Capability Building

A training centre licensed by TVTC, offering accredited courses, custom curricula and a network of PhD trainers.