Afniah Architects and Engineers

IT Department Plan

One department, one accountable owner, and a phased path to an AI-enabled operating model for 215 people.

Prepared byEng. Samer Rahmeh, Head of Digital Innovation and Advanced Technology
Prepared forExecutive Board, through Dr. Ehsan Ghurbal, Excellence Director
IssuedSeptember 2026
RolloutFrom Q4 2026
1

Executive summary

Afniah's technology functions run as two units with a third reporting line crossing between them. This plan makes the working structure official and gives it the governance it lacks.

IT Administration and Digital Innovation each report separately to the Excellence Director. Development sits inside IT Administration on paper but reports to Digital Innovation in practice. Coordination across infrastructure, development, AfniahERP, and AI already flows through the Head of Digital Innovation, without the authority or accountability that should come with it. The result is visible at the front door: employees do not know where to send a request, requests bypass the ticketing system, and cross-sector decisions on priority and spend have no single owner.

The proposal is one IT Department with four sectors and a dispatch function under a single director, reporting to Dr. Ehsan Ghurbal. Sector leads keep full technical authority in their domains. The director owns governance, the funding case, architecture across sectors, and arbitration when priorities conflict.

The plan runs five workstreams from October 2026. It asks for no new hires in the first two quarters. Capacity comes from one internal transfer, protected working time, and automation on the infrastructure the company already owns.

215+employees served by the department
5specialists, each a single point of failure today
1accountable owner after the change
0new hires required through Q1 2027

The five workstreams

  • Intake and dispatch: a triage layer in front of the existing ticketing system, human first, AI second.
  • Infrastructure resilience and single-administrator capacity: price the risk, choose a tier, relieve the load.
  • Protected development and AI capacity: separate build from run, finish AfniahERP, start AI on company time.
  • Continuity: a skills matrix and agentic coverage so leave and turnover stop being emergencies.
  • AI-assisted reporting and workforce effort visibility: reliable man-hour data without surveillance.
2

Where we stand

Much already works. The gaps are in governance, intake, resilience, and capacity, not in the platforms.

Dr. Ehsan Ghurbal Excellence Director IT Administration Maaz Ahmed Digital Innovation and Advanced Technology Samer Rahmeh Full-Stack and Mobile Development Abdulrahman Rahmeh, placed here ERP Engineering Anoud AlAssaf reports across units Osama Ayesh currently reports to a non-IT department
Two units, three reporting lines. Development is placed in IT Administration but reports to Digital Innovation. The two units intersect formally only on security matters, yet Digital Innovation is consulted for AI, AfniahERP structure, and API work across both.
Dr. Ehsan Ghurbal Excellence Director IT Department Samer Rahmeh, Director IT Administration Maaz Ahmed Development Abdulrahman Rahmeh Digital Innovation and Advanced Technology Samer Rahmeh, Anoud AlAssaf Service Desk and Dispatch Osama Ayesh, transfer Sector leads keep technical authority. The director owns governance, funding, architecture, and arbitration.
One department, one owner, four sectors and a dispatch function. Reporting continues through Dr. Ehsan Ghurbal, who owns both units today and is the natural sponsor of the change.

What already works

  • Every company machine is joined to Active Directory and monitored by IT Administration.
  • AfniahERP is live across HR, Finance, Project Management, and Project Supervision, with roughly 90 percent of the planned scope delivered.
  • The IT Service Management module was built in house inside AfniahERP: tickets with SLA tracking and escalation, incidents with root cause analysis, change requests, IT requests with a Line Manager, Finance, and IT approval chain, and hardware and license registers.
  • Agentic AI is already part of the development workflow in Digital Innovation and Development.

What does not

  • No triage layer. Employees assign their own tickets, often to the wrong sector, and sometimes to IT for issues that belong to HR or Finance.
  • Requests arrive by WhatsApp and email and are never logged, so workload and response times cannot be measured.
  • One administrator carries infrastructure, network, and security for the whole company.
  • Infrastructure funding competes poorly with project manpower, so identified risks stay unfunded.
  • A two-person innovation team is consumed by AfniahERP delivery and production support, leaving no capacity for AI.
  • Every specialist is a single point of failure; leave and turnover carry real operational risk.
  • Management has no consistent view of where working hours go across projects and departments.
3

What the director role is, and is not

The proposal is not that one person understands every sector as well as its specialist. It is that one person governs the portfolio.

Sector leads own

  • Technical decisions inside their domain
  • Execution and day-to-day operations
  • Costing the needs they identify
  • Quality of their deliverables

The director owns

  • Priorities and tradeoffs across sectors
  • The consolidated funding case to management
  • Architecture where sectors meet: AfniahERP, integrations, AI, data
  • Intake of ideas from other department heads, and their design and distribution
  • Continuity, risk, and the department's reporting to the Board

The Board owns

  • Risk appetite: which exposure the company chooses to carry
  • Funding decisions on ranked options
  • Policy on people-related initiatives, with HR

The value the director adds comes from two places. First, an architecture and engineering background, which means AEC requirements are understood as a practitioner and can be translated into systems without a second interpreter. Second, depth in AI, quantum, and advanced computing, which shapes what the department builds toward rather than what it maintains. Neither replaces the specialist knowledge of the sector leads. Both are what let a single owner arbitrate between them and speak for the department to management in one register.

4

Target structure

Four sectors and one function. Ownership is defined by capability, not by where people sat before.

IT Administration

Maaz Ahmed, Senior IT Administrator
  • Servers, virtualization, backup
  • Network, firewall, VPN, wireless
  • Identity, Microsoft 365, endpoints
  • Security incident response and compliance
  • Monitoring and patching

Development

Abdulrahman Rahmeh, Full-Stack and Mobile Developer
  • Web applications and dashboards
  • Native and cross-platform mobile
  • APIs and integrations with external services
  • Second line for identity and endpoint tasks

Digital Innovation and Advanced Technology

Samer Rahmeh, Anoud AlAssaf
  • AfniahERP core, backend, and Document Systems
  • AI applications and automation
  • Advanced architecture and engineering tooling
  • Digital twinning and digital transformation

Service Desk and Dispatch

Osama Ayesh, transfer from a non-IT department
  • Single point of entry for all requests
  • Classification, priority, and routing
  • Follow-up and requester communication
  • Growth path into AI operations

Reporting line

The IT Director reports to Dr. Ehsan Ghurbal, who reports to the CEO. This keeps the current sponsor in place and avoids disrupting a line that already works. Any change toward a direct COO line is left to the Board.

Change for IT Administration

Maaz Ahmed moves from reporting to the Excellence Director to reporting to the IT Director. His scope and technical authority do not change. The director takes on the budget advocacy and management interface that currently fall to a technical specialist, so that infrastructure needs are argued in executive terms by someone whose job that is.

Change for Development

Development becomes its own sector reporting to the director, which matches how it operates today. The formal placement inside IT Administration ends.

5.1

Intake and dispatch

The ticketing system exists and works. What is missing is the layer that decides where each request should go.

The problem

Two failure modes. Employees create tickets and assign them to the wrong sector, including non-IT issues such as a leave balance deduction that belongs to HR. And a large share of requests never enter the system at all; they arrive by WhatsApp or email to whichever team member the requester knows. Rerouting consumes specialist time, requests fall through gaps, and the record is too incomplete to measure workload or response times.

The solution

Phase 1, human dispatcher. Osama Ayesh is trained on the ITSM module, the service categories, and each sector's scope, and becomes the owner of intake. Every request is classified, prioritized, and routed by him. Non-IT items are redirected to HR or Finance, who each designate a recipient. The informal channels are not banned; they are captured. The dispatcher owns a shared intake mailbox and a dispatch number, so a request sent informally is still logged as a ticket within the hour. A documented runbook and a named backup keep the function running when he is away.

Phase 2, AI dispatcher. Once a quarter of clean, correctly labelled tickets exists, an agent configured per sector classifies incoming requests, proposes an assignee, estimates effort, and sets priority. The dispatcher reviews and approves rather than triages from scratch. Phase 1 data is the training foundation for Phase 2, which is why the human role is an investment rather than a cost the AI later removes.

Ticket in AfniahERP Intake mailbox Dispatch number Walk-up and calls Dispatcher classify, prioritize, route Phase 2: AI proposes, dispatcher approves IT Administration Development Digital Innovation HR recipient Finance recipient Every request becomes a record SLA, escalation, owner, and outcome tracked in AfniahERP. Clean history feeds the Phase 2 AI dispatcher.
Informal channels are captured rather than forbidden. The dispatcher is the only point where classification happens, in both phases.
OctoberOsama Ayesh transfer approved; training on ITSM, categories, and sector scope begins.
NovemberIntake mailbox and dispatch number live. HR and Finance recipients named. Dispatcher owns all routing.
DecemberDispatch runbook and backup in place. First monthly intake report to the director.
Q2 2027AI dispatcher pilot on one quarter of labelled history, with the dispatcher as approver.
How success is measured. Share of tickets reassigned after creation. Share of requests that arrived informally and were still logged. Median time from request to assignment. All three come from the ITSM module without additional tooling.
5.2

Infrastructure resilience and single-administrator capacity

Two problems wearing one coat: unfunded risk, and one person carrying the whole infrastructure. They need separate decisions.

Unfunded risk

As an AEC firm, Afniah allocates capital to billable manpower, so infrastructure competes poorly for funding. Cloud hosting for AfniahERP at roughly 50,000 SAR per year was declined as a non-priority. Licensing, email, and related services are funded reactively. The on-premises server was a sound compromise on cost, and IT Administration is right that it carries exposure on power continuity, hardware failure, and recovery that cloud hosting would reduce.

The company is currently self-insuring against AfniahERP downtime and data loss without having priced that exposure. A day without AfniahERP blocks HR, Finance, Project Management, and Project Supervision for 215 people. The plan does not ask for the full wish list. It presents three tiers and asks the Board to choose the risk level it wants to carry.

What it protects

  • Recurring hosting cost is avoided
  • Data stays on site under direct control

What it leaves exposed

  • Power events and hardware failure stop AfniahERP
  • No offsite copy; a site incident is a data loss event
  • Recovery depends on one administrator being available

Cost

  • No new spend
  • Exposure is carried, not priced

What it protects

  • Automated offsite backup of AfniahERP and identity data
  • Verified UPS capacity and shutdown procedure
  • Documented and rehearsed recovery, tested each quarter
  • Monitoring alerts to more than one person

What it leaves exposed

  • Downtime during hardware replacement
  • Recovery still needs on-site hands for physical faults

Cost

  • A fraction of full cloud hosting; quoted by IT Administration in October
  • Mostly one-time hardware and low-cost cloud storage

What it protects

  • Uptime and physical risk handled by the provider
  • Recovery and scaling without on-site hardware

What it leaves exposed

  • Dependence on connectivity and vendor
  • Recurring cost that competes with manpower each year

Cost

  • Roughly 50,000 SAR per year for AfniahERP hosting
  • Revisited at the annual budget once Tier 2 is in place

One administrator for 215 people

A single senior administrator runs servers, network, firewalls, identity, endpoints, backup, and monitoring for the whole company. This is a continuity risk before it is a workload problem. If he is unavailable during an incident, there is no second person who can act on the network core or the firewall. His time is also consumed by intake and routine tasks, so the improvements he identifies are rarely implemented. Burnout of the one infrastructure expert would be a business event, not a personnel one.

Hiring is difficult at present, so the plan relieves the load without a new position. Where a hire later becomes possible, a second infrastructure administrator is the first priority the skills matrix identifies.

Remove intake from his deskThe dispatcher owns triage, so IT Administration receives classified, prioritized work only.
Second line on identity and endpointsAbdulrahman Rahmeh already administers Active Directory, Group Policy, and Microsoft 365. He is cross-trained on the critical recovery procedures for that layer.
Agent-assisted operationsMonitoring rules, documentation, configuration review, and routine tenant tasks are handled with agentic tooling under his supervision.
On-call for physical and security eventsA written arrangement for who acts when the administrator is away, limited to holding the line until he returns.
How success is measured. A recovery drill passed in Q1 2027 and repeated each quarter. Backup restore tested and logged. Hours per week IT Administration spends on intake and routine tasks, measured from the ITSM module, falling quarter on quarter.
5.3

Protected development and AI capacity

AI is not the reward for finishing AfniahERP. It is a parallel track that needs protected time now, or it never starts.

The problem

Digital Innovation has two people. Both deliver new AfniahERP scope and support a live system used by four departments. Support is always urgent, so it wins, and development is fragmented into what is left. The remaining scope is substantial: the Design and Engineering modules need workflows, authority matrices, training, and adjustments to match how the engineers actually work; Bidding and Tendering, CRM, and the wider business management processes are still to build. Meanwhile the department named for innovation and advanced technology has no capacity for either. Work is currently absorbed outside working hours, which hides the real cost and is not sustainable for the person about to run a larger department.

The solution

Separate build from run. Production support and small change requests go through the dispatcher with defined SLAs and are handled in fixed windows. Development time outside those windows is protected. This alone recovers a meaningful share of the week.

Finish AfniahERP with a committed sequence. Design and Engineering first, because Anoud AlAssaf's architectural background makes her the right person to close the gap between the digital workflow and the practice. Bidding and Tendering, CRM, and business management follow in Q1 and Q2 2027.

Reserve an AI allocation now. One fifth of one person's time, protected on the calendar, produces more than after-hours work ever will. The first pilot is the AI dispatcher from workstream 5.1, because the data already sits in AfniahERP and the benefit is visible to every employee. A single shipped pilot changes what the Board sees the department as.

Today Support interrupts arrive at random. Development runs in the gaps. AI share: none. Target Support Protected AfniahERP development AI Support in defined windows through the dispatcher. Development protected. One fifth of one person reserved for AI. Shares are the proposed allocation, not a measurement.
The shape of the week changes before headcount does. Batching support is what creates the room.
Q4 2026Support windows and SLAs live through the dispatcher. Design and Engineering workflows and authority matrices progress with department input.
Q1 2027Design and Engineering training and go-live. Bidding and Tendering begins. AI allocation reserved; AI dispatcher build starts.
Q2 2027CRM and business management delivery. AI dispatcher pilot live.
Q3 2027Second AI application selected with a department head, using the intake process in section 3.
How success is measured. Go-live dates met for each remaining module. Protected development hours per week, tracked against the calendar. One AI pilot in production by the end of Q2 2027.
5.4

Continuity

Five specialists, five single points of failure. The fix is a map of who owns what, and agentic coverage where the work is software.

The problem

Each member of the department holds capabilities no one else has. Leave stalls work. Turnover would remove a capability outright. Knowledge transfer is understood to be necessary and does not happen, because everyone is fully loaded with their own work.

The solution

Skills matrix. Section 6 maps each capability to its owner, its partial backups, and the kind of coverage it can have. It is the tool that tells the department where risk concentrates, which pairings remove the most exposure, and which single hire would matter most if hiring opens.

Agentic coverage for software-defined work. Digital Innovation and Development already build with agents: the agent produces a solution, the owner verifies and corrects, and thereafter the agent has the context to diagnose and repair the same codebase. The same agent generates documentation by analysing what was built, so runbooks are a byproduct rather than a separate task. For AfniahERP, web, integration, and AI work, this is the primary continuity mechanism.

Hybrid coverage for infrastructure. IT Administration is different because part of the work is physical or judgment-heavy: a failed drive, a network cutover, a live security incident, a firewall decision under pressure. Agents cover the software-defined and diagnostic layer. A human backup and the on-call arrangement cover the rest.

The rule that makes it defensible

When the owner is away, the person who normally verifies the agent's output is also away. So the agent operates under one rule: it handles routine and already-diagnosed issues on its own, and for anything uncertain it escalates and waits rather than deploying unverified. Coverage is partial by design, and it is stated as such.

Issue arrives owner on leave Agent diagnose, classify Routine or known agent resolves, logs Uncertain escalate to backup, wait Physical or judgment human on-call acts Nothing unverified is deployed while the owner is away.
How success is measured. Skills matrix maintained and reviewed each quarter. Agent-generated runbooks exist for every capability marked agent-coverable. Each specialist takes planned leave in 2027 with no stalled deliverable.
5.5

AI-assisted reporting and workforce effort visibility

Man-hours are the unit Afniah sells. The Board needs to see where they go. The way to get that is better reporting, not surveillance.

The need

Employees across departments work in different software and submit weekly reports written by hand. Management cannot tell whether those reports reflect the working week, or where effort concentrates across projects, departments, and activity types. For project costing and capacity planning in an AEC firm, that is a gap in the core business data.

The proposal

A locally hosted open-weight language model, in the 27 billion parameter class the existing infrastructure can already run, drafts each employee's weekly report from the systems they already use: AfniahERP tasks and tickets, project assignments, timesheets, and the employee's own notes. The employee reviews, corrects, and submits. Structured reports produced this way can be aggregated into a management view of effort by project, department, and activity type. No data leaves the company.

This is the same practice the Head of Digital Innovation already uses to produce his own weekly and monthly reports with AI assistance, applied company-wide with a local model.

Systems already in use AfniahERP tasks Tickets and requests Timesheets and projects Employee notes Local model on company servers Draft weekly report employee reviews and submits Aggregate effort view by project, department, activity Guardrails No individual productivity score. No activity monitoring.Policy agreed with HR before the pilot. Employees informed.
The employee owns the report. Management receives the aggregate. The model runs locally.

Principles the pilot is bound by

Assist, do not audit

The tool makes a better weekly report faster. It does not grade the person who wrote it.

Aggregate, not individual

Management sees effort by project, department, and activity type. Planning needs the pattern, not a ranking of people.

Employee-owned

Nothing is submitted that the employee has not reviewed. The draft is theirs to correct.

Local by default

The model runs on company infrastructure. Work data does not leave Afniah.

HR and legal from the start

Policy, notification, and consent are settled before the first department pilots, not after.

Transparent

Every employee knows the tool exists, what it reads, and what it produces.

If the Board wants individual productivity monitoring beyond this scope, that is a separate decision to be taken openly with HR and legal, and it is not part of this plan.

How success is measured. Time to produce a weekly report. Share of reports submitted on time and in the structured format. A management effort view for at least two departments by the end of Q3 2027.
6

Skills matrix and key-person exposure

Who owns each capability, who can partially cover it, and what kind of coverage is realistic. Select a name to see their profile, or filter by coverage type.

Capability Samer Maaz Abdulrahman Anoud Osama Coverage in absence
Network, firewall, VPN, wirelessHuman required
Security incident response and complianceHuman required
Servers, virtualization, backupHybrid
Identity, Microsoft 365, endpointsHybrid
Infrastructure monitoring and patchingAgent-coverable
AfniahERP core and backendAgent-coverable
AfniahERP Document Systems, workflows, reportsAgent-coverable
AEC process modelling into digital workflowsHuman required
Web applications, APIs, integrationsAgent-coverable
Native and cross-platform mobileHybrid
AI and machine learning applicationsAgent-coverable
Quantum and advanced computingHuman required
Agentic AI build and operationHybrid
Service desk, triage, requester communicationAgent-coverable
Sole owner Partial cover Agent-coverable: software-defined, agent has context Hybrid: agent plus human backup Human required: physical, judgment, or specialist

Samer Rahmeh, IT Director

Architectural engineer. Backend and core of AfniahERP, AI, quantum, advanced computing. Co-inventor on a neuromorphic quantum computing patent.

Sole owner of

  • AfniahERP core and backend
  • AI and machine learning applications
  • Quantum and advanced computing
  • Agentic AI build and operation

Coverage plan

  • Agent-generated documentation for AfniahERP core
  • Anoud and Abdulrahman as partial backups on backend and AI
  • Director duties separated from hands-on work by the protected allocation in 5.3

Maaz Ahmed, Senior IT Administrator

Windows Server and Active Directory, VMware and Hyper-V, Linux, Cisco networking, FortiGate and Sophos firewalls, Microsoft 365, Azure and AWS, Veeam backup. CCNA, AWS Solutions Architect, Azure Administrator, MCSA Microsoft 365, Fortinet NSE.

Sole owner of

  • Network, firewall, VPN, wireless
  • Security incident response and compliance
  • Servers, virtualization, backup
  • Identity, Microsoft 365, endpoints
  • Monitoring and patching

Coverage plan

  • Highest exposure in the department: two sole-owner capabilities are human required
  • Abdulrahman cross-trained on identity and endpoint recovery
  • Agents on monitoring, documentation, and routine tenant tasks
  • Written on-call arrangement for physical and security events
  • First hire priority if hiring opens: second infrastructure administrator

Abdulrahman Rahmeh, Full-Stack and Mobile Developer

C#, Swift, PHP, JavaScript, Python. .NET MAUI, Laravel, Flutter, AfniahERP customization. Microsoft Graph and MSAL, payment gateways. Active Directory and Microsoft 365 administration. CNN, RNN, LSTM training and agentic AI workflows.

Sole owner of

  • Web applications, APIs, integrations
  • Native and cross-platform mobile

Coverage plan

  • Native mobile is the least redundant software capability: App Store, signing, and device work do not transfer to an agent
  • Agent-generated documentation for web and integration code
  • Second line for IT Administration on identity and endpoints
  • Second builder of continuity agents alongside the director

Anoud AlAssaf, ERP Engineer

Architectural engineer and computational designer. Built 100 plus AfniahERP workflows for site supervision and project management. Python, JavaScript client scripting, Jinja, permissions architecture. Rhino and Grasshopper, generative design, ML and quantum optimization background.

Sole owner of

  • AfniahERP Document Systems, workflows, reports
  • AEC process modelling into digital workflows

Coverage plan

  • The build layer is agent-coverable; the judgment of whether a digital workflow matches the practice is not
  • Critical to the Design and Engineering modules for that reason
  • Latent capacity for AI and computational work once AfniahERP load lifts

Osama Ayesh, Service Desk and Dispatch

IT support and troubleshooting, system administration basics, SharePoint, Excel. Generative AI tooling and prompting, presentation design. Strong communication, customer service, and organization.

Will own

  • Service desk, triage, requester communication

Growth path

  • Redeployed capacity, no new position
  • Relieves intake load from every specialist
  • Operator of the AI dispatcher and reporting tools in later phases
  • Partial cover on infrastructure monitoring after training
Maaz Ahmed5 sole-owner capabilities, 2 human required
Samer Rahmeh4 sole-owner capabilities, 1 human required
Anoud AlAssaf2 sole-owner capabilities, 1 human required
Abdulrahman Rahmeh2 sole-owner capabilities, mobile is hybrid
Osama Ayesh1 capability after training, agent-coverable
7

Roadmap

Four quarters from October 2026. Structure and intake first, resilience and capacity second, the AI layer once the data and the documentation exist.

Q4 2026 Q1 2027 Q2 2027 Q3 2027 Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Structure approved and communicated Osama Ayesh transfer and dispatcher training Single intake live, HR and Finance recipients Support windows and SLAs Infrastructure tier decision and quote Tier 2 hardening and first recovery drill Skills matrix and agent-generated runbooks Design and Engineering modules go-live Bidding and Tendering CRM and business management AI allocation and AI dispatcher build AI dispatcher pilot Reporting policy with HR, then pilot Continuity agents for software roles Aggregate effort view, two departments Consolidated budget case and quarterly reviews

Q4 2026

  • Structure approved and communicated
  • Dispatcher in place, single intake live
  • Support windows and SLAs
  • Infrastructure tier decision
  • First consolidated budget case

Q1 2027

  • Tier 2 hardening and recovery drill
  • Skills matrix and runbooks complete
  • Design and Engineering go-live
  • AI allocation reserved, AI dispatcher build

Q2 2027

  • AI dispatcher pilot
  • Bidding and Tendering, CRM delivery
  • Reporting policy with HR, then pilot
  • Continuity agents for software roles begin

Q3 2027

  • Business management delivery closes
  • Aggregate effort view, two departments
  • Second AI application with a department head
  • Annual review of the plan and the tier decision

Decisions and structure

  • Board approves the unified department and reporting line
  • Osama Ayesh transfer agreed with his current department head
  • Structure communicated to all 215 employees with the single intake channel

Intake

  • Dispatcher training on ITSM, categories, and sector scope
  • Intake mailbox and dispatch number live in November
  • HR and Finance name their recipients for redirected requests
  • Dispatch runbook and backup by December

Resilience and capacity

  • IT Administration quotes Tier 2 in October; Board selects a tier
  • Hardening work starts in November
  • Support windows and SLAs live through the dispatcher
  • Skills matrix drafted and runbook generation begins

Delivery

  • Design and Engineering workflows and authority matrices with department input
  • First consolidated IT budget case to Dr. Ehsan Ghurbal, the Finance Manager, and the CEO in December

Resilience

  • Offsite backup, UPS verification, and monitoring alerts complete
  • First recovery drill passed and logged
  • Abdulrahman cross-trained on identity and endpoint recovery

Continuity

  • Skills matrix finalized and reviewed with each sector lead
  • Agent-generated runbooks for every agent-coverable capability
  • On-call arrangement written

Delivery and AI

  • Design and Engineering training and go-live
  • Bidding and Tendering build begins
  • One fifth of one person reserved for AI on the calendar
  • AI dispatcher build starts on Q4 ticket history

Governance

  • First quarterly budget review
  • First quarterly report to the Board on the plan's measures

AI layer

  • AI dispatcher pilot live, dispatcher as approver
  • Reporting policy agreed with HR and legal
  • Reporting pilot in one department with the local model

Delivery

  • Bidding and Tendering go-live
  • CRM and business management build

Continuity

  • Continuity agents for AfniahERP, web, and integration codebases begin
  • Second recovery drill

Governance

  • Quarterly budget review
  • Annual budget input, including the Tier 3 question

Delivery

  • CRM and business management go-live
  • AfniahERP scope closed; remaining work is change requests through the dispatcher

AI layer

  • Aggregate effort view for two departments
  • Second AI application selected through the director's intake with a department head
  • Continuity agents in operation for software roles

Governance

  • Annual review of the plan against its measures
  • Hiring priority restated from the skills matrix
  • Third recovery drill
8

Budget and funding governance

A process the Board approves, rather than a person it has to trust.

Budget is allocated by Finance with approval from the CEO, the Excellence Director, and the Finance Manager. Today, infrastructure needs reach that group from a technical specialist, in technical terms, one item at a time. The plan replaces that with a single consolidated case, ranked and argued in business terms, presented by the director on a fixed cadence.

Sector leads identify and cost needsEach lead owns the technical case and the quote for their sector.
Director consolidates and ranksNeeds are combined into one case with risk tradeoffs, options where they exist, and a recommendation.
One case to managementPresented to Dr. Ehsan Ghurbal, the Finance Manager, and the CEO annually, with a quarterly review of changes.
Decision recorded and trackedApproved, deferred, and declined items are logged with the exposure the company chose to carry.

Cost levers already available

  • The license register in the ITSM module identifies unused and duplicate subscriptions before each renewal.
  • Open-source alternatives are adopted where the staff time to run them exists; they shift cost from licenses to people and are not treated as free.
  • Tiered options let management fund the risk level it chooses, not a single all-or-nothing request.
  • Redeployment and automation before headcount, as this plan does for its first two quarters.

What the plan asks for in funding

  • Q4 2026: the Tier 2 hardening quote from IT Administration, mostly one-time.
  • No new positions through Q1 2027.
  • Any later request comes through the consolidated case above, with the skills matrix setting hiring priority.
9

Decisions requested from the Board

Five decisions, each with a date the plan depends on.

  1. Approve the unified IT Department and its reporting line

    Four sectors and a dispatch function under an IT Director who reports to Dr. Ehsan Ghurbal. Needed in October to start the rollout.

  2. Approve the transfer of Osama Ayesh to Service Desk and Dispatch

    From his current department, with that department head consulted. Needed in October for training to begin.

  3. Select an infrastructure risk tier

    Tier 2 is recommended. The Board chooses the exposure it wants to carry, against the quote IT Administration provides in October.

  4. Endorse the budget governance process

    One consolidated, ranked case from the director, annually with quarterly reviews, starting December 2026.

  5. Endorse the principles for AI-assisted reporting

    Employee-owned reports, aggregate visibility, local model, HR and legal involved before any pilot. This sets the boundary before the tool is built.