When you need this service
A new site or branch
Fitting out a new office, branch or server room: network, Wi-Fi, firewall, servers, storage, power and cabling delivered as one project.
Ageing or full infrastructure
Servers, storage or network equipment reaching end of support or capacity, and a refresh or a move to HCI without disrupting work.
Backup you can rely on
Backups whose restore was never tested, or a need for a recovery site, against recovery objectives set by the business.
Audit or compliance findings
Findings on hardening, patching, logging or backup from an internal audit or an ECC assessment that need fixing in the infrastructure itself.
The challenge
The NCA Essential Cybersecurity Controls (ECC) require system hardening, patch management and tested backups, and the Critical Systems Cybersecurity Controls (CSCC) add isolation and high availability. ISO 22301 ties all of it to documented recovery objectives.
Infrastructure built only to run carries security debt: factory-default servers, backups whose restore was never tested, an open management network, and devices that send logs nowhere. That debt is paid at incident time.
We build to CIS benchmarks and NCA requirements from the design stage, with ransomware-isolated backup, managed patching and logs ready for your security monitoring platform.
How we work
- 1
Assess and design
We assess the current estate, capacity and risks, agree availability and recovery objectives with the business, and design the target architecture to hardening and isolation standards.
- 2
Procure and implement
We support technology selection and procurement, and carry out installation and migration in phases with minimal downtime and documented acceptance testing.
- 3
Harden and hand over
We apply security baselines, connect logs to SIEM, test restores, and hand over documentation and knowledge transfer or move into managed operation.
What is included
Data centres and HCI
Design and delivery of HCI, virtualisation and small-to-medium data centre environments, with segregated management networks.
Servers and storage
Servers and storage systems hardened to CIS benchmarks, with encryption at rest and capacity planning.
Backup and disaster recovery
3-2-1 backup to disk and tape with an immutable, network-isolated copy, documented periodic restore tests, and a recovery site where business objectives require one.
Wired and wireless networks
Data centre, campus, branch and wireless network design and delivery, including perimeter firewalls, with segmentation and access control from the start.
Power, cooling and cabling
Rack power distribution, UPS and power conditioning, structured cabling, and maintenance arrangements for power and cooling.
Patch management and VA tools
Deployment of patch management and vulnerability scanning tools, linked to our vulnerability management service.
Security baselines
Hardened templates for operating systems, databases and hypervisors, with periodic drift checks.
Logging and monitoring
Every component configured to ship logs to SIEM and the monitoring platform, so monitoring teams see the estate from day one.
How to work with us
Turnkey project
Design, supply, installation, configuration, acceptance testing and handover under one contract, closed with an installation completion certificate.
Professional services on your equipment
Implementation, migration, health checks or upgrades on technology you already own, with a defined scope and deliverables.
Support and maintenance after handover
An annual support and maintenance contract, or a move into managed IT services and the NOC.
Infrastructure implementation, IT operations, NOC or SOC?
Four connected services, each with a different job. You can start with one and add others when you need them.
Infrastructure
This page- You need it when you say
- We need to build or modernise our technology environment.
- What it covers
- Design, supply, installation, configuration and handover: data centres, servers, storage, backup, networks and power.
- How it is delivered
- A project with a defined scope and timeline, which can be followed by a support and maintenance contract.
- What you receive
- An environment ready to run with hardened configuration, plus design and handover documents.
Managed IT Services
- You need it when you say
- We need our IT run and supported every day.
- What it covers
- User support, server and device management, patching, backup, changes and vendors.
- How it is delivered
- A managed-services contract with agreed service levels, delivered remotely or by resident engineers on your site.
- What you receive
- Stable day-to-day operation, regular reports and periodic health checks.
Network Operations Center (NOC)
- You need it when you say
- We need the availability and performance of our network and systems watched.
- What it covers
- Monitoring of devices, links and servers, fault handling and escalation, and coordination with vendors and telecom providers.
- How it is delivered
- An ongoing service with monitoring hours and an authority matrix agreed in the contract.
- What you receive
- Dashboards, fault runbooks, and availability and capacity reports.
Managed SOC
- You need it when you say
- We need cyber threats detected and analysed.
- What it covers
- Threat monitoring and detection, analysis and investigation, and containment recommendations.
- How it is delivered
- An ongoing service under our Managed Security Operations Center (MSOC) Services Licence — Tier 2.
- What you receive
- Analysed alerts, regular reports and remediation recommendations.
A Tier 2 licence authorises the provision of managed SOC services to any organisation other than government entities and organisations that own, operate or host critical national infrastructure.
Service details: Managed SOC
Frameworks and regulations
We align the service with the frameworks your organisation is subject to.
- NCA ECC
- NCA CSCC
- ISO 22301
- CIS Controls
- ISO 27001
Frequently asked questions
How is infrastructure implementation different from managed IT services and a NOC?
Infrastructure implementation is a project: we design, build and hand over. Managed IT services run and support the estate day to day, and the NOC watches its availability and performance and handles faults. Many of our clients use all three in sequence.
Do you work with our existing estate or start from scratch?
We work with what you have. The assessment determines what to keep and harden, what to replace and what to migrate, based on risk, age and cost.
How do you test backups?
By actually restoring selected systems into an isolated environment on an agreed schedule, documenting the time taken against recovery objectives.
Do you operate the infrastructure after handover?
Yes, through managed IT services and the NOC, or we hand over to your team with documentation and training.
Do you deliver outside Riyadh?
Yes, we deliver infrastructure projects across the Kingdom's regions, as defined in the project scope.
How do you protect backups against ransomware?
We follow the 3-2-1 approach with at least one immutable, network-isolated copy, and run backup administration on separate MFA-protected accounts, apart from the domain accounts attackers usually target first. The backup network is segregated from production, and restores are tested on an agreed schedule. For organisations within ECC scope, this supports the ECC-2:2024 Backup and Recovery Management requirement for periodic testing of backup recovery effectiveness.
What do you need from us before design starts?
An inventory of current servers, storage and network devices, existing diagrams, and access to the data centre or server rooms for a site survey. We also need business owners to set availability and recovery objectives for key systems, and to know the maintenance windows and change process we must work within. Existing vendor support contracts and licence details help us decide what can be kept.
What affects the cost of an infrastructure project?
The scale of the estate (sites, servers, storage capacity), the availability and recovery objectives you set, and the hardware and licensing choices. Migration complexity, the downtime windows available, any need for a secondary site, and whether we move into managed operation after handover also drive the effort. We size the project after the assessment and design stage.
Related services
IT Infrastructure & Managed Operations
Managed IT Services
IT operations and support by a managed team or resident engineers, with agreed service levels and regular reporting.
IT Infrastructure & Managed Operations
Network Operations Center (NOC)
Availability and performance monitoring of networks and systems, with early fault detection and escalation to reduce disruption.
Security Solutions
Network Security & Micro-Segmentation
Next-generation firewalls and segmentation that limit the blast radius of any breach.
Assess & Test
Vulnerability Management
Recurring scanning, prioritisation and remediation tracking through to closure.
Contact
Let's talk about what you need
We answer enquiries through the form, WhatsApp, a call or email.
Mobile (calls and WhatsApp)
+966 59 750 4669Email
info@datasec.sa