Doha's IT consulting demand: (1) Digital transformation: QNV 2030 alignment. Digital transformation consulting: government (Qatari government entities needing digital transformation — Ministry of Interior, Ministry of Commerce, Ministry of Education, and Qatar Museums all investing in digital. Hukoomi: Hukoomi (Qatar e-Government portal) integration — private sector systems needing to interface with government digital services. TASMU: TASMU platform integration — connecting business systems to Qatar's smart city infrastructure. Arabic-first: government digital services requiring Arabic-first design — systems built primarily in Arabic with English as secondary), government-related (GREs transforming — Qatar Foundation, Aspire Zone, Msheireb Properties, Hamad Medical Corporation. Scale: GREs operating at scale — large organisations with complex IT landscapes requiring strategic transformation roadmaps. Legacy: significant legacy systems — many GREs having invested in technology during the 2000s-2010s that now needs modernisation. Procurement: GRE procurement following government guidelines — IT consulting engagements often structured through formal tender processes), and private sector (Qatari private sector — Al Jazeera Media Network, Qatar Airways (ground operations), and Qatari conglomerates (Al Faisal, Al Mana, Mannai). Family business: many Qatari businesses being family-owned conglomerates operating across multiple sectors — IT strategy needing to serve diverse business units. ERP: ERP strategy being a common consulting need — SAP implementation, Oracle optimisation, or Odoo for smaller businesses). (2) Cybersecurity: NICS compliance and beyond. Cybersecurity consulting: NICS (NICS compliance consulting — Qatar's National Information and Cybersecurity Standard being mandatory for organisations handling government data. Framework: NICS framework covering governance, risk management, asset management, access control, cryptography, physical security, operations security, communications, system acquisition, supplier relationships, incident management, business continuity, and compliance. Gap: many Qatari organisations having gap between current security posture and NICS requirements — needing assessment, roadmap, and implementation support), critical infrastructure (critical infrastructure protection — oil and gas (Qatar being world's largest LNG exporter), utilities (Kahramaa — electricity and water), and telecommunications. OT: operational technology security for oil and gas — SCADA systems, industrial control systems, and process automation. Qatar: Qatar's geopolitical position creating elevated cyber threat profile — nation-state threats, hacktivism, and industrial espionage all relevant), and incident (cybersecurity incident response — many Qatari organisations lacking in-house incident response capability. Readiness: incident response readiness assessment — do you have IR plans, trained responders, and communication protocols? SOC: Security Operations Centre advisory — build versus buy versus hybrid SOC decisions. Regional: regional threat intelligence — Middle East-specific threat actors and attack vectors)). (3) Cloud: Qatari cloud strategy. Cloud consulting: strategy (cloud strategy for Qatari organisations — public, private, hybrid, and sovereign cloud decisions. QCB: Qatar Central Bank cloud guidelines for financial institutions — specific requirements for data classification, vendor assessment, and ongoing monitoring. Sovereignty: Qatari data sovereignty requirements — certain data categories (government, financial, personal) requiring Qatari or GCC-region hosting. Providers: available cloud in Qatar — Microsoft Azure (Qatar region launched 2022), AWS (Middle East — Bahrain), Oracle Cloud (planned), and local providers (Meeza — Qatar's data centre operator, Ooredoo Data Centre). Meeza: Meeza being the preferred hosting partner for government and GRE — IT consulting often needing to incorporate Meeza in cloud architecture), migration (cloud migration planning — assessing current on-premises infrastructure, identifying migration candidates, and planning sequenced migration. Legacy: many Qatari organisations running on-premises since 2005-2015 — hardware refresh cycles creating natural migration opportunities. SAP: SAP on cloud being a major migration trend — SAP RISE or SAP BTP on hyperscaler. Cost: cloud cost optimisation — Qatari organisations often experiencing "cloud bill shock" after migration, needing FinOps practices), and DR (disaster recovery and business continuity in Qatar — heat and sandstorms threatening physical infrastructure. DR: disaster recovery architecture — Azure Qatar paired with Azure UAE or Bahrain for geographic redundancy. RTO/RPO: defining recovery time and point objectives per Qatar regulation and business requirements. Testing: DR testing and compliance — regular testing per NICS business continuity requirements)). (4) Data: Qatari data strategy. Data consulting: analytics (data analytics strategy — Qatari organisations sitting on significant data but lacking analytics maturity. Government: Qatar government open data (Qalm — Qatar Open Data Portal) creating opportunities for analytics combining public and private data. BI: business intelligence modernisation — many Qatari organisations using basic Excel reporting, wanting Power BI, Tableau, or custom analytics. Arabic: Arabic data analytics — handling Arabic text, Arabic numerals, and bilingual reports), AI (artificial intelligence strategy for Qatari organisations — identifying practical AI use cases rather than hype-driven initiatives. QAI: Qatar's AI strategy — government investing in AI research and application through Qatar Computing Research Institute (QCRI). Arabic NLP: Arabic natural language processing — AI for Arabic customer service, document processing, and content. Practical: practical AI for Qatari business — demand forecasting, customer segmentation, fraud detection, and process automation), and governance (data governance — Qatari organisations needing formal data management frameworks. PDPL: Qatar's Personal Data Privacy Law (Law No. 13 of 2016) — data protection requirements for organisations handling personal data. Classification: data classification frameworks — public, internal, confidential, and restricted categories aligning with NICS requirements. Quality: data quality management — many Qatari organisations having data quality issues from years of manual entry, system migrations, and inconsistent standards)). (5) Infrastructure: Qatari IT infrastructure. Infrastructure consulting: network (network infrastructure — Qatari organisations upgrading from legacy networks. 5G: Qatar's 5G network (Ooredoo and Vodafone Qatar) creating private 5G opportunities for campuses and industrial sites. SDWAN: SD-WAN for organisations with multiple Qatari locations — Doha offices, industrial zones, and regional operations. WiFi: enterprise WiFi — modern office deployments, hospitality, and public venues), workplace (modern workplace — remote and hybrid working post-2020. M365: Microsoft 365 and Google Workspace deployment — a major consulting need for Qatari organisations transitioning from on-premises. Devices: device management — managing a diverse device fleet across expatriate workforce with varying device ownership models. Arabic: Arabic-enabled modern workplace — ensuring Office 365 and Google Workspace properly configured for Arabic, including SharePoint, Teams, and email), and print/physical (infrastructure advisory for Qatar's physical environment — data centre design for 50°C external temperatures, cooling optimisation, and physical security in the Qatari context. Data centre: Doha data centre tier decisions — Tier III for most organisations, Tier IV for critical infrastructure. Cooling: cooling in Qatar being a major data centre cost — 40-50% of data centre energy consumption on cooling. UPS: reliable power critical — Qatar Power (Kahramaa) provides stable supply but UPS and generator sizing still important for regulatory compliance)).