After a busy start to the month at LEAP, September settled into the kind of work that lasts longer than a show week. We earned ISO/IEC 27001:2022 certification, marked twenty years alongside ManageEngine, sat down with IT leaders to talk about putting AI to work on their own data, and celebrated Saudi National Day together.Â
Here is what shaped the month.
Alnafitha IT Milestones in September 2026
Alnafitha IT Is Now ISO/IEC 27001:2022 Certified
ISO/IEC 27001 is the international standard for managing information security. For our clients, it means the way we protect information is built on recognized practice and checked independently. We marked the day with the colleagues who made it happen, and we thank every team that was part of the journey.

Twenty Years with ManageEngine
For two decades, we have grown alongside ManageEngine, and that partnership has shaped how we serve clients across the Kingdom. This milestone belongs to every client who trusted us and every team that delivered, one project at a time. We are grateful for the years behind us and ready for the ones ahead.
Events We HostedÂ
Microsoft Frontier Accelerate
16 September 2026, Hilton Riyadh Olaya
We hosted a roundtable built around one question: how do you move from AI strategy to real, governed action on your own enterprise data? Leaders worked through it with Microsoft architects, looking at how context-aware agents get built, governed, and scaled inside real organizations. Thank you to everyone who joined and made the conversation what it was.

Moments With Alnafitha IT Team That MatterÂ
Celebrating Saudi National Day
We celebrated Saudi National Day with our colleagues and their families, and our teams in Jeddah and Cairo marked the day together in the office. A proud moment shared by everyone at Alnafitha IT. Happy National Day to the Kingdom and its people.

From the Alnafitha IT Blog
This month’s articles focused on choosing the right provider: what to compare, what to ask, and where contracts tend to fall short.
Choosing a Managed SOC Provider in Saudi Arabia
Many organizations pick a managed SOC on price, then hand the provider an environment full of logging gaps it cannot see into. The guide covers the half of the decision most buyers skip: how to evaluate providers on coverage, SLAs, and NCA ECC-2:2024, and how to build the SIEM and detection foundation any SOC depends on.
Three Microsoft 365 Security Gaps That Hurt Hybrid Teams
Most Microsoft 365 breaches in Saudi enterprises start with default settings no one revisited: MFA that covers admins but not everyone, legacy protocols still switched on, and sharing links open to anyone with the URL. The article sets out a four-phase plan to close these gaps with tools already in your license, aligned with NCA ECC-2:2024.
Choosing a Business Communication Platform Under PDPL
Before comparing features, ask where your data will be stored. With PDPL in effect, keeping data inside the Kingdom narrows your options first. The guide helps IT leaders choose a unified communications provider with that question settled from the start.
How to Compare Enterprise IT Support Proposals
Many support proposals look the same on price and hide the scope that matters. Response time is not resolution time, L1 to L4 coverage is where contracts often fail, and for Saudi organizations, one NCA ECC question can rule out a vendor before the numbers come up. The guide shows what to compare instead.
Upcoming Events
Here is where to find us next.
Saudi Global CXO Summit, with ManageEngine
26 October 2026, Riyadh Marriott Hotel
A summit for CISOs and senior security and technology leaders, focused on protecting the Kingdom’s digital progress. The day includes talks from public and private sector leaders, a technology exhibition, a hackathon, and an awards ceremony. Find us there alongside ManageEngine.
Thank you for reading. We hope to see you in Riyadh next month.