Technology in an energy business is attached to something physical that must not stop and must not hurt anybody. That single fact inverts the priorities every other sector brings to a systems decision. In a bank or a ministry, the instinct is to protect the confidentiality of the data first. On a plant, a rig or a pipeline, the first duty is that the process stays safe and the process stays running, and a security control that risks either is not a stricter control - it is a hazard with a policy attached. Almost every disagreement we are called into between an energy operator and its technology suppliers comes back to somebody having applied an office-IT reflex to an operational problem.
The second fact is about who is actually reading a page like this. The Kingdom's energy sector is not one buyer. It is a national operator and a handful of large petrochemical and refining businesses, and then a much larger population around them: engineering and construction contractors, drilling and oilfield service companies, inspection and certification firms, fabrication yards, logistics and marine providers, camp and catering operators, and specialist maintenance businesses. The second group carries the first group's requirements, flowed down through the contract, without the first group's budget or its technical staff. That asymmetry is the defining commercial problem in this sector and it is where independent advice is worth the most, so it is what most of this page is about.
The third fact is the direction of travel. Saudi Vision 2030 has pushed the sector in two directions at once: downstream and petrochemical expansion that adds plants, products and supply chains to manage, and a localisation agenda that asks for capability to be built inside the Kingdom rather than flown in for a project and flown out again. Both land on the technology estate. Growth adds systems faster than most organisations add the ability to integrate them, and localisation turns a staffing preference into a procurement obligation.
Our interest, stated before the argument rather than after it. Trustangle is an independent advisory firm based in the Kingdom. We do sell selection, architecture and implementation assurance work, so we have a genuine commercial interest in your decision, and you should know that before you read further rather than discover it on a partners page afterwards. What we do not do is earn a margin on your licences or bid for the implementation we scoped. In a sector where the firm proposing the solution is very often the firm that would build it, that separation is the whole of what we are offering.
The three pressures below are not a catalogue of everything that can go wrong in an energy business. They are the three we are actually called about, and they are connected: the regulatory one is enforced by your customer as well as by the state, the operational one means the estate can only be changed inside windows fixed years in advance, and the data one is why the same asset is described differently by every system that holds a record of it.
An energy business in the Kingdom answers to more than one authority, and the obligations do not line up neatly. The National Cybersecurity Authority sets the national control baseline and treats operational technology as its own problem rather than as a subset of IT, which is correct and is also why a control set written for the office estate does not transfer. Energy infrastructure sits in the critical national infrastructure conversation, so the heavier expectations apply. The Personal Data Protection Law covers workforce data, which in this sector is a far larger population than a payroll figure suggests once camp residents, rotating crews, medical and fitness-to-work records and contractor onboarding are counted. The Communications, Space and Technology Commission governs the cloud and connectivity arrangements much of the estate now depends on. In-Kingdom Total Value Add and the wider local content agenda shape who may realistically be bought from, where systems may sit, and who may operate them.
We are not going to quote you a control reference, a threshold or a deadline on this page. Those change, a sector page carrying them is wrong within a year of being written and never says so, and your own legal, HSE and compliance functions are the authority on the current text in any case. What is stable enough to be worth saying is the shape of the problem, and in energy it has an edge no other regulated sector has: your largest customer is also, in practice, your regulator.
Operators flow their own cybersecurity, data-handling and assurance requirements down through the contract to everyone who connects to them, works on their sites or holds their data. For a contractor or a service company that flow-down is usually the binding constraint, and it bites harder than the statutory one, because the penalty for failing an operator audit is not a fine. It is removal from an approved vendor list, which can be most of a revenue line. We see the consequences of that regularly: a supplier who has rebuilt its entire estate to satisfy one operator's questionnaire and cannot answer the next operator's without doing it again; another who passed an audit on evidence assembled by hand in the preceding fortnight and has no idea whether the controls actually held in the months either side of it.
The work that breaks that cycle is not a compliance tool. It is deciding once where each obligation is met, who owns it, and how it evidences itself continuously rather than on request - so that the next questionnaire is a report rather than a project. That is IT governance: decision rights, control ownership and the evidence model. The control environment itself, including the part of it that reaches into the operational estate, sits under IT security consulting.
The operational problem in an energy business is rarely that something is broken. It is that the estate can only be changed during windows that were fixed long before anyone knew what would need changing.
The plant does not stop for the IT calendar. A patch an office estate deploys on a Tuesday evening waits, on a process estate, for a turnaround or a scheduled shutdown - planned years out, costed in lost production, and correctly guarded by people whose job is to keep the process safe. The practical consequence is that the change backlog for operational systems is measured in shutdown cycles rather than in sprints, and that anything which cannot be done inside a window has to be designed so it does not need one. Very few enterprise suppliers price that reality into a delivery plan, and it is one of the first things we test in a proposal.
Control systems outlive the companies that supported them. A distributed control system commissioned for a facility is expected to run for the life of the plant, which is longer than the support life of any operating system underneath it. Estates therefore carry equipment that cannot be patched, cannot be scanned without risk, and cannot be replaced except as a capital project carrying its own safety case. Treating that as negligence is a category error; treating it as acceptable without compensating controls and a replacement plan is a real one. The useful question is never why it has not been upgraded, it is what protects it and what the plan is when the last spare part is gone.
Operations and IT report to different people with different incentives. Process and engineering functions are measured on availability, integrity and safety. IT is measured on security, cost and service. Both are behaving rationally, and the gap between them is where most incidents and most stalled programmes actually live - a firewall nobody will own, a historian nobody will patch, a remote-access route nobody will formally approve and everybody uses. This is a governance problem wearing a technical costume, and it is solved by naming the owner of each boundary rather than by buying a product that spans it.
Sites are remote, connectivity is constrained, and conditions are hostile. Designs that assume constant bandwidth, mains power and an air-conditioned cabinet fail quietly in the field and then get blamed on user adoption. A system that a technician cannot use in gloves, in daylight, with intermittent coverage, is not deployed - it is installed.
Turnarounds are where the money is won or lost, and the data needed to plan them is scattered. Scope, inspection history, spares availability, contractor mobilisation and permit-to-work all sit in different systems, frequently in different organisations. The difference between a turnaround that lands and one that overruns is usually visible in the quality of that information months beforehand, which makes it an integration and data problem long before it is a planning one. Maintenance and materials sit with ERP consulting; getting the systems to exchange anything trustworthy is systems integration.
The workforce churns by design. A campaign mobilises hundreds of contractor personnel and demobilises them again, each needing site access, system access, competency records and inductions. Access that is granted quickly and revoked slowly is the single most common control weakness we find in this sector, and it is not a tooling failure - it is that demobilisation has an owner on the site and no owner in the systems.
Ask an energy business a simple question about one of its assets - what is installed, what condition is it in, what has been done to it, what does it cost to run - and the honest answer is usually that several systems hold part of it and none of them holds the whole. That is not carelessness. It is the accumulated result of how the asset was built and how it has been operated since.
The as-built and the as-maintained drift apart from the first day. An asset is handed over by the engineering and construction contractor with a set of drawings, equipment registers and documents, and from that moment every modification, replacement and workaround either gets reflected back into that record or does not. Twenty years of not-quite is why a reliability programme so often starts with a walk-down rather than with a query. The project handover is the moment the information quality of the asset is set for its entire life, and it is routinely managed as a document-count exercise against a contractual milestone instead of as the acceptance of a data asset.
Every discipline is authoritative for its own purpose and for nothing else. Subsurface and well data, production and allocation figures, process historian tags, the maintenance register, the engineering document set and the financial ledger are each correct within their own frame, and each uses its own identifier for the same physical thing. Until one of those identifiers is agreed as the one the others map to, every cross-system question is answered by a person with a spreadsheet, and the answer is only as current as the last time that person did it.
Upstream and downstream do not have the same problem. Upstream, the hard part is usually reconciliation - measurement, allocation and the production number that partners in a joint arrangement will all accept, which is a governance question wearing a metering costume. Downstream, the hard part is usually flow: feedstock, blending, movements, inventory and dispatch, where the cost of a bad number is a scheduling decision rather than an entitlement dispute. A platform chosen for one and applied to the other disappoints in ways that surprise nobody who works in the other half.
Emissions and energy reporting have quietly become an audit problem. Figures that were once estimated for an internal report are increasingly expected to be traceable to a measurement, with a method that survives being asked about. That is a data lineage requirement, and organisations that already know where their production numbers come from find it straightforward while organisations that do not discover the state of their data by being asked this question in public.
The work here is unglamorous and compounding: agree the asset identifier, decide which system is authoritative for which fact, and build the exchange once rather than per project. That is systems integration and business intelligence consulting, with the analytics layer on top covered under data and analytics.
What follows is what comes up in the room, in roughly the order it comes up. It is not a market forecast and it is not a list of things we would like to sell.
Operational technology security, finally with a budget. This has moved from an engineering concern to a board one across the sector. The mature version of the conversation is no longer about buying a monitoring product; it is about knowing what is actually connected, where the boundaries are, who owns each one, and how remote access by vendors is granted and withdrawn. Organisations that start with an accurate inventory and a segmentation decision get value from the monitoring they buy afterwards. Organisations that start with the product buy visibility of an estate they cannot yet describe.
Asset performance, with more realism than a year or two ago. Predictive maintenance is still the headline, and the honest finding on most sites is that the majority of the available value sits below the model: complete and correct equipment records, a functioning work-order discipline, criticality that reflects the current process rather than the commissioned one, and failure history that is coded consistently enough to learn from. We say this to clients who are ready to buy the model, and it is occasionally unwelcome. It is also what makes the model work when it is eventually built.
Integration and the asset data backbone. Increasingly framed as its own programme rather than as a line inside somebody else's, which is the right instinct: it is the dependency under the other three priorities on this list, and it is the one that never has a natural sponsor because its benefits land in other people's budgets.
Capital project cost and schedule certainty. Growth downstream and in petrochemicals - the adjacency this page shares with manufacturing - means more organisations running more concurrent capital projects than their reporting was designed for, and discovering that progress, commitment and forecast cost are assembled manually from contractor submissions.
Localisation as a systems question. Under Saudi Vision 2030 and In-Kingdom Total Value Add, building capability inside the Kingdom stops being a hiring preference and becomes something that has to be evidenced. That reaches the technology estate directly: where data sits, who can support a platform from where, and whether the knowledge to run a system stays in the organisation after the implementer leaves. It is also the most persuasive argument we know for treating knowledge transfer as a contractual deliverable with an acceptance test rather than as a goodwill clause.
Supply chain and logistics visibility. Long lead items, customs, marine and heavy-lift movements and remote-site inventory - the same discipline the Kingdom's transportation and logistics sector runs on, applied to a materials base where a single missing item can hold a turnaround. The product landscape for that is surveyed under supply chain, logistics and fulfillment.
The scope boundary first, because a reader in this sector will look for it before anything else. We advise on enterprise systems, data, integration and the governance of security - including how the operational estate is bounded, owned and evidenced. We do not do control-system engineering. We do not configure, tune or commission distributed control systems, programmable controllers or safety instrumented systems, and we do not take work that touches a live process. Those belong with your process automation vendor, your engineering contractor and your own functional safety authority, and an advisory firm that implies otherwise on a marketing page is telling you something about how it scopes work generally.
Within that boundary, the sequence is the same every time, and it starts further back than most engagements in other sectors do.
We map the constraint set before discussing any option. The turnaround and shutdown calendar, the flow-down requirements in your operator contracts, the local content position, the safety case implications of anything touching the process estate, and the real procurement lead time between a decision and a mobilised supplier. Those five constrain the answer more than any feature comparison will, and a recommendation made without them is a recommendation that cannot be executed.
We write a requirement document that more than one supplier can answer. This is the single highest-value thing an independent adviser does. A specification assembled from one product's feature list attracts one serious bid and a field of polite non-answers, and the quality of a decision is capped by the quality of the competition for it. Writing the requirement in terms of the outcome, the constraint and the interface - rather than the mechanism - is what restores that competition. This is the core of technology vendor selection.
We evaluate against the constraints, in front of you. Scored openly, with the weighting agreed before the responses arrive rather than discovered afterwards, and with the losing answers written down so the decision can be explained to an audit committee or a joint venture partner a year later.
We stay through delivery as assurance, not as the implementer. Someone whose fee does not depend on the change request, reading the design, testing the milestones against what was actually bought, and saying early when a plan has quietly started assuming a shutdown window that does not exist. Where the programme is a broader change rather than a system replacement, that sits alongside digital transformation, and the longer arc of it under IT strategy consulting.
We write knowledge transfer into the contract as a deliverable with an acceptance test. In a sector where specialist capability is scarce and expensive, the difference between an estate you can change and one you must raise a variation to touch is decided in the contract, not at go-live.
Categories rather than products, because the right answer depends on whether you are an operator, a contractor or a service company, and on which of those your customers are.
Enterprise asset management and maintenance. The equipment register, criticality, planned and corrective work, inspection history, spares and the turnaround scope that draws on all of it. For most asset-heavy organisations this is the system of record that matters most and the one most often implemented as a work-order tool and never as an asset register.
ERP, project cost control and contractor commercial management. Finance, procurement, materials and the project ledger - and, for contractors and service companies specifically, the ability to cost a job against a contract that was priced on rates, milestones or reimbursables and to bill it without a month of reconciliation.
Integration and the asset data backbone. The agreed asset identifier, the exchanges between operational and enterprise systems, and a route from the historian to reporting that does not require an export.
Governance and security of the operational boundary. Inventory, segmentation decisions, vendor remote-access control, and the evidence model that answers an operator questionnaire from records rather than from a fortnight of preparation.
Analytics and reporting, including HSE and emissions. Production, cost, reliability and safety reporting built on a defined lineage, so a number that is challenged can be traced rather than defended.
Field, workforce and contractor management. Permit-to-work interfaces, competency and certification records, mobilisation and demobilisation, and access that is withdrawn as reliably as it is granted.
Two of our catalogue pages carry most of what energy organisations ask us to compare, and both are maintained rather than restated here so that a product list cannot go stale inside this page.
Data, AI and analytics covers the reporting, warehousing and modelling layer that sits above the asset and production data discussed in section 1.3 - the place where a reliability or emissions question is actually answered.
Supply chain, logistics and fulfillment covers materials, movements, inventory and the long-lead procurement that decides whether a turnaround scope is executable.
We are deliberately not naming a preferred platform for either. Which one fits depends on whether you are running one asset or a portfolio, whether your obligations are your own or flowed down from an operator, and what your organisation can realistically support in-Kingdom after the implementer demobilises. That is a conversation, not a page.
Independence is claimed by almost everyone, so it is worth saying precisely what we mean and what it is worth in this sector specifically.
The party that estimates the work is usually the party that would do it. The engineering and construction contractors and systems integrators serving this sector are capable organisations holding deep knowledge of assets they have worked on for years, and that knowledge is a genuine asset. It also means the same firm can define the scope, price it, build it and assure it, and that you may have no independent basis on which to judge whether an estimate is reasonable or whether a change request was foreseeable. That is not an accusation about any supplier. It is a structural absence of a second opinion, and restoring it is inexpensive relative to what it protects.
The approved vendor list narrows the field before you do. An operator's pre-qualification rightly filters for capability and safety record. It also means the firms you may buy from are a subset, and within a subset the incentive to recommend what one can deliver rather than what the problem needs is stronger, not weaker. An adviser who is not bidding for the implementation is the cheapest available correction to that.
We do not take a margin on what you buy. No resale, no referral fee, no implementation bid on work we scoped. That is what makes it possible to write a requirement more than one supplier can answer, and to tell you that the modest option is sufficient.
What we will not claim. The credibility currency in this sector is the name of the operator you have worked for, and it is precisely the currency a page like this is most tempted to counterfeit - with an unnamed reference, a composite project, or a number nobody can check. There is none of that on this page, deliberately, and you should apply the same test to every firm bidding: ask for the named reference, ask to speak to them, and ask what the change orders on that engagement were and why. A firm that cannot answer the third question has not given you a reference, it has given you a logo.
What we do offer for scrutiny is the reasoning: how we would frame your constraint set, what we would put in the requirement document and what we would refuse to put in it. That is testable in a first conversation, at no cost, which is more than a case study allows.
There is no case study on this page, and the reason is worth more to you than a case study would be.
A sector page is written once and read for years. Anything specific enough to be useful here - an operator, an asset, a scope, a result - is either published with the client's agreement and maintained where such things are maintained, or it is not ours to publish at all. The version that ends up on pages like this instead is the anonymised composite: "a leading Saudi energy operator" achieving an improvement expressed as a percentage, with no named client, no baseline and no way for you to check any of it. In a sector where confidentiality obligations are genuinely strict, that construction is especially easy to write and especially worthless, because the confidentiality is exactly what makes it unfalsifiable.
So the real ones live at success stories, where each is attached to a client who agreed to it and where the page is maintained. If nothing there is from this sector, that is a true answer about our track record in energy and you should weigh it, rather than have it papered over here.
In a first conversation we will talk in specifics about your situation instead: what your constraint set looks like, where we think the risk sits, and which parts of what you are being sold we would challenge. That is a better test of an adviser than a story about somebody else.
In the order we meet them: an operational estate that can only be changed inside shutdown windows and therefore accumulates a backlog measured in cycles rather than weeks; equipment that has outlived its vendor support and cannot be patched or scanned safely; an asset whose record is split across a maintenance register, an engineering document set, a historian and a ledger that each use a different identifier for the same thing; operator flow-down requirements that a contractor must satisfy repeatedly and by hand; and access for a rotating contractor workforce that is granted quickly and revoked slowly. Only the second of those is really a technology problem. The rest are ownership and information problems that present as technology ones.
It depends on which part of the sector you are in, and the honest version of the answer is shorter than most vendor lists. An asset-heavy operator needs an equipment and maintenance system it genuinely trusts before it needs anything predictive. A contractor or service company usually needs project and contract cost control before it needs anything else at all, because that is where its margin is either protected or lost. Both need a defined way for operational data to reach reporting without an export, and both need access management that matches how their workforce actually mobilises. Analytics, digital twins and predictive models are worth buying after those foundations exist and are worth very little before - which is not a reason to defer them indefinitely, but is a reason to sequence them honestly.
We will not publish a duration here, because a number on a page becomes an expectation before anyone has seen your estate, and in this sector the elapsed time is driven by things no benchmark can know. Three of them dominate. The procurement cycle between a decision and a mobilised supplier is real, largely incompressible, and routinely left out of plans that begin at contract signature. Anything touching the operational estate waits for a change window that is set by the turnaround calendar rather than by the project. And anything requiring a safety case carries a review that cannot be shortened without removing its purpose. A plan that names all three explicitly will be longer than one that does not, and very much more likely to hold. Ask any firm quoting you a schedule which shutdown window it assumes.
Structurally: the National Cybersecurity Authority's control baseline, with the heavier expectations that attach to critical infrastructure and with operational technology treated as its own domain; the Personal Data Protection Law over workforce, contractor and camp data; the Communications, Space and Technology Commission over cloud and connectivity arrangements; local content obligations including In-Kingdom Total Value Add; and the environmental, safety and reporting obligations specific to your licences and your facilities. On top of all of that sit your customers' own flow-down requirements, which for most contractors and service companies are the ones enforced most often and most consequentially.
We deliberately publish no control reference, threshold or date for any of them. Those change, and a page that carries them goes wrong silently. Your own legal, HSE and compliance functions are the authority on the current text; what we help with is the structural question of where each obligation is met in your estate, who owns it, and how it evidences itself without a fortnight of preparation.
The place that answers this honestly is our customers and success stories, both maintained, both naming clients who agreed to be named. We are not going to assert a sector track record in a content field that no one updates.
It is a fair question and you should press it - with us and with everyone else bidding. The version that actually discriminates between firms is not whether they have energy logos, since the large integrators all do. It is whether the people who would be on your engagement have worked inside the constraints described on this page: whether they have planned around a turnaround window, read an operator flow-down schedule, or handled an estate carrying equipment that cannot be patched. Ask to meet them, not the firm.
There are no numbers in this section, and that is deliberate rather than an omission waiting to be filled.
Sector counts on pages like this one are written once and then quietly outlive their accuracy, because nothing in the publishing process ever revisits them. Worse, the ones that look most impressive are usually the least checkable: a count of engagements with no definition of what counted as one, an improvement percentage with no baseline, a client tally that silently includes work done years ago by people who have since left. Publishing that in a sector whose own engineering culture is built on measurement discipline would be a poor opening argument.
What we do have is maintained: real clients on our customers, and real engagements, written up with the client's agreement, on success stories. Those pages are updated as the work is. This one would not be.
If a figure would genuinely help your evaluation - how many of our people have worked in this sector, or what a comparable engagement cost - ask us in a conversation, where we can tell you what the figure means and what it excludes. Ask every firm on your list the same way, and ask them what they are counting. The answers tend to be more revealing than the numbers.
Our clients are listed on our customers, which is maintained, rather than named here, where a list would go stale and where naming anyone who has not agreed to be named would breach exactly the confidentiality this sector takes most seriously.
Two things worth saying about how to read any such list, ours included. First, a logo tells you an engagement happened, not what it was, how large it was or how it went - so ask. Second, the relevant question is rarely whether a firm has worked in energy at all, but whether it has worked with your part of it: an adviser fluent in an operator's environment may know very little about the commercial reality of a service company carrying that operator's requirements on a contractor's margin, and the reverse is just as true.
Completed engagements are published, with client agreement, at success stories. That page is maintained; a summary written into this one would not be, and would drift from it within a year without anybody noticing.
If nothing there is from this sector, take that as the true state of our energy track record and weigh it against what else you are looking for in an adviser. We would rather be assessed on an accurate answer than on a page that quietly implies a different one.
There is no quotation written into this section. Client testimonials on this site come from records maintained in the backoffice and appear below this article automatically, attached to a named client who agreed to give one. A sentence composed here and presented as somebody else's words would be a fabrication, however flattering and however plausible.
If none appears below from this sector, that is a true signal and not a rendering fault. The stronger form of the same evidence is a reference conversation, and we will arrange one on request wherever a client has agreed to take those calls. Ask for the same from every firm you are considering, and ask to choose which reference you speak to.
Our current partner and vendor relationships are listed at partners, which is maintained. Accreditations and partner tiers change on the vendors' schedules rather than ours, so asserting a list in a content field that nobody revisits is how a site ends up advertising a status it no longer holds.
One point specific to this sector, and it cuts against our own interest to make it. Vendor partner status tells you a firm has met a vendor's commercial and training requirements. It tells you nothing about independence - and for the selection stage, a deep partnership is arguably a reason for caution rather than confidence, because the firm's economics improve when you choose that vendor. Weigh partner status when you are assessing who should implement something. Weigh its absence, and the absence of any resale margin, when you are assessing who should help you decide what to implement.
Our own answer is the plain one: we hold no resale margin on what we recommend, and we do not bid for the implementations we scope.
The pages below carry the detail this one summarises. Each is maintained separately, so they stay current as this page ages.
IT security consulting - the control environment, including the governance of the boundary between the enterprise and operational estates described in section 1.2.
IT governance - decision rights, control ownership and the evidence model that turns the next operator questionnaire into a report rather than a project.
Systems integration - the asset data backbone, the agreed identifier and the exchanges between operational and enterprise systems.
Business intelligence consulting - production, reliability, cost and emissions reporting built on a lineage that survives being challenged.
ERP consulting - finance, procurement, materials and the project ledger, including contractor commercial management.
Technology vendor selection - the requirement document and the evaluation, which is where an independent adviser earns most of their fee.
IT strategy consulting - the multi-year sequence, and how it survives contact with a shutdown calendar and an annual budget.
Digital transformation - the broader programme view when the change is organisational rather than a system replacement.
Data and analytics and data, AI and analytics solutions - the modelling and reporting layer above the asset and production data.
Supply chain, logistics and fulfillment - materials, movements and the long-lead procurement that decides whether a turnaround scope is executable.
Manufacturing - the closest adjacent sector, and the relevant one for downstream and petrochemical operations.
Transportation and logistics - for pipeline, terminal, marine and distribution operations.
Saudi Vision 2030 - the localisation and diversification agenda behind much of the sector's current investment.
A first conversation is free and is genuinely diagnostic rather than a qualification call. Useful things to have to hand: which part of the sector you sit in and who your customers are, the flow-down requirements you are currently carrying, your turnaround or shutdown calendar, what you are being sold and by whom, and what has already been tried.
What you should get out of it, whether or not you engage us: a clearer view of which of your constraints actually binds the decision, an honest opinion on whether the thing you are being sold addresses it, and the questions we would put to every firm on your list.
If your problem is better solved by your existing supplier, or by a change that needs no software at all, we will say so. It is a slower way to run an advisory practice and the only one that survives a sector this small, where everyone eventually hears how everyone else behaved.
Request an energy-sector consultation, or ask us for a named reference before you speak to us at all - that is a reasonable request and we treat it as one.