Glossary
ICT, Cybersecurity, and Oman-Regulatory Glossary
Short, stand-alone definitions of the acronyms and named programmes that recur across our services and FAQs. Each entry is anchor-linked — share /glossary#soc, /glossary#mtcit, and so on directly.
- SOC — Security Operations Centre
- A 24/7 facility staffed by analysts who monitor an organisation's systems for security threats, investigate alerts, and coordinate response. AHAT's in-house Managed SOC launched in 2023 and operates SIEM/XDR aligned with the MITRE ATT&CK framework.
- SIEM — Security Information and Event Management
- A platform that collects and correlates security event data from across an organisation's network, endpoints, and applications, then raises alerts on suspicious patterns. SIEM is the foundational technology in most modern Security Operations Centres.
- XDR — Extended Detection and Response
- A security technology that unifies detection and response across endpoints, networks, identities, email, and cloud workloads into a single platform. XDR extends the older EDR (endpoint-only) model to give analysts a cross-domain view of an attack.
- SOAR — Security Orchestration, Automation, and Response
- Tooling that automates routine security tasks (alert triage, enrichment, containment) and orchestrates them across other security tools. SOAR reduces analyst workload in a SOC and shortens mean time to respond.
- MITRE ATT&CK
- A globally adopted knowledge base of adversary tactics and techniques, maintained by MITRE Corporation. SOCs map detections, threat-hunting queries, and incident reports to ATT&CK so they speak a common language with peers and regulators. AHAT's SOC is ATT&CK-aligned.
- IAM — Identity and Access Management
- The discipline and tooling that controls who can access which systems and what they can do once authenticated. Modern IAM covers single sign-on, multi-factor authentication, privileged access management, and identity governance.
- DLP — Data Loss Prevention
- Technology that detects and blocks the unauthorised exfiltration of sensitive data — for example, customer records being copied to personal email or removable media. DLP is a baseline requirement in regulated industries such as banking and government.
- vCISO — Virtual Chief Information Security Officer
- A fractional, externally provided CISO engagement, typically delivered on a retainer. A vCISO sets the security strategy, owns the risk register, presents to the board, and runs the security programme — without the cost of a full-time executive hire. AHAT offers vCISO as part of its Cybersecurity Services.
- VDI — Virtual Desktop Infrastructure
- Technology that hosts user desktops on central servers rather than on each user's local PC, streaming the desktop to thin clients or browsers. VDI is widely used in regulated environments because data never leaves the data centre. AHAT delivers Azure-hosted VDI for government, finance, education, and field-team scenarios.
- ISO 27001
- The international standard for Information Security Management Systems (ISMS), maintained by the International Organization for Standardization. ISO 27001 certification requires an audited management system covering risk treatment, controls, and continuous improvement. AHAT is ISO 27001:2022 certified.
- MTCIT — Ministry of Transport, Communications and Information Technology
- The Sultanate of Oman's ministry responsible for telecommunications, ICT regulation, and digital government. MTCIT maintains a public register of accredited Security Assessment Service Providers; AHAT is listed under ALHOLOL ALTHAKEYA INTERNATIONAL.
- TRA — Telecommunications Regulatory Authority (Oman)
- The Sultanate of Oman's regulator for telecommunications and licensed telecom services. AHAT holds an active TRA Telecom Services Licence (No. 498/2025) covering system integration, IT/telecom project management, managed services, and application development.
- Riyadah
- Oman's national SME development programme, administered by the Authority for Small and Medium Enterprises Development (ASMED). Riyadah registration certifies that a business meets the Sultanate's SME criteria and unlocks preferential treatment in government procurement. AHAT is a Riyadah-registered SME.
- JSRS — Joint Supplier Registration System
- A vendor-registration platform used by Oman's major buyers (including energy-sector operators) to qualify suppliers across compliance, financial, technical, and HSE dimensions. AHAT is JSRS-registered.
- Oman Vision 2040
- The Sultanate of Oman's long-term national development strategy, replacing Vision 2020. Vision 2040 prioritises economic diversification away from hydrocarbons, with explicit emphasis on knowledge economy, digital transformation, and local private-sector capability. AHAT's service portfolio is explicitly aligned with Vision 2040.