How to Start an Information Technology Consultancy Business in Dubai

How to Start an Information Technology Consultancy Business in Dubai

A company of forty people has no technology department. It has a supplier who set up the email, a laptop budget nobody owns, a finance system chosen four years ago because the previous accountant liked it, and a managing director who has started to worry about all three. When that company hires an information technology consultant, it is not buying a specialism. It is buying a function it has decided not to employ.

Information Technology Consultants, as the line reads in the catalogue, therefore describes a role with no natural edges, and that is the central commercial fact of the practice. The same person is expected to set the three-year plan, negotiate with the supplier, judge whether the supplier's work was any good, and — at seven in the evening, because they are the one on the phone — reset somebody's password. All four are genuinely part of what the client thinks it bought, and they are not worth the same money.

The practice is sold as advice and consumed as support

This is the failure mode of the line and it is worth naming before anything else, because a firm that does not design against it will watch its average rate fall every quarter without ever losing a client.

Advice is priced on judgement and billed in days. Support is priced on availability and billed by the hour or the seat. A client holding a monthly retainer does not distinguish between them: it has a number in its head and a person it may telephone, and it makes whichever call it needs today. Because operational problems are frequent and strategic ones are not, the mix drifts steadily toward the cheap end while the revenue line stays flat.

Three things prevent it, and all three live in the engagement letter rather than in good intentions. The retainer states what it covers and carries a short, explicit list of what it does not. Advisory work is a separate, dated, separately priced engagement with its own deliverable, so that strategy is visibly not free. And where the client genuinely needs day-to-day support, it is sold as support, with its own rate and preferably its own named person, rather than absorbed by the consultant whose time is the firm's most expensive input.

The work is everything a company without a technology function needs

The line covers assessing what a company already has and what it costs to keep; planning what it should have and in what order; selecting suppliers and negotiating with them; writing a specification and supervising a project somebody else delivers; drafting the policies and procedures a company is expected to be able to produce; managing software entitlements and renewal dates that otherwise lapse unnoticed; building a technology budget that survives a finance review; providing part-time or interim technology leadership; and preparing a company's technology position for a buyer's advisers, an auditor or a certification body.

Where the advice stops and somebody else's licence starts

Four adjacent lines in the same catalogue are the ones clients expect to be included. Information Technology Network Services covers configuring and operating a network rather than advising on it. IT Infrastructure is the supply and construction of the hardware estate, with goods and lead times this line never touches. Cyber Security Consultancy and Cyber Risk Management Services are security as a discipline in its own right, and a client wanting an assessment against a security standard belongs with them. Data Entry Services is clerical work on a client's records — a different trade altogether.

One boundary is sharper than those and gets crossed quietly. Advising a client on its systems is consultancy. Running those systems on the client's behalf — holding the administrator accounts permanently, hosting the data, answering its users as though you were its help desk — is outsourcing, and it is a different proposition with different activity wording, different liability and different insurance. Firms arrive there by accumulation rather than by decision.

It is also worth separating this line from Computer system Consultancies, which sits a few hundred rows away and reads almost the same on paper. That line is engaged on one system by a company that already has technical staff and an internal disagreement about it. This one is engaged on the whole technology question by a company that has nobody to disagree with.

The marked step is the one most practices skip and the only one that is free to get right. A retainer agreed before anybody has looked at the client's estate is a price set against a guess, and the guess is always optimistic, because the client described the business it wishes it ran. An assessment sold first is paid work, it produces the document every later engagement is argued from, and it lets the retainer be priced against findings rather than against hope.

The buyers, and the route that actually reaches them

Four kinds of company sign this work. The owner-managed business that has outgrown arrangements made when it had eight staff. The new UAE entity of a foreign group, which needs its technology brought up to a parent's standard by somebody who will be in the room. The company preparing for diligence, a certification or a procurement questionnaire it cannot presently answer. And the company that has just had an incident.

The accountant is the gatekeeper, not the search engine

Almost nothing in this line arrives from advertising. The referral that matters comes from the client's accountant or auditor, because they are the only outsiders who see every client's weaknesses in detail and who are regularly asked the question directly. A practice that is known to two good accounting firms has a pipeline; a practice with a website and no introducers has a hobby.

The incident client deserves a warning of its own. It pays the highest rate, decides in a day, and is the most grateful client the firm will ever have — for about three weeks. The work that prevents a recurrence competes against the relief of the problem having gone away, so a firm forecasting on incident work is forecasting other people's bad luck.

The conditions attach to the client's access and data, not to any goods

Nothing in this line crosses a border, so there is no customs code, no product approval and no shipment to clear. What the practice carries instead is privileged access: administrator credentials, the client's own commercial files, and often personal data belonging to the client's staff and customers. Obligations of that kind attach to the information and to the arrangement under which it is handled, and they do not arrive with the licence.

Six things therefore belong in the engagement letter rather than in an understanding. What the firm may access, for what purpose and for how long. A named list of what the retainer excludes. Who may give instructions. What happens to credentials, copies and working files when the engagement ends. A disclosure of any commission, margin or partner status the firm holds with a supplier it may recommend, because this line is routinely paid by vendors and a client that discovers it later discovers it badly. And who notifies whom if something is lost or exposed.

Where the client operates in a sector with rules of its own — health, financial services, education — those obligations reach the consultancy through the client's contract rather than through its own licence, and they can be considerably more demanding than anything the activity itself requires.

Because the clients are UAE-resident companies advised on UAE soil, a mainland licence is the ordinary route; a free zone licence can hold an activity of this kind and suits a practice serving companies inside its own zone or clients abroad, with the standing caveat that what a licence permits you to sell, and to whom, is settled by the authority issuing it. What it costs, which form it takes and what premises conditions attach all depend on the emirate and the licensing authority, and ConsultZone establishes those for the specific practice before anything is applied for.

References

1. UAE Government portal — federal law and government information, including the national framework for data and digital government that a consultancy advises within. UAE Government portal
2. Federal Tax Authority — corporate tax and VAT enrolment, filing and the thresholds that bring an advisory practice into them. Federal Tax Authority
3. Ministry of Human Resources and Emiratisation — work permits, labour contracts and Emiratisation obligations for consulting staff. MoHRE
4. Ministry of Economy — company matters and intellectual property, which bear on supplier arrangements and on who owns work product. Ministry of Economy