Hybrid Cloud and Hyperconverged Infrastructure Framework for Digital Transformation in Saudi Organisations

Author

Mohammad Hassan Qureshi

Abstract

 Saudi organisations are modernising under strong national expectations for digital government, data value creation, service resilience, and cybersecurity. Yet public cloud adoption alone cannot resolve the combined requirements of legacy integration, workload sovereignty, predictable performance, operational continuity, and rapid innovation. This review develops an evidence-based framework in which hyperconverged infrastructure (HCI) forms a software-defined private-cloud foundation and hybrid cloud provides selective access to elastic public services. A structured integrative review synthesised 30 academic, regulatory, standards, and policy sources published from 2020 to 2025. Evidence was coded against technological, organisational, environmental, governance, security, and value-realisation dimensions. The synthesis finds that the strongest architecture is neither cloud-first in a literal placement sense nor an indiscriminate retention of on-premises systems. It is a policy-led operating model that classifies workloads, separates control and execution concerns, standardises identity and observability, and assigns each application to an HCI, sovereign-cloud, public-cloud, or edge location according to evidence. HCI contributes consolidation, locality, repeatable operations, and recovery, while public cloud contributes elasticity, managed innovation services, and geographic reach. Their combination succeeds only when platform engineering, FinOps, zero-trust security, data governance, vendor-exit planning, and skills development are designed as one transformation system. The proposed framework links national obligations to architecture decisions and measurable outcomes. It offers Saudi ministries, regulated enterprises, universities, healthcare providers, and large private organisations a staged route from fragmented infrastructure to a governed hybrid platform. The review also identifies research needs concerning longitudinal value, energy performance, Arabic-language operations, sovereign-cloud interoperability, and sector-specific empirical validation.

Keywords

cloud governance; digital government transformation; hybrid cloud; hyperconverged infrastructure; Saudi Arabia; sovereign cloud; workload sovereignty; zero-trust security

Full Text:

Download Paper PDF

References

[1] B. Ali, A. I. Awad, and Z. Al-Qudah, “Implementing zero trust security with dual fuzzy intelligent intrusion detection systems for software-defined networking,” Comput. Netw., vol. 242, p. 110259, 2024.

[2] S. Talpur, A. Abro, K. S. Alshudukhi, G. N. Alwakid, M. Humayun, F. Bashir, S. A. Wadho, and A. Shah, “Security and privacy in multi-cloud and hybrid cloud environments: Challenges, strategies and future directions,” Comput. Secur., vol. 157, p. 104599, 2025.

[3] R. Alkhasawneh, Z. C. Cob, and A. B. A. Latif, “Cloud computing adoption in government organizations in developing countries: A systematic literature review and future research directions,” Int. J. Public Adm. Digit. Age, vol. 12, no. 1, pp. 1–27, 2025.

[4] M. Alqahtani and S. Alshahrani, “Core elements impacting cloud adoption in Saudi government organizations,” Int. J. Adv. Comput. Sci. Appl., vol. 13, no. 6, pp. 285–294, 2022.

[5] Cloud Security Alliance, Security Guidance for Critical Areas of Focus in Cloud Computing, version 5, Cloud Security Alliance, 2024.

[6] Communications, Space and Technology Commission, Cloud Computing Services Provisioning Regulations, Riyadh, 2022.

 

[7] I. Čilić, P. Krivić, I. Podnar Žarko, and M. Kušek, “Performance evaluation of container orchestration tools in edge computing environments,” Sensors, vol. 23, no. 8, p. 4008, 2023.

[8] Digital Government Authority, Digital Government Strategy, Riyadh, 2021.

[9] Digital Government Authority, Cloud Computing and Its Role in Accelerating Digital Transformation and Its Sustainable Impact in the Government Sector, Riyadh, 2024.

[10] V. Donat, C. Haertel, D. Staegemann, C. Daase, M. Pohl, D. Dreschel, D. S. Walia, and K. Turowski, “Examining the impact of cloud computing on organizational performance: A systematic literature review,” Proc. 27th Int. Conf. Enterp. Inf. Syst., vol. 1, pp. 375–386, 2025.

[11] A. Hanelt, R. Bohnsack, D. Marz, and C. Antunes Marante, “A systematic review of the literature on digital transformation: Insights and implications for strategy and organizational change,” J. Manag. Stud., vol. 58, no. 5, pp. 1159–1197, 2021.

[12] M. M. Hasan, A. K. M. A. Habib, and M. S. Hossain, “The journey to cloud as a continuum: A review of edge, fog and cloud integration,” Array, vol. 26, p. 100390, 2025.

[13] International Organization for Standardization, Information Security, Cybersecurity and Privacy Protection—Information Security Management Systems—Requirements, ISO/IEC 27001:2022, Geneva, 2022.

[14] A. Khayer, M. S. Talukder, Y. Bao, and M. N. Hossain, “Cloud computing adoption and its impact on SMEs’ performance for cloud supported operations: A dual-stage analytical approach,” Technol. Soc., vol. 60, p. 101225, 2020.

[15] S. Kraus, S. Durst, J. J. Ferreira, P. Veiga, N. Kailer, and A. Weinmann, “Digital transformation in business and management research: An overview of the current status quo,” Int. J. Inf. Manage., vol. 63, p. 102466, 2022.

[16] T. R. Merlo and N. de la Torre, “Cloud computing’s impact on the digital transformation of the enterprise: A systematic review,” Sustainability, vol. 17, no. 13, p. 5755, 2025.

[17] M. M. Mostafa, “A multi-cloud design blueprint for Saudi Arabian government entities: Ensuring data localization compliance and cybersecurity in the digital transformation era,” SSRN Electron. J., Paper 5330955, 2025.

[18] National Cybersecurity Authority, Cloud Cybersecurity Controls, CCC–2:2024, Riyadh, 2024.

[19] National Cybersecurity Authority, Essential Cybersecurity Controls, ECC–2:2024, Riyadh, 2024.

[20] M. J. Page, J. E. McKenzie, P. M. Bossuyt, I. Boutron, T. C. Hoffmann, C. D. Mulrow, et al., “The PRISMA 2020 statement: An updated guideline for reporting systematic reviews,” BMJ, vol. 372, p. n71, 2021.

[21] J. Paul and A. R. Criado, “The art of writing literature review: What do we know and what do we need to know?” Int. Bus. Rev., vol. 29, no. 4, p. 101717, 2020.

[22] J. Reis, M. Amorim, N. Melão, Y. Cohen, and M. Rodrigues, “Digital transformation: A meta-review and guidelines for future research,” Heliyon, vol. 9, no. 1, p. e12834, 2023.

[23] S. Rose, O. Borchert, S. Mitchell, and S. Connelly, Zero Trust Architecture, NIST Special Publication 800-207, National Institute of Standards and Technology, Gaithersburg, MD, 2020.

[24] Saudi Data and Artificial Intelligence Authority, Personal Data Protection Law, Royal Decree No. M/19, Riyadh, 2021.

[25] Saudi Data and Artificial Intelligence Authority, Implementing Regulations of the Personal Data Protection Law, Riyadh, 2023.

[26] A. A. M. Syed, “Hyperconverged infrastructure for enterprise data centers: Performance and scalability analysis,” Int. J. AI, Big Data, Comput. Manage. Stud., vol. 4, no. 4, pp. 29–38, 2023.

[27] Y. Ushakov, V. Muliukha, A. Kalyuzhny, and Y. Gatchin, “Research of a virtual infrastructure network with hybrid topology,” Eng. Proc., vol. 33, no. 1, p. 52, 2023.

 

[28] R. Vaño, I. Lacalle, P. Sowiński, R. S-Julián, and C. E. Palau, “Cloud-native workload orchestration at the edge: A deployment review and future directions,” Sensors, vol. 23, no. 4, p. 4008, 2023.

[29] P. C. Verhoef, T. Broekhuizen, Y. Bart, A. Bhattacharya, J. Q. Dong, N. Fabian, and M. Haenlein, “Digital transformation: A multidisciplinary reflection and research agenda,” J. Bus. Res., vol. 122, pp. 889–901, 2021.

[30] World Bank and Digital Government Authority, Cloud First: Strategy and Practices from the Kingdom of Saudi Arabia, World Bank, Washington, DC, 2024.

Share your valuable work from Social Media Buttons