Private & Confidential

Resources
Digital Transformation Project

To Be Solution Architecture
Report

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 1

Document details

Description Details

Document Name To Be Solution Architecture Report

Project Digital Transformation Project

Document Creation Date 9 Jan 2023

Document Approal Date

Document Last Updated Date 9 Jan 2023

Version Number v1.0

Disclaimer
The information contained in this documents is confidential, privileged and only for the information of the intended recipient and may not be used, published or
redistributed without the prior written consent of Ministry of Agriculture, Fisheries and Water Resources (MAFWR).

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 2

Document Control
Revision History
Revision Details Date Version Author
IBS 1.0 9 January 2023 First Draft

Reviewers
Name Title Review Date

Approvers
Name Title Approval Date

Distribution List
Name Title Distribution Date
IBS Project Library 9 January 2023
MAFWR Project Manager 9 January 2023
MTCIT Focal Point 9 January 2023
ITHCA Focal Point 9 January 2023

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 3

Contents

Section Page Number

Section 1: Introduction 05

Section 2: To Be Architecture Design Principals 08

Section 3: MAFWR Systems Future Direction 12

Section 4: To Be Solution Architecture 36

Section 5: To-Be Application Technical Architecture 62

Section 7: To Be Technology Matrix 74

Section 8: To Be Integration Matrix 76

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 4

 Section 1

Introduction

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 5

Project Background

Project Main Objective: In line with the digital transformation initiative in the Ministry of Agriculture,
Fisheries and Water Resources and in alignment with Oman Vision 2040, it was decided to digitally
transform the ministry's services through conducting a review of the MAFWR services, information systems
and IT infrastructure as part of the digital transformation journey.

Consultancy Study Objective (current stage): At the end of this stage of the consultancy study, the
MAFWR, in cooperation with the Ministry of Transport, Communications and Information Technology
(MTCIT) and the ITHCA Group, will be able to release a tender to implement the future state design of the
digital transformation project and choose the suitable technologies and implementation partner.

Consultancy Objective (the following stages): After the completion of the current stage of the consulting
study, the consultancy work will continue in relation to bids evaluation (proposed technologies and the
implementation partner) and supervising the project implementation.

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 6

Project Phases

Preparing Future State Current State

RFP Design Assessment

Functional and Technical ✓ Services To Be ✓ Services As Is ✓

Requirements IT To Be ✓ IT As Is ✓

Implementation Scope of ✓ Gap Analysis ✓

Work
Evaluation Criteria ✓

Change Management

This report contents MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 7
 Section 2

To Be Architecture
Design Principals

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 8

Approach to Design the To Be Solution Architecture
Service Oriented Architecture (SOA) was followed for designing MAFWR Digital Solution architecture. The key inputs considered for designing the
solution architecture is government standards, current state assessment of the IT at the Ministry, To-Be future direction and the Ministry’s business
To-Be requirements. Following key steps were followed for deriving the MAFWR Digital Solution architecture which consists of application,
infrastructure, data components and other identified initiatives.

Inputs Key Stages Outputs

Current State Assessment of MAFWR Digital Solution

MAFWR IT Environment Architecture

Government National Identification of key technologies

Application Architecture
Initiatives and areas of improvements

Technology requirements for Identification of architecture

Technical Architecture
the Business To Be design principles

Development of solution
Emerging Technologies Security Architecture
components

Other inputs and discussions with

the digital transformation team

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 9

To Be Solution Architecture Design Principles

1 Service Oriented Architecture 2 Scalable 3 Modularity

SOA based solution to be considered Allows new business users and entities to Partitioning of components into
as such solutions enables organization be easily on-boarded without significant separate layers for the purpose of
to achieve economies of scale in the effort in extending technological development makes the architecture
development and implementation of requirements. Remove the traditional more resilient and flexible. This
business solutions via the reuse of barriers of centralized systems and promotes reusability, faster
solution components. The Ministry can leverage latest technologies for faster development time and independent
easily extend and evolve its scalable & de-centralized access across scaling.
architectures instead of replacing geographic locations. System should be
existing investments based on open standards

4 Alignment to Business Objectives 5 Use of Emerging Technologies 6 Multiple service Delivery Channels
System design needs to be done in a Leverage emerging technologies such Multichannel service delivery in the designed
manner to ensure that individual IT as Artificial Intelligence, IOT, data solution to avail MAFWR’s services by various
components correspond to a specific analytics, drones, facial recognition, means in an integrated and coordinated
functional objective of the organization. etc. way. End users can make selections
This also ensures that all the aspects of according to their specific needs and
MAFWR are considered while designing circumstances to receive consistent
the system outcomes across channels. The result will be
easy accessibility of MAFWR service and an
increase in user satisfaction

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 10

To Be Solution Architecture Design Principles, cont.

7 Ease of Use 8 Seamless Integration 9 Government Initiatives

Emphasis must be given to make the Enterprise Service Bus facilitates Capabilities fully utilize the investments
applications interfaces standardized seamless integration between the made by the Government through the
and seamless for the users (with easy solution components and the numerous implementation of national initiatives
navigability and guided usage dependent applications across various (IT Solutions and Platforms) and
provisions). API interfaces used for ministries and other entities. ESB can integrate it with MAFWR’s solution
exposing functionality to third parties reduce time to launch new application through two-way integration and with
should also follow the principle of ease integrations internally and externally the concept of co-existence between
of use, with focus on customer journey these multiple technologies to deliver
and experience MAFWR’s business objectives

10 Cloud-First Policy 11 Security of Information 12 Business continuity

Adopting a cloud-first policy (as part of Ensure utmost integrity of the Reliability of the MAFWR’s solution is an
MTCIT standards) to utilize the latest information stored and exchanged in the important consideration throughout it’s
technologies for hosting the proposed MAFWR’s digital solution. Government design and operations. Where required,
solution. The cloud hosting service data should reside in secure cloud critical business functions must be provided
provider can offer end-to-end services to environment which is hosted in with the capability to continue regardless of
the Ministry and reduce their efforts in authorized / certified cloud service external events, such as but not limited to;
managing their solution on-premises providers. Design and deploy security hardware failure, electricity / power
components considering the privacy and disruption, connectivity issues, or data
confidentiality requirements corruption etc.

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 11

 Section 3

MAFWR Systems Future

Direction

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 12

System Future Direction
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ eServices Portal   
▪ eServices Application  
▪ GIS   
▪ Online Examination   
▪ Site Visits   
▪ Committee Management   
▪ Contract Management   
▪ Vehicle / Equipment Monitoring   
▪ Ministry Current Portal (My Office)    
▪ Water Resources License (Enjaz)   
▪ SOFA  
▪ Pesticide & Fertilizer Testing (WIP)  
▪ Food Security System (WIP)  
▪ Vessel Monitoring System  
▪ Fisheries Licensing   
▪ Soil & Water Test System   
▪ ePhyto (UN System)  
▪ LIMS  
▪ Fisheries Statistical System   
▪ CRM (WIP)  
▪ Tally (Food Security)   
▪ Hydrometric Monitoring Stations  

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 13

eServices Portal
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ eServices Portal   

General Data Migration

All data related to services and processes to be migrated from the
The proposed solution will be based on unified eServices portal for
existing systems to the new eServices Portal.
MAFWR. This portal will consolidate all services and processes
offered by the Ministry in a consolidated platform.
Below are the recommended minimum data migration points
Data Source System Destination System
(From) (To)
Agriculture & Fisheries MAFWR Current eServices Portal
Services and License Data Portal (My Office)
(All)
Integration Water Resources Services Water Resources eServices Portal
and License Data (All) License (Enjaz)
The portal will be integrated with internal and external systems as Fisheries Services and Fisheries Licensing eServices Portal
provided in the integration layer detail of the To Be Architecture. License Data (All)
Fisheries Statistics (All) Fisheries Statistical eServices Portal (Data
System Warehouse)
Services and Licenses Data CRM (WIP) eServices Portal
(All). Approximately 40
services

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 14

eServices Application
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ eServices Application  

General General, cont.

The proposed smart devices application is expected to be an extension to 5. Market prices for food products, livestock and fish
the eServices portal in which all services and information can be accessed. 6. GPS-based field mapping which allows beneficiaries to create and
Furthermore, the application is expected to have the following interactive manage digital maps of their fields, including boundaries, key
functions: landmarks, crops grown, livestock information, fish details,
production data, fertilizers used, pesticides used, etc.
1. All eServices and related information as provided in the portal 8. Create a knowledge management platform from the information
2. Notifications and alerts including weather forecasts available in the MAFWR digital platform and utilize Artificial
3. Interactive communication and technical support (based on Chatbot & intelligence and machine learning technologies to provide interactive
AI technologies) with beneficiaries based on their profile such as : and proactive services and information to the beneficiaries
▪ Voice chat capabilities 9. Farm management with tools for tracking expenses and income,
▪ Timely intervention & support creating work schedules, and managing inventory and equipment.
▪ general enquires
▪ Regulatory information and updates
▪ Technical Support including
▪ Types of crops to grow based on season and timing
▪ Soil & fertilizer recommendations
Data Migration
▪ Water need
▪ Farming techniques N/A
▪ Location based recommendation
▪ Educational resources on best practices for farming
and crop management
Integration
4. Interactive communities
• Providing interactive space for farmers, fishermen and
producers to collaborate and share knowledge The smart devices application is expected to be seamlessly
• Provide secure & trusted source of information integrated with the eServices portal and all internal and external
• Experts review and participation systems as provided in the integration layer detail of the To Be
Architecture.

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 15

GIS
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ GIS   

General Data Migration

All data related to GIS maps and information to be migrated to a
1. ArcGIS and Arcmap is used by water resources sector within
central GIS system at MAFWR. Access to be provided to all users from
MAFWR for exploration related activities. Arcmap connected to
all sectors
ArcGIS. The system is used for creating different types of maps,
spatial analysis, visualization, writing hydrological reports etc.
Below are the recommended minimum data migration points
2. With up-to-date data this can be used by all departments within
MAFWR to support in providing smart services to beneficiaries Data Source System Destination System
(From) (To)
GIS Data from other Other Systems in GIS
sources in MAFWR (All) MAFWR
Integration

Below are the recommended minimum integration points

Data Source System Destination System
GIS Data (Internal) GIS eService Portal
Outputs from Services and eServices Portal GIS
Processes
GIS Data (External) Other Government MAFWR GIS
Entities GIS

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 16

Online Examination
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Online Examination   

General Data Migration

All data related to medical examination to be migrated to the online
1. The proposed system is a secure online examination system. The
examination system. The data should also be available on the
main objective is to automate the veterinarian professional
eServices portal as part of the information provided to MAFWR users
examination.
and beneficiaries
2. Utilize latest technologies to conduct the examinations with
integrity and security.
Below are the recommended minimum data migration points
3. Ensure seamless experience for users to take exams remotely
with confidence Data Source System Destination System
4. Utilize Artificial Intelligence technology to automatically proctor (From) (To)
the examination where the system independently verifies Medical Examination Data Manual (Word, Excel, Online Examination
identity, monitors person’s behavior and gaze direction, and (All) Paper)
analyses sound in the room. The aim is to conduct online
examinations without (with minimum) human intervention.

Integration

Below are the recommended minimum integration points

Data Source System Destination System
Request for examination eServices Portal Online Examination
(including Service and
beneficiary details)
Examination Results Online Examination eServices Portal

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 17

Site Visits
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Site Visits   

General Data Migration

All data related to site visits and associated reports to be migrated to
1. The main objective of this system is to automate the site visit
the site visits system. The data should also be available on the
which are conducted by MAFWR’s employees at various
eServices portal as part of the information provided to the MAFWR
locations. Site visits are performed as part of delivering a service
users and beneficiaries
to beneficiaries or for inspection purposes.
Below are the recommended minimum data migration points
2. The proposed system is a mobile solution that includes the
capabilities of integrating with GIS maps, high accuracy GPS for Data Source System Destination System
geofencing and data collection, smart form data entry for (From) (To)
recording information about the site visit, IOT and Drones into a Site Visits information and Manual (Word, Excel, Site Visits
single app experience. reports (All) Paper)

Integration

Below are the recommended minimum integration points

Data Source System Destination System
Request for site visit eServices Portal Site Visits
(including Service and
beneficiary details)
Site Visit Results Site Visits eServices Portal
GIS Maps GIS Site Visits
Site Visits Field Data Site Visits GIS

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 18

Committee Management
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Committee Management   

General Data Migration

All data related to committee management to be migrated to the
1. The main objective of this system is to fully automate the
committee management system. The data should also be available
committee management processes and activities. This includes
on the eServices portal as part of the information provided to the
committee creation, assigning / changing members, integration
MAFWR users and beneficiaries (if required)
with eServices platform, committee meetings / agendas,
meeting notes / minutes, committee decisions, voting, etc.
Below are the recommended minimum data migration points
2. The committee management is expected to be a smart system
Data Source System Destination System
and utilizes latest technologies such as artificial intelligence and (From) (To)
machine learning. The aim is to fully automate the committee
decisions, and provide committee members with decision Committee information and Manual (Word, Excel, Site Visits
reports (All) Paper)
(approval / rejection) generated by the AI algorithm based on
previous historical data and trends

Integration

Below are the recommended minimum integration points

Data Source System Destination System
Request for committee eServices Portal Committee
approvals (including Service Management
and beneficiary details)
Committee Results Committee eServices Portal
Management

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 19

Contract Management
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Contract Management   

General Data Migration

All data related to contracts and associated reports to be migrated
1. The main objective of this system is to automate the contract
to the contract management system. The data should also be
management processes and documentation. These contract are
available on the eServices portal as part of the information provided
linked to services offered by MAFWR. The contracts can be for
to the MAFWR users and beneficiaries
different purposes such as lease, investment, contracting,
supply, etc.
Below are the recommended minimum data migration points
2. The contract management is expected to be a smart system in
Data Source System Destination System
which information can be stored and exchanged such as (From) (To)
integration with eServices portal for service and beneficiary
details, contract terms, payment terms, contract changes, sub- Contracts Data (All) Manual (Word, Excel, Contract Management
Paper)
leasing, integration with GIS, etc.

Integration
Below are the recommended minimum integration points
Data Source System Destination System
Request for contract creation eServices Portal Contract
(including Service and Management
beneficiary details)
Contract Details Contract eServices Portal
Management
Contract Details Contract GIS
Management

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 20

Vehicle / Equipment Monitoring
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Vehicle / Equipment Monitoring   

General Data Migration

All data related to vehicles to be migrated to the system. The data
1. The main objective of this system is to monitor and track the
should also be available on the eServices portal as part of the
authorized vehicles and equipment's used by the contractors
information provided to the MAFWR users and beneficiaries
2. The registration of such vehicles and equipment is obtained
Below are the recommended minimum data migration points
through MAFWR eServices portal

Data Source System Destination System

(From) (To)
Vehicle Information (All) Manual (Word, Excel, Vehicle Monitoring
Paper)

Integration

Below are the recommended minimum integration points

Data Source System Destination System
Request for installing vehicle eServices Portal Vehicle Monitoring
monitoring (including Service
and beneficiary details)
Vehicle Monitoring details Vehicle Monitoring eServices Portal
Vehicle Monitoring details Vehicle Monitoring GIS

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 21

Ministry Current Portal (My Office)
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Ministry Current Portal (My Office)    

General Data Migration

1. The Current MAFWR Maktabi system contains the current eServices All data related to Agriculture and Fisheries services and licenses to
Portal and other functionality be migrated to the eServices Portal. The data should also be
2. The current Maktabi system to keep the admin functionalities as a available on the eServices portal as part of the information provided
transition period until the national initiatives are implemented. to the MAFWR users and beneficiaries. Below are the recommended
Specifically, the following: minimum data migration points
• Correspondence System (to be replaced with Wosool)
Data Source System Destination System
• HRMS Management (to be replaced with Mawred Plus) (From) (To)
• Recruitment Management (to be replaced with Mawred
Plus) Agriculture & Fisheries MAFWR Current eServices Portal
Services and License Data Portal (My Office)
• Admin Management (All)
• Inventory Management
• Finance Management (to be replaced with Maliya) Correspondence & MAFWR Current Wosool Portal
Document Data (All) System (My Office)
• Fleet Management
3. Other external services in MAFWR Maktabi system (Portal) to be HR & Payroll Data (All) MAFWR Current Mawred Plus
migrated into the new Unified eServices Portal System (My Office)
• Agricultural Card Issue Financial Data (All) MAFWR Current Maliya
• License Services System (My Office)
4. Until the implementation is completed, MAFWR will continue
working on this system.
Other
Integration
Decommissioning plan to be executed once the below aspects are
1. No further integration is expected to be developed unless critically completed and tested:
required by the business ▪ Services and functionality are available in destination systems
2. All existing integrations available in the current portal to be migrated ▪ Data migration is completed to destination systems
into the new eServices Portal ▪ Existing Integrations (if any) is moved to destination systems
3. Once the functionality and data is moved out of this system, the
current integrations (if any) must be closed
MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 22
Water Resources License (Enjaz)
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Water Resources License (Enjaz)   

General Data Migration

1. This system is an eService portal originally developed by Ministry All data related to Agriculture and Fisheries services and licenses to
of Interior (MOI). It caters for the water resources services only be migrated to the eServices Portal. The data should also be
available on the eServices portal as part of the information provided
2. Currently the system is being migrated from MOI to MAFWR and to the MAFWR users and beneficiaries.
will be hosted on cloud
Below are the recommended minimum data migration points
3. The objective is to consolidate all MAFWR external services
through a new unified eServices Portal. Data Source System Destination System
(From) (To)
Water Resources Services Water Resources eServices Portal
and License Data (All) License (Enjaz)

Integration Other

1. No further integration is expected to be developed unless Decommissioning plan to be executed once the below aspects are
critically required by the business completed and tested:
2. All existing integrations available in the current portal to be ▪ Services and functionality are available in eService portal
migrated into the new eServices Portal ▪ Data migration is completed to eService portal
3. Once the functionality and data is moved out of this system, the ▪ Existing Integrations (if any) is moved to eService portal
current integrations (if any) must be closed

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 23

SOFA
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ SOFA  

General Data Migration

N/A
1. SOFA is used to trade live fish products in the central wholesale
fish market

2. SOFA is currently used in the Central Fish Market in Barka.

Rollout to other markets is in processes

Integration

Below are the recommended minimum integration points

Data Source System Destination System
Fish market related service eServices Portal SOFA
details
Production and sales data SOFA eServices Portal

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 24

Pesticide & Fertilizer Testing (WIP)
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Pesticide & Fertilizer Testing (WIP)  

General Data Migration

N/A
1. Pesticides & Fertilizer system is used for generating Pesticide,
Fertilizer and lab test certificates.

2. The system is being used by agriculture department employees, all

companies and labs authorized by Ministry.

3. Food security system / module is planned to be as an extension to

this system.

4. All services related to requesting lab test and results will be applied
through the new eService portal with integration to this system.

Integration

Below are the recommended minimum integration points

Data Source System Destination System
Request for lab tests and eServices Portal Pesticide & Fertilizer
certificates (including Service Testing
and beneficiary details)
Lab test results and Pesticide & Fertilizer eServices Portal
certificates Testing
Lab test results and Pesticide & Fertilizer GIS
certificates Testing
MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 25
Food Security System (WIP)
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Food Security System (WIP)  

General Data Migration

N/A
1. Food security system / module is planned to be as an extension to
Pesticide & Fertilizer Testing (WIP).

Integration

All integrations provided in Pesticide & Fertilizer Testing (WIP) will

also be applicable to this system as it will be an extension.

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 26

Vessel Monitoring System
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Vessel Monitoring System  

General Data Migration

N/A
1. Vessel Monitoring System (VMS) for Fishing Vessels & Boats. VMS
aims to support Ministry role of regulating, managing and
controlling the fishing fleet in Omani waters and implementing
laws and legislations regulating fishing in a way that guarantees the
sustainability of fish resources.

Integration

Below are the recommended minimum integration points

Data Source System Destination System
Fisheries sector services and eServices Portal Vessel Monitoring
license details System

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 27

Fisheries Licensing
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Fisheries Licensing   

General Data Migration

All data related to services and processes to be migrated from the
1. The system is originally developed for fishing related licenses.
existing systems to the new eServices Portal.
Most of the processes are moved to Ministry Portal.
Below are the recommended minimum data migration points
2. Currently system is used for commercial vessels license issue,
renewal, cancellation and transfer only. This includes all vessels Data Source System Destination System
such as commercial vessels, coastal & dhow vessels and small- (From) (To)
scale fishing boats. Fisheries sector Services Fisheries Licensing eServices Portal
and License Data (All)
3. All fisheries sector service including license will be available
through the new eServices portal

Integration
Other
1. No integration is expected to be developed
2. Once the functionality and data is moved out of this system, the
Decommissioning plan to be executed once the below aspects are
current integrations (if any) must be closed
completed and tested:
▪ Services and functionality are available in eService portal
▪ Data migration is completed to eService portal
▪ Existing Integrations (if any) is moved to eService portal

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 28

Soil & Water Test System
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Soil & Water Test System   

General Data Migration

All data related to lab tests and certificates to be migrated to the
1. The system is developed inhouse to capture the test results of soil
LIMS or Pesticide & Fertilizer Testing (WIP). The data should also be
and Water. This is a standalone system used only in Barka office
available on the eServices portal as part of the information provided
with no integration to other systems
to the MAFWR users and beneficiaries.
2. All services related to requesting lab test and results will be
Below are the recommended minimum data migration points
applied through the new eService portal with integration to this
system. Data Source System Destination System
(From) (To)
3. The functionality of this system to be replaced with LIMS or
Lab test results and Soil & Water Test LIMS or Pesticide &
Pesticide & Fertilizer Testing (WIP) certificates data (All) System Fertilizer Testing (WIP)

Integration
Other
1. No integration is expected to be developed
2. Once the functionality and data is moved out of this system, the
Decommissioning plan to be executed once the below aspects are
current integrations (if any) must be closed
completed and tested:
▪ Services and functionality are available in eService portal
▪ Data migration is completed to eService portal
▪ Existing Integrations (if any) is moved to eService portal

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 29

ePhyto (UN System)
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ ePhyto (UN System)  

General Data Migration

N/A
1. ePhyto is short for “electronic phytosanitary certificate”. The IPPC
ePhyto Solution is a tool that transition paper phytosanitary
certificate information into a digital phytosanitary certificate or
“ePhyto”. This electronic exchange between countries makes trade
safer, faster and cheaper.

2. The Omani National Plant Protection Organization (NPPO) is using

the ePhyto system in the User Acceptance environment through the
Generic ePhyto National System (GeNS) and intends eventually to
access through the Omani national system.

Integration

Below are the recommended minimum integration points

Data Source System Destination System
License / certificate for eServices Portal ePhyto
exporting / re-exporting
agriculture products details

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 30

LIMS
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ LIMS  

General Data Migration

N/A
1. Laboratory Information Management System (LIMS) is used FSQC,
Fisheries and Animal Health Control departments within the
Ministry.

2. LIMS currently is being upgraded to latest version. Currently users

are using old LIMS

3. All services related to requesting lab test and results will be applied
through the new eService portal with integration to this system.

Integration

Below are the recommended minimum integration points

Data Source System Destination System
Request for lab tests and eServices Portal LIMS
certificates (including Service
and beneficiary details)
Lab test results and LIMS eServices Portal
certificates
Lab test results and LIMS GIS
certificates
MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 31
Fisheries Statistical System
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Fisheries Statistical System   

General Data Migration

All data related to services and processes to be migrated from the
1. Statistical system captures fish statistical information from
existing systems to the new eServices Portal.
landing ports in case of traditional vessels. ~98% of the data is
collected this way. Info from coastal and industrial fleets are also
Below are the recommended minimum data migration points
captured in this.
Data Source System Destination System
2. The statistical data is shared by statistics department for planning, (From) (To)
NCSI etc. Statistical Data (All) Fisheries Statistical eServices Portal
System
3. This system is expected to be replaced by the reporting, analytics
and business intelligence technologies in the new eServices
Portal, including integration with NCSI for statistical data
exchange

Integration Other

1. No integration is expected to be developed Decommissioning plan to be executed once the below aspects are
2. Once the functionality and data is moved out of this system, the completed and tested:
current integrations (if any) must be closed ▪ Services and functionality are available in eService portal
▪ Data migration is completed to eService portal
▪ Existing Integrations (if any) is moved to eService portal

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 32

CRM (WIP)
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ CRM (WIP)  

General Data Migration

All data related to services and processes to be migrated from the
1. CRM is currently being implemented at MAFWR
existing systems to the new eServices Portal.
2. CRM will include 40 services as follows:
Below are the recommended minimum data migration points
1. 17 Services from sectors
2. 16 services related to agriculture sector grievance Data Source System Destination System
3. 7 services related to water resources grievance (From) (To)
All Sectors Services and CRM eServices Portal
3. The CRM will be used during the transition period until the unified License Data (All)
eSerivce portal is implemented Agriculture Sector CRM eServices Portal
Grievance Date (All)
4. Data migration into the new Unified eServices platform is required
Water Resources Sector CRM eServices Portal
Grievance Date (All)

Integration Other

1. No integration is expected to be developed Decommissioning plan to be executed once the below aspects are
2. Once the functionality and data is moved out of this system, the completed and tested:
current integrations (if any) must be closed ▪ Services and functionality are available in eService portal
▪ Data migration is completed to eService portal
▪ Existing Integrations (if any) is moved to eService portal

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 33

Tally (Food Security)
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Tally (Food Security)   

General Data Migration

All data related to services and processes to be migrated from the
1. Tally is implemented in the Food Security Sector only
existing systems to the MOF System (Maliya) which is part of the
2. Tally is currently used in HQ and the five stores (Rusayl, Salalah,
National Government Initiates.
Sohar, Nizwa and Al Kamil) send vouchers to HQ for data entry
3. It’s used for carrying out the functions of purchasing, payable
Below are the recommended minimum data migration points
invoice, payments, receiving of goods in stores, issuing good
from store, transferring goods between stores, repacking of Data Source System Destination System
goods for changing weights, managing rotation of goods (milk, (From) (To)
tea and oil), sale of goods (rice, sugar and lentil), receipt against
Financial Data (All) Tally MOF System (Maliya)
sale, journals, reports etc.
4. Tally can be used during the transition period until the Unified Supply Chain Data (All) Tally MOF System (Maliya)
Financial System is implemented Sales Data (All) Tally MOF System (Maliya)
5. Alternatively, Food Security can use the finance and
procurement functions available in Maktabi during the transition
period until MOF system is ready to be used by MAFWR

Integration Other

1. No integration is expected to be developed Decommissioning plan to be executed once the below aspects are
2. Once the functionality and data is moved out of this system, the completed and tested:
current integrations (if any) must be closed ▪ Processes and functionality are available in Maliya
▪ Data migration is completed to Maliya
▪ Existing Integrations (if any) is moved to Maliya

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 34

Hydrometric Monitoring Stations
Merge / Data
System Name New Keep Stop Integration
Transfer Migration
▪ Hydrometric Monitoring Stations  

General Data Migration

N/A
1. This systems used to measure various hydrological parameters
such as streamflow, precipitation, water level in wells and wadis,
and other conditions.
2. The data is collected through monitoring stations which include
gauges, sensors, and data loggers. The data is transmitted to
central servers in which the MAFWR can analysis the data from
the web interface in their offices. Offline data transmission
capabilities are also available.
3. The objective is to integrated the data generated by these
systems into the MAFWR digital platform in order to use the data
(1) by employees for analysis and visualization (2) as inputs to
providing eServices and (3) as open data

Integration

Below are the recommended minimum integration points

Data Source System Destination System
Hydrometric data from the Hydrometric eServices Platform
Monitoring Stations Monitoring Stations (services, BI and GIS)

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 35

 Section 4

To Be Solution
Architecture

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 36

MAFWR Digital Solution Architecture
Cloud MAFWR Digital Solution Architecture Cloud
Presentation & Accessibility Layer Application Layer Data Layer Integration Layer

Users Core Systems Solution Enablers Integrated Data Internal

Repository Integration
MAFWR Citizens & eServices eServices Access &
Admin Mgt.
Employees Residents Portal Application User Mgt.
My Office ePhyto
SOAP
Private Sector Government Online GIS & Logs / Audit Solution /
Entities Entities Examination Geofencing Trail Monitoring REST
Operational Data Sofa Email
Committee Service Database Warehouse
Site Visits Cache Mgt.
Mgt. Monitoring Pesticide &
Channels File Store ETL Engine SMS
Fertilizer
Vehicle Job Search
MAFWR Web Portal Contract Mgt. Scheduling Engine
Monitoring Food
(Internal & External) Database Webservice LIMS
Adaptors Wrapper Security
Notification Service

Enterprise Service Bus

Smart Devices Support Systems & Alerts Catalogue Vessel Animal
Social Media
Apps Backup Open Data Monitoring Num. Chip
Content Reporting /
KPI & SLA SSO
Mgt. BI Hydrometric
Sanad Offices SMS Monitoring
Rule Workflow Agriculture Plants Stations
Configurator Mgt.
WhatsApp Email National Initiatives External
IT Services
QR Code GUP NSCP Agriculture Animals Integration
Mgt. MTCIT MTCIT
Wosool Mawred Plus Fisheries Government
NRAA MOL
Emerging Technologies Entities
Accessibility
Ejadah Esnad Water Resources
Facial Artificial MOL GTB
Intranet OGN Recognition Intelligence
Maliya Invest Easy Food Safety & Central
MOF MOCIIP Public
Internet & Satellite Quality Gov.
VPN Chatbots Integ. Companies
Mobile NW Imagery Bayan Amlak
ROP MOHUP Food Security Platform and Private
IOT & Smart Sector
Satellite Offline Drone PKI, OTP &
Connectivity Technologies Sensors ePayment
eSignature Marketing +40
Blockchain NFC Unified Call Entities
Center MTCIT

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 37

MAFWR Digital Solution Architecture
Presentation and Accessibility Layer

Presentation and Accessibility Layer

The presentation and accessibility layer provide a set of reusable components to

facilitate presenting, delivering and accessing the MAFWR services through multiple
channels. Below are the key areas covered in this layer:

Users of MAFWR Digital Solution

The proposed solution is expected to cater for the requirement of various users.
The users are internal MAFWR employees, and the external users are mainly the
beneficiaries from the services (individuals, private sector entities and government
entities).

Solution Channels
The proposed solution will be based on web portal and mobile platform. The portal
will serve as the first point of entry for all types of users that are looking for any
kind of information or services related to MAFWR. Other communication channels will be through MAFWR social media
accounts, as well as utilizing other technologies such as WhatsApp
Different functionalities shall be made available to different categories of end users (Chatbots), SMS and Emails for an interactive user experience.
– external and internal users. The proposed solution should have two portal
interfaces. Accessibility
The solution is expected to be highly available. Hence, the entire
The portal to be developed and designed from user experience perspective (user solution should be accessible through various networks and
centric design). The graphics, layout, text, and interactive elements should work in technologies. As well as being accessible in offline mode in case of
synergy to present the user with a great experience of the portal. The portal UIs online network disruption. Below are the accessibility components
need to be simple to navigate, easy to use, and created with the proper colors and for the solution availability:
fonts for the users and ensure consistency throughout the design. Overall design to
be aligned to the MAFWR brand. 1. Local internal network at MAFWR (Intranet)
2. Oman Government Network (OGN)
Native mobile platform will be available for accessing the information and services 3. Internet (Wifi) and other mobile networks
of MAFWR and the solution should be compatible for users to view the portal on 4. Satellite connectivity
smart devices. 5. VPN Tools for remote access
6. Working offline and automatic synchronization when the network
The solution is expected to be accessed through Sanad offices as an alternative is available
channel to provide the services to the beneficiaries.
MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 38
MAFWR Digital Solution Architecture
Application Layer

Application Layer

Below is a brief description of each of the core systems.

▪ eServices Portal: The MAFWR solution will be based on unified eServices portal
for MAFWR. This portal will consolidate all services and processes offered by the
Ministry in a consolidated platform. The services in the portal will be based on
the re-designed To Be services and processes.

▪ eServices Application: The proposed smart devices application is expected to

be an extension to the eServices portal in which all services and information can
be accessed. Furthermore, the application is expected to have the following
minimum interactive functions:
1. All eServices and related information as provided in the portal
2. Notifications and alerts including weather forecasts
3. Interactive communication and technical support (based on Chatbot & 5. Market prices for food products, livestock and fish
AI technologies) with beneficiaries based on their profile such as : 6. GPS-based field mapping which allows beneficiaries to create and
▪ Voice chat capabilities manage digital maps of their fields, including boundaries, key
▪ Timely intervention & support landmarks, crops grown, livestock information, fish details,
▪ general enquires production data, fertilizers used, pesticides used, etc.
▪ Regulatory information and updates 8. Create a knowledge management platform from the information
▪ Technical Support including available in the MAFWR digital platform and utilize Artificial
▪ Types of crops to grow based on season and timing intelligence and machine learning technologies to provide
▪ Soil & fertilizer recommendations interactive and proactive services and information to the
▪ Water need beneficiaries
▪ Farming techniques 9. Farm management with tools for tracking expenses and income,
▪ Location based recommendation creating work schedules, and managing inventory and
▪ Educational resources on best practices for farming and equipment.
crop management
4. Interactive communities
• Providing interactive space for farmers, fishermen and
producers to collaborate and share knowledge
• Provide secure & trusted source of information
• Experts review and participation
MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 39
MAFWR Digital Solution Architecture
Application Layer

Application Layer, cont.

Below is a brief description of each of the core systems.

▪ Online Examination: A secure online examination system. The main objective is

to automate the veterinarian professional examination and any other
examination requirements in MAFWR. The system would Utilize latest
technologies to conduct the examinations with integrity and security. Also,
Ensure seamless experience for users to take exams remotely with confidence.
Utilize Artificial Intelligence technology to automatically proctor the
examination where the system independently verifies identity, monitors
person’s behavior and gaze direction, and analyses sound in the room. The aim
is to conduct online examinations without (with minimum) human intervention.

▪ GIS & Geofencing: ArcGIS and Arcmap is used by water resources sector within
MAFWR for exploration related activities. Arcmap connected to ArcGIS. The ▪ Site Visit Management: This system will automate the site visits
system is used for creating different types of maps, spatial analysis, which are conducted by MAFWR’s employees at various locations.
visualization, writing hydrological reports etc. With integration and up-to-date Site visits are performed as part of delivering a service to
data GIS will be used by all departments within MAFWR to provide smart services beneficiaries or for inspection purposes. The system is a mobile
to beneficiaries. Geofencing will be used to create a virtual boundary around a solution that includes the capabilities of integrating with GIS
specific geographic location. This will be used to trigger specific actions or maps, high accuracy GPS for geofencing and data collection, smart
events when a device enters or exits the defined boundary. The objective is to form data entry for recording information about the site visit, IOT
improve the user experience by delivering location-based services to the and Drones into a single app experience.
MAFWR’s service beneficiaries. GIS maps will be used internally for the MAFWR’s
employees as well as make these maps available as part of the open data.

▪ Committee Management: The main objective of this system is to fully automate

the committee management processes and activities. This includes committee
creation, assigning / changing members, integration with eServices platform,
committee meetings / agendas, meeting notes / minutes, committee decisions,
voting, etc. The committee management is a smart system which utilizes latest
technologies such as artificial intelligence and machine learning. The aim is to
fully automate the committee decisions and provide committee members with
decision (approval / rejection) generated by the AI algorithm based on previous
historical data and trends. MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 40
MAFWR Digital Solution Architecture
Application Layer

Application Layer, cont.

Below is a brief description of each of the core systems.

▪ Vehicle Monitoring: The objective of this system is to monitor and track the
authorized vehicles and equipment's used by the contractors. The registration
of such vehicles and equipment is obtained through MAFWR eServices portal.

▪ Contract Management: This system will automate the contract management

processes and documentation. These contract are linked to services offered by
MAFWR. The contracts can be for different purposes such as lease, investment,
contracting, supply, etc. The contract management system is a smart system in
which information can be stored and exchanged such as integration with
eServices portal for service and beneficiary details, contract terms, payment
terms, contract changes, sub-leasing, integration with GIS, etc.

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 41

MAFWR Digital Solution Architecture
Application Layer

Application Layer, cont.

Below is a brief description of each of these enablers.

Solution Enablers

▪ Access & User Management: Automated tool to manage and control access to
an MAFWR’s systems, applications, and data. It is designed to ensure that only
authorized users have access to the resources they need to perform their job
functions or deliver MAFWR’s eServices.

▪ Admin Management: Module which provides the necessary tools and

functionality for managing, configuring, and maintaining the MAFWR’s digital
solution and ensuring its availability and performance. This tool enables the
system administrators to manage business and technical related aspects of the
solution. The essential elements include user management, system ▪ Service Monitoring: Automated tool to track and report on the usage
configuration, backup and restore, monitoring, and reporting of the MAFWR services. It is important for MAFWR eService solutions as
it enables efficient management and maintenance of the services
▪ Log / Audit Trail: Will be used to track and record the actions and changes offered, which in turn leads to a better user experience and customer
made to all the MAFWR systems, applications and data. It is designed to provide satisfaction.
a detailed record of who did what, when and where, as well as the before and
after states of the data. This will also be used for monitoring purposes, as well as ▪ Job Scheduling: Tools used to automate repetitive tasks, such as data
for troubleshooting, problem resolution and detailed analysis. backups, system updates, and report generation. Job scheduling can
also be used to manage the execution of complex workflows, such as
▪ Solution Monitoring: Automated tool to monitoring and analyzing the those involving multiple systems or applications. This feature can help
performance, availability, and security of MAFWR digital solution. It is designed increase efficiency and reduce the need for manual intervention.
to ensure that digital solutions are functioning as intended, that they meet the
needs of the users, and that they are secure from cyber threats. It will be used ▪ Search Engine: Automated tool to allow users to enter keywords or
for real-time performance monitoring, alerting, and reporting. phrases to retrieve relevant results. This is used to search for specific
services, documents, or other information stored within the MAFWR
▪ Cache Management: Automated tool to improve the performance of the solution. Supports in improve the user experience by making it easy to
MAFWR’s solution by reducing the amount of time it takes to access data. This find the information they need and can also be used to optimize the
significantly speed up the performance of the system, as it reduces the amount performance of the system by reducing the time it takes to find the
of time spent accessing data from slower storage. desired information.
MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 42
MAFWR Digital Solution Architecture
Application Layer

Application Layer, cont.

Below is a brief description of each of these enablers.

Solution Enablers, cont.

▪ Notification and Alerts: Automated tool to allow MAFWR users and eService
beneficiaries to receive real-time notifications and alerts about specific events
based on pre-defined system configurations. This is user configured engine
which send notifications via email, text message, or push notifications. This help
increase efficiency by making sure that users are aware of important events in a
timely manner and can also help improve the customer experience by providing
real-time updates.

▪ Service Catalogue: Automated tool that allows eService beneficiaries to search

for and access a MAFWR online services. The service catalogue can be organized ▪ Single-Sign-On (SSO): Allows users to access multiple
into different categories or sections based on MAFWR’s requirements. The applications or services using a single set of login credentials. This
service catalogue detailed information about each of MAFWR eServices, such as is used to simplify the process of logging into multiple systems.
eligibility requirements, fees, and how to access the service, delivery channels, SSO eliminates the need for users to remember multiple
processing time, etc. The aim to improve the user experience by providing a usernames and passwords and can also help to increase security
centralized, easy-to-use portal for accessing a wide range of services and can by reducing the number of login credentials that need to be
also help increase efficiency by reducing the need for eService beneficiaries to managed.
navigate multiple pages to access the services they need.

▪ KPI and SLA: Automated tool that will be used to monitor and measure the
performance of the MAFWR eServices. It will track and measure a wide range of
metrics such as response time, uptime, and user satisfaction. KPI and SLA will be
configured based on MAFWR requirements with the ability to modify and update
these performance measures to set targets or thresholds for each metric and
can generate reports and alerts when performance falls below these targets.
This will ensure that the MAFWR eServices are meeting the expectations of the
beneficiaries and also help in identifying areas for improvements.

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 43

MAFWR Digital Solution Architecture
Application Layer

Application Layer, cont.

Support Systems

Below is a brief description of each of these support systems.

▪ Enterprise Content Management (ECM): system to manage, store, preserve,

and deliver content and documents related MAFWR’s digital platform. Typically
features include attachment management and storing, document management,
records management, workflow, and imaging. The system is expected to be
used across all modules as a central platform integrating with all systems and
providing secure access to content for authorized users.

▪ Reporting / Business Intelligence (BI): System to collect, integrate, analyze,

and present MAFWR data and information. BI will support MAFWR to visualize its
data and make more informed decisions by providing them with accurate, ▪ Quick Response Code (QR): This tool will be used to store and
relevant, and timely information about their services, customers, and quickly retrieve information related to MAFWR’s eServices. It will
performance. BI is expected to include data warehousing, reporting, be generated on all system generated documents, as a tool to
visualization, analytics, and dashboards. The system should be fully integrated validate the contents of the documents. QR codes can be
with all the systems and components in the MAFWR digital platform customized with colors, logos, and other design elements based
on MAFWR’s brand standards
▪ Rule Configurator: An automated tool that allows the creation, management
and execution of business rules related to services offered by MAFWR. This tool
enables non-technical users to create and manage business rules and service
validation conditions. The tool provides an intuitive, user-friendly interface that
allows users to create rules using simple techniques. The rules created can be
easily configured, tested, and deployed without the need for coding or technical
expertise. The tool also allows for the monitoring and tracking of rule execution,
and provides an easy way to update, modify or delete rules as business needs
change. Once a rule is configured, it can be applied to one or more services on
the MAFWR’s digital platform

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 44

MAFWR Digital Solution Architecture
Application Layer

Application Layer, cont.

Support Systems, cont.

▪ Workflow Management: An automated tool that streamlines the flow of tasks,

information, and documents between different individuals, departments or
systems to deliver MAFWR’s eServices. It also improve the efficiency and
effectiveness of MAFWR eServices by providing a structured, automated way of
managing and tracking the movement of tasks and information. The tool
includes features such as task assignment, routing, and prioritization, process
monitoring and reporting, and task-level and process-level security. It also
allows for the creation of automated notifications, escalations, and approvals,
reducing the need for manual intervention. Workflow definition and
management can be created and updated by non-technical users.

▪ IT Service Management Automated tool that includes incident management,

problem management, change management, and configuration management. It
allows IT teams to manage and prioritize incidents, track and resolve problems,
plan and implement changes to IT services, and manage the configurations of IT
assets. It also allows IT teams to measure and report on the performance of IT
services and to identify areas for improvement. It will be used as an IT helpdesk
tool for the MAFWR digital platform

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 45

MAFWR Digital Solution Architecture
Application Layer

Application Layer, cont.

National Initiatives
These are central government systems which are centrally implemented by the
respective organization. All government entities in the Sultanate are expected to
implement them within their organizations. MAFWR is expected to adapt all of
these national initiatives as and when they are ready to be implemented at MAFWR
and replace existing MAFWR’s systems:

Below is a brief description of each of these initiatives.

▪ Government Unified Platform (GUP): The platform will be implemented and
managed centrally with the use of the latest advanced digital technologies and
will be used for providing all government services through unified channels to
allow citizens, residents, investors, and visitors to utilize the government
services more effectively, efficiently, and securely. Ultimately, once fully
implemented, this platform will replace the MAFWR’s external portal, as all ▪ HRMS (Mawred Plus): This system is the central human resources
MAFWR will be hosted on the GUP. There will be two-way integration between and payroll system centrally implemented and managed by the
the GUP and MAFWR’s digital solution Ministry of Labor (MOL). The system managed all the government
employees information and services across the employee lifecycle.
▪ National Suggestions and Complaints Platform (NSCP): This unified national MAFWR is one of the entities which will roll-out Mawred plus. Once
digital platform will be implemented and managed centrally with the use of the fully implemented, it is expected to replace the existing HR system
latest advanced digital technologies and will be used for receiving all kinds of at MAFWR.
suggestions, feedback, enquiries and complaints submitted to the government.
It will allow the citizen / resident / investor / visitor to participate in continuous ▪ Government Performance Management System (Ejadah): This
improvement and development of government performance by submitting the system is the central performance management system for the
suggestion / feedback / complaint via the platform 24/7. This platform is government entities. The system covers individual and
expected to cover all suggestions and complaints related to MAFWR’s services organizational performance appraisal. Also, Ejadah covers the
with tight two-way integration. service performance through customer satisfaction surveys and
other means. MAFWR it is expected use Ejadah to measure the
▪ Electronic Document and Records Management System (Wosool): This performance of its external services to all types of beneficiaries
system is the central document management and correspondence system and use the feedback to continuously improve its services.
implemented centrally implemented and managed by the National records and
Archives Authority (NRAA). MAFWR is one of the entities which will roll-out
Wosool. Once fully implemented at MAFWR, it is expected to replace the existing
document and correspondence systems at MAFWR MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 46
MAFWR Digital Solution Architecture
Application Layer

Application Layer, cont.

National Initiatives, cont.

▪ Government eTendering Platform (Esnad): This platform is the central
procurement portal for the government entities. All MAFWR procurement is
currently through this portal. There will be two-way integration between the
Esnad and MAFWR’s digital solution

▪ Government Financial System (Maliya): A modern electronic system for

managing the Government public finance. Modules included are budget,
commitment, payments, revenue, treasury, fixed assets and reporting. Once
fully implemented at MAFWR, it is expected to replace the existing finance
system at MAFWR

▪ Invest Easy: This is the Government central system to manage the commercial
registration and trade license in the Sultanate. Currently, some of MAFWR’s ▪ PKI, OTP and eSignature: A national initiative that sets the
services related to companies (G2B) are provided through Invest Easy. These infrastructure needed for all government entities to provide
services will continue being offered by Invest Easy with integration to MAFWR’s eServices in Oman. It is employed in order to enable online
digital platform for exchange of information and business intelligence transactions for citizens and to raise the level of security and
authenticity of electronic paperwork. PKI provides five main
▪ Bayan: This is the Government central system to manage custom operations. services Authentication, Electronic Signature, Encryption, Email
Currently, some of MAFWR’s services related to imports are provided through Encryption and Email signature. OTP is also considered as
Bayan. These services will continue being offered by Bayan with integration to alternative / complementary service to be used for further
MAFWR’s digital platform for exchange of information and business intelligence authentication for certain services offered by MAFWR

▪ Amlak: This is the Government central system to manage housing services. ▪ Unified Call Center: The platform will be implemented and
Currently, some of MAFWR’s services related to agriculture land usage is through managed centrally with the use of the latest advanced digital
Amlak. These services will continue being offered by Amlak with integration to technologies. The objective is to unify the call center functional in
MAFWR’s digital platform for exchange of information and business intelligence all Government entities through this platform. Once implemented,
MAFWR will be using this platform as their tool for all call center
▪ ePayment: This is a national initiative to provide online payment services for all related processes
government eServices. These payment platforms are provided by various banks
operating in the Sultanate. These platforms must comply with MTCIT standards
and regulations related to online payments and transactions
MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 47
MAFWR Digital Solution Architecture
Application Layer

Application Layer, cont.

Below is a brief description of each of these emerging technologies.

Emerging Technologies

▪ Artificial Intelligence (AI): AI is expected to be used in most of the services

offered by MAFWR. The use of AI will be within various use cases. It will be used
in delivering the eServices to automate the validation and support MAFWR users
to make better decisions during the service delivery. AI is also expected to be
used in the smart devices application, chatbots and other core systems with the
MAFWR’s digital solution.

▪ Facial Recognition: This technology will be used as an alternative method to

authenticate a beneficiary or user's identity and provide secure access to
services, in a contactless manner, providing a more convenient and safer ▪ IOT and Smart Sensors: This technology will be used to collect
experience. data from the field and transmit it to a central hub for analysis
using AI technologies. This collected data to be linked to GIS to
▪ Chatbots: This technology is based on AI. It is used to provide automated and create accurate and up-to-date visualizations of the actual
interactive responses to beneficiaries. Chatbots also includes machine learning environment at the field, which can be used to for enhanced
(ML) techniques in order to build the knowledge based and use it through the decision-making. The inputs from IOT and Smart sensors to be
automated responses. Chatbots will be fully integrated with the MAFWR’s digital fully integrated with the MAFWR’s digital solution.
solution to provide 24/7 services to MAFWR’s online visitors and service
beneficiaries.

▪ Satellite Imagery: Satellite imagery technology will be used as one of the

methods to create detailed GIS maps and visualizations of land plots and sea
areas. This is also integrated with the eService delivery in which this information
will be used to validate and approve certain services. Linking to GIS, will provide
analysis of different layers based on the data captured in the satellite images
which allows for more accurate and efficient decision making.

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 48

MAFWR Digital Solution Architecture
Application Layer

Application Layer, cont.

Below is a brief description of each of these emerging technologies.

Emerging Technologies, cont.

▪ Blockchain: This technology uses decentralized and secure way to store and
share data across a network of computers. It uses cryptography to ensure that
data cannot be tampered with or altered once it has been recorded on the
blockchain. It is an alternative way to provide secure and transparent record-
keeping of all the official documents issued by the MAFWR’s digital platform.

▪ Near-field communication (NFC) Cards: These cards NFC use a short-range

wireless communication technology to allow two devices, such as a card and a
reader, to exchange data when they are brought close together. The card itself
can store information about the beneficiaries and related MAFWR’s services.
This is an alternative technology to be provide secure and convenient method to
share information.

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 49

MAFWR Digital Solution Architecture
Data Layer

Data Layer

Operational Database
Data stores are needed to facilitate data integration by integrating data from
different sources in a single data structure and to support operational processing,
reporting and analysis needs.

Also, operational data stores could be used to alleviate high transaction volumes
and/or extensive data transformation requirements.

Technology, application, and database adapters are needed to facilitate

integration with other applications, technologies, and databases by converting
requests and application data into the native language of the interfacing end.

ETL Engine
ETL is a data integration process that includes data extraction, transformation, and Backup
loading. ETL tool is expected to take large volumes of raw data from multiple Protecting data against loss, corruption, disasters (human-caused or
sources, convert them for analysis, and load that data into the data warehouse. natural) and other problems is a key component of this layer.
Solution should be able to accommodate various types of backups
such as full backups, Incremental backups, etc.
Data Warehouse
Central data repository that integrates data and information collected from various Database Adapters
sources into one comprehensive database. ETL engine will be used as the primary The database adaptor will have support for different adapters
input for the data warehouse . covering:
▪ Database adapters (for Oracle, SQL Server, DB2, MySQL,
Open Data PostgreSQL, etc.)
The digital platform is expected to provide data that is freely available for anyone ▪ Technology adapter (such as LDAP, EJB, JMS, MQ Series, TCP/IP,
to access, use, and share. This can be used as a tool to increase government SMPP, SMTP, etc.)
services transparency. This can help citizens make informed decisions and improve
their overall experience with the MAFWR platform. The portal is expected to Web Service Wrappers
provide open API’s as a self-service to anyone that would like to connect directly to Web service wrappers will enable the solution to wrap legacy
the available open data and link it to their websites or systems. applications / systems and expose them as web services to clients

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 50

MAFWR Digital Solution Architecture
Data Layer

MAFWR Services Hub

Food Safety &

Agriculture Plants Agriculture Animals Fisheries Water Resources Food Security Marketing
Quality

Possession Card Import Workers Water Wells Lab Test Food Products Investment Land

Investment
Import Export Boats Falaj Health Certificate Distribution Agent
Opportunities
Investment
Export Health Certificate Sea Ports Wadi Facility design
Contracts

Agriculture Land Quarantine Import Water Dams Food Product Card

Lab Test Lab Test Export Water Spring

Trade / Commercial
Pesticides Veterinary Clinics Watersheds
License
Veterinary
Fertilizers Production Support Contractors
Profession
Trade / Commercial Trade / Commercial
Hobby & Sports Monitoring Stations
License License

Research & Studies Research & Studies Certificates Technical Studies

Production Support Production Support

Heat Treatment Artificial

Unit Insemination

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 51

MAFWR Digital Solution Architecture
Integration Layer

Integration Layer

Enterprise Service Bus

Enterprise Service Bus (ESB) is a middleware platform which facilitates integration
within MAFWR’s systems and externally between MAFWR and other stakeholders.
An ESB provides a standardized and event-driven approach for messaging between
different systems

The core concept of the ESB architecture is to integrate different applications by

putting a communication bus between them and enable each application to talk to
the bus. This decouples systems from each other, allowing them to communicate
without dependency on or knowledge of other systems on the bus

ESB is also expected to manage the data which are received from external sources
and map based on MAFWR before pushing it into MAFWR’s solution
Integration for To Be Services / Processes
Integration with external entities is expected to be through the central government The integration requirements with external systems are as provided
integration platform as much as possible. Otherwise, MAFWR would integrate with in subsequent pages of this Section and in Section 8 of this document
other external entities directly under the integration matrix

The ESB is expected to act as a standardized integration platform which combines

messaging, web services, data transformation.

Integration with Internal System

The integration requirements with internal systems are as provided in Section 3 of
this document and as per the To Be process documentation

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 52

MAFWR Digital Solution Architecture
Conceptual Integration Diagram

MTCIT
External Entities MAFWR Digital Solution

MAFWR Internal and External Systems

Government Entities
MAFWR
MTCIT ESB
Integration
Platform
MAFWR ESB

Government Companies

MAFWR Internal and External Systems

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 53

MAFWR Digital Solution Architecture
Detailed Integration Diagram
Government Entities Government Companies / Private Sector

MOCSY Oman Credit & Fin.

OCCI CPA TRA MOEM MOHT MOSD MOERA Nama / Diam ODP Info. Centre AlMadina
EA MOH Be'ah Asyad
Logistics

1 1 1 1
1 1 1 1 1 1 1 1
1 1 1 1
2 VMS 2
2 2 2
2 2 2 2

SME Authority 1
2

1
MOD

ROP National Initiatives

1
2
3
4 National Suggestion &
PACDA Complaints Platform Vision 2040
1 2040
– 2 NSCP

MTCIT ESB GUP

MOCIIP 1
2 GUP
3
MTCIT
1
2 PKI
MOHUP 3
4 PKI
5
6

1 ePayment
2

MTCIT ESB
MTCIT ESB

MOI 3 MAFWR Digital Solution ePayment

3
4
5
HR Management System
1
Muscat 2 Mawred Plus
MOL
Municipality 3
3
4 Performance Management
1
System
2 Ejada
Dhofar 3
Municipality 3
4
MTCIT ESB Document & Archival System NRAA
1
2
Wosool
Musandam 3
Municipality 3
4
Procurement Management Tender Board

1
Esnad
2
MOL 3

Finance Management MOF

1
2
Maliyah
AFDF
1
Development Budget
MOE
Management
MOCIIP ROP – DG Customs
SCJ MOHUP TBC

1
2

MOHESRI
1
Amlak InvestEasy Bayan

PASI
1
Partners in Providing the Service

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 54

MAFWR Digital Solution Architecture
Integration Layer

Category Entity Name National In-bound Integration Out-bound Integration

Initiative
Government Entity Royal Oman Police (ROP) (1) Personal Details (1) Fish Export Certificate
(2) Good Conduct from Central Fish Market
Certificate (2) Veterinarian License
(3) Vehicle Details (3) Approval / Rejection
(4) Incoming Custom Details on the Import
Declaration – Permits
Incomplete (4) Fish Export and Landing
(5) Incoming Custom Details
Declaration – Complete
(6) Custom HS Code

Government Entity Public Authority of Civil Defense & (1) Safety & Security License
Ambulance (PACDA)

Government Entity Ministry of Commerce, Industry & (1) Commercial Registration (1) Study Projects Related
Investment Promotion (MOCIIP) Details to Petrol Stations
(2) Commercial / Trade (2) Approval to Cancel
License Details Commercial Activities
(3) Certificate of Origin for for Contractors
GCC
(4) Contractor Details which
have water well drilling
commercial activity

Government Entity Oman Chamber of Commerce and (1) Membership Certificate

Industry (OCCI)

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 55

MAFWR Digital Solution Architecture
Integration Layer

National
Category Entity Name In-bound Integration Out-bound Integration
Initiative
Government Entity Ministry of Housing and Urban (1) Property Ownership (1) Water well details for
Planning (MOHUP) Details agriculture land
(2) Property area drawing (2) Water resources
(3) Usufruct contract information and study
(4) Investment Contract outcomes
(5) Government Land (3) Boundaries for falaj,
Details wadi, water dams and
(6) Approved property for high-risk areas
Agriculture Investment (4) Investor details (that has
(7) Legal basis / document obtained an usufruct
for seizing agricultural contract)
land (5) Approval / Rejection on
change the use of
agriculture land
(6) Building completion
certificate
(7) Details of land irrigated
by Falaj

Government Entity Ministry of Interior (MOI) (1) Wali Details

(2) Shaikh Details
(3) Rent Contracts
(4) Municipal License
(5) Health Certificate

Government Entity Muscat Municipality (MM) (1) Rent Contracts

(2) Municipal License
(3) Health Certificate

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 56

MAFWR Digital Solution Architecture
Integration Layer

National
Category Entity Name In-bound Integration Out-bound Integration
Initiative
Government Entity Dhofar Municipality (DM) (1) Rent Contracts
(2) Municipal License
(3) Health Certificate

Government Entity Musandam Municipality (1) Rent Contracts

(2) Municipal License
(3) Health Certificate

Government Entity Ministry of Labor (MOL) (1) Labor details under the (1) Registered Contractor
commercial activity (2) Registered Contractor
(2) Experience Details (Vet Equipment / Vehicles
Doctors) (3) Approval to cancel the
(3) Transfer for Vet doctor labor linked to
from one entity to contractor
another (4) No objection to bring Vet
(4) Employment contract Doctors
details (e.g., factory (5) Approved Vet Doctor
manager, pesticides license
expert, etc.)

Government Entity Ministry of Culture, Sports and Youth (1) Request for diving sport
(MOCSY) license

Government Entity Ministry of Energy & Minerals (MOEM) (1) Geological Maps (1) Backfill material
extraction License
(2) Project Studies
(crushers, quarries and
backfill)
MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 57
MAFWR Digital Solution Architecture
Integration Layer

National
Category Entity Name In-bound Integration Out-bound Integration
Initiative
Government Entity Ministry of Heritage and Tourism (1) Historical / Heritage (1) Tourism Project Studies
(MOHT) Locations and Details
(2) Approval to build green
houses

Government Entity Ministry of Social Development (1) Social Security

(MOSD) Beneficiary Details

Government Entity Ministry of Health (MOH) (1) Approval of infant / child

food items
(2) Health card details

Government Entity Ministry of Endowment & Religious (1) Endowment land details
Affairs (MOERA)

Government Entity Ministry of Defense (MOD) (1) Ministry Land Details (1) Details of basic food
(2) Retired employee details items quantity and
prices
(2) Details of arriving ships
to Maritime Security
Center

Government Entity Ministry of Higher Education, (1) Academic Qualification

Scientific Research and Innovation
(MOHESRI)

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 58

MAFWR Digital Solution Architecture
Integration Layer

National
Category Entity Name In-bound Integration Out-bound Integration
Initiative
Government Entity Ministry of Transport, (1) Main Roads Details (1) Road project studies
Communication and Information (2) Network &
technology (MTCIT) Communication Cables
(existing and projects
including maps)
including from
Telecommunication
companies
(3) Details of food product
shipments

Government Entity Agriculture & Fisheries Development (1) Details of contribution (1) Service details which
Fund (AFDF) paid to the fund had paid the fund
contribution

Government Entity Supreme Council of Judiciary (SCJ) (1) Power of Attorney

Details
(2) Sale contract details

Government Entity Public Authority of Social Insurance (1) Government Retired

(PASI) employee details

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 59

MAFWR Digital Solution Architecture
Integration Layer

National
Category Entity Name In-bound Integration Out-bound Integration
Initiative
Government Entity Environment Authority (EA) (1) Weather Conditions (1) Boundaries for falaj,
Details wadi, water dams and
(2) No Objections letter for high-risk areas
Export
(3) Approvals related to
agriculture license
(4) Environmental license
details

Government Entity Consumer Protection Authority (CPA) (1) Product price list
(2) Details of fines on agents

Government Entity SME Authority (1) Riyada card details

Government Entity Telecommunication Regulator (1) Approved VMS device

Authority (TRA) license

Government Entity Authority for Public Services (1) Public services projects (1) Boundaries for falaj,
Regulation (APSR) details including maps wadi, water dams and
high-risk areas

Government Entity National Center for Statistics and (1) People, residency and
Information establishment census

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 60

MAFWR Digital Solution Architecture
Integration Layer

National
Category Entity Name In-bound Integration Out-bound Integration
Initiative
Government Entity Ministry of Foreign Affairs (1) Organizing visits
between countries
Gov. Companies / Private AlMadina Logistics (1) Agriculture Import (1) Fish export certificate
Sector Shipment from land details from the central
ports fish market
(2) Applicant activity license
details (in logistics
cities)

Gov. Companies / Private Asyad - Duqum / Salalah Seaports (1) Details of food product (1) Details of ships entering
Sector shipments the seaport

Gov. Companies / Private Be'ah (1) Disposal certificate

Sector details

Gov. Companies / Private Nama / Diam (1) Water connection details

Sector and plans including
maps
(2) Electricity connection
details and plans
including maps
(3) Utility bills (electricity,
water, sewage)

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 61

MAFWR Digital Solution Architecture
Integration Layer

National
Category Entity Name In-bound Integration Out-bound Integration
Initiative
Gov. Companies / Private Oman Development Bank (ODB) (1) Financial clearance (1) Service and license
Sector certificate details details

Gov. Companies / Private Oman Credit & Fin. Info. Centre (1) Corporate Financial
Sector Solvency

Gov. Companies / Private Plate Printing Company (1) Water Resources

Sector Inventory Plate Data

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 62

 Section 5

To-Be Application
Technical Architecture

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 63

To Be Application Technical Architecture

Cloud Cloud

Design
Principles MAFWR Digital Platform

Servers Storage
Business
continuity
Operating System Database Storage
Cloning Data security
Replication

Availability Centralized De-

Auto- filtering
management duplication
Virtualization
Thin
Snapshots
Fault Network Provisioning
Scalability Consolidation
Tolerance Virtualization

Backup
High Load VM backup/
Availability Balancing recovery
Performance Short backup Faster
Live Resource Memory window recovery
Migration management optimization
Easy DR
Reduced Management Replication
TCO

Cloud Infrastructure Support Components

Portability
Licensing / Service Level Maintenance & Monitoring
Subscription Agreements Support Management

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 64

To Be Application Technical Architecture
Servers and Virtualization

MAFWR Digital Platform will be completely hosted through a certified cloud

service provider. The cloud services will also include the disaster recovery
requirements.

The proposed solution servers should be based on state-of-the art

technology supporting virtualization.

The virtualization technology to be adopted are detailed below.

▪ Consolidation: Increase server resource utilization, eliminate over-
provisioning and reduce the number of required hardware resources.
▪ High Availability: Servers and applications hosted are continuously
operational for a desirable long length of time, thereby the solution
servers and applications hosted would be highly available for the end
users
▪ Live Migration: Moving virtual machine from one physical host / storage
to another physical host / storage while continuously powered up; ▪ Dynamic Resource Management: Ensures that workloads are balanced
without any disruption to the services and without any noticeable effect for optimal performance by providing highly available resources to the
from the end user perspective workloads. Virtualization hosts are clustered to have a common pool of
resources dynamically available to the virtual machines on all the hosts
▪ Fault Tolerance: Ensures continuous availability of virtual machines in
added to the cluster
the event of a physical server hardware failure
▪ Memory Optimization: Ensures that each virtual machine gets the ▪ Network Function Virtualization: Network functions run in software
adequate memory, but without wasting memory and designed to consolidate and deliver the networking components
▪ VM Backup / Recovery: The adopted virtualization technology should needed to support a fully virtualized infrastructure
be capable enough to take backup of virtual machines and to do ▪ Load balancing: Aims to optimize resource use, maximize throughput,
recovery when required. This is in addition to the backup taken using minimize response time, and avoid overload of any single resource.
third party backup software

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 65

To Be Application Technical Architecture
Storage

The storage solution should be scalable in view of future enhancements and

growth of the MAFWR requirements. The storage solution should support
advanced high availability features with regard to storage and backup.

Following are the key features/components to be made available in the

storage solution:

▪ Storage replication: The storage LUNs at the hosting service provider

should be replicated to the storage available at the DR site to ensure
data redundancy and availability
▪ Auto-tiering: This would be an added feature for the storage, where the
data can be categorized based on certain criteria like access frequency.
Less frequently accessed data can be moved to inexpensive storage and
frequently accessed data can be kept on faster and efficient storage
Backup
▪ Cloning: A point-in-time image for the storage which can be used as a
backup or reference point for future use
▪ Disk to disk to tape backup: Data is backed up to backup storage
▪ Deduplication: The amount of storage space can be reduced by on a disk and then periodically copied again to the tape based on
eliminating the extra copies of data by saving just one copy of the data the requirement. Data transfer in disk backup is faster when
and replacing the other copies with pointers to the first copy compared to that of tapes. This benefits the application
▪ Snapshots: It is a point-in-time image of the storage which streamline infrastructure by shortening the backup window and speeding up
access to stored data and can speed up the process of data recovery the data recovery process.
▪ Thin Provisioning: In thin provisioning, storage space is allocated in a ▪ Replication to DR site: The data being backed up on to the disk
flexible manner from a common pool of storage thereby eliminating the which is the SAN storage needs to be replicated over to the SAN
need to install physical disk capacity that goes unused storage at the DR site through storage replication options. This
▪ Redundancy: Storage should be ready with additional spare disks, would ensure data redundancy and availability in the case of a
which can be used in case of any disk failure in the enclosure. Proper service disruption at the main housing site
monitoring needs to be implemented, to proactively identify any
hardware failure with the storage and to raise a ticket with the storage
vendor automatically. This would ensure that all the hardware issues are
fixed well in advance before a failure occurs

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 66

 Section 6

To-Be Application
Security Architecture

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 67

To Be Application Security Architecture

User Access Layer Other Entities

Web Portal Mobile Services
Integration

WebApp Web Services Mobile App Email App

Access layer HTTPS/TLS VPN/SSL Secure Gateway
Security Security Security Security (SMIME)

Access, Secured Web Services ESB Application Application

Applications Secure Web App
Authentication Session Security (WS- (Integration Integrity Logging and
Layer & Authorization Messaging Firewall
Mgmt Sec) ) Security Security Auditing

Sec Ops Database

Database Service Delivery Database Access Database Logging SOA Data
credentials Encryption /
Layer Databases Database
Controls and Auditing Services Security Masking

Application/ DB High Availability of applications High Availability of Synchronous data Authorization,

Infrastructure and Integration databases replication to DR Authentication

Authorization, Storage Encryption, Secured DR Host Based Email/Web Firewall/

Network, Server SIEM
Authentication Data Masking, & Backup Firewall Filtering DMZ
And Storage
Layer Content Filtering Storage Security

Data Loss Secure DR/ Security Incident Secure Network

IAM Services
Prevention Continuity Mgmt Services
IT Services
Layer SOA Security & Secured Patch Secured Config
Secured End-point
Governance Mgmt Mgmt

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 68

To Be Application Security Architecture
Access Layer

Purpose
Access layer facilitates the delivery of services to the end users. This layer
comprises of components that are directly exposed to internal and external
networks. Hence, it is imperative that a strong first line of security defense is
designed and implemented by design for the components within this player.

Common Threats
▪ Unauthorized access
▪ Session exploits
▪ Man-In-the middle attacks
▪ Web application attacks
▪ Intrusion attempts

Security Control Considerations

▪ Application logging and monitoring
▪ Secure Integration
▪ Web services security controls.
▪ Access authorization and authentication.
▪ VPN/SSL controls
▪ Application firewalls
▪ Session management
▪ Secure coding
▪ Mobile platform security

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 69

To Be Application Security Architecture
Application Layer

Purpose
The layer will comprise of the applications and database that enables,
processes the business logic and delivers the required application
functionality to enable or support business processes and services. Security
considerations within this layer focuses on protecting the applications and
integration services

Common Threats
▪ Data leakage
▪ Unauthorized access
▪ Session exploits
▪ Intrusion attempts
▪ Denial of Service attacks

Security Control Considerations

▪ Application logging and monitoring
▪ Access authentication and authorization
▪ Secure session management
▪ Secure Integration
▪ Application firewalls
▪ Web services security controls
▪ Access authorization and authentication
▪ Technical services (SOA) security
▪ Data services (SOA) security

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 70

To Be Application Security Architecture
Database Layer

Purpose
The most critical and sensitive layer across the infrastructure layer that is
used for creation, processing and storage of data for core business. Security
considerations for this layer include provision of multi-level security to
provide a robust security controls environment for the data that are stored
within the database

Common Threats
▪ Database software vulnerabilities
▪ Data unavailability
▪ Unauthorized access
▪ Unauthorized claim
▪ Data leak
▪ Data loss

Security Control Considerations

▪ Database access control mechanisms
▪ Database logging
▪ Database auditing
▪ Data masking and encryption
▪ Database firewalls
▪ Virtual private database
▪ Database and software hardening

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 71

To Be Application Security Architecture
Application and DB Infrastructure

Purpose
The layer will comprise the infrastructure of the applications and database
that enables, processes the business logic and delivers the required
application functionality to enable or support business processes and
services. Security considerations within this layer focuses on protecting the
applications servers, database servers and integration services

Common Threats
▪ Performance issues
▪ Non-scalable storage
▪ Exposure to malicious attacks from entities
▪ Application service unavailability
▪ Data service unavailability
▪ Unauthorized access
▪ Data Leak

Security Control Considerations

▪ High availability architecture
▪ Synchronous replication
▪ Secured and service-based application – database Integration
▪ Authentication and authorization
▪ Secure coding
▪ Application server software and operating system hardening
▪ Database server software and operating system hardening

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 72

To Be Application Security Architecture
Network, Server and Storage Layer

Purpose
Network, server and storage layer provides the core infrastructure to
support the hosting and security of business applications. Security
considerations within this layer focuses on protecting the network
infrastructure components such as hosting, distribution and perimeter
network devices

Common Threats
▪ Data loss and exposures
▪ Unauthorized access
▪ Exposure to malicious from entities
▪ Lack of redundancy

Security Control Considerations

▪ Authentication and authorization
▪ Firewalls
▪ Network intrusion detection system/prevention system (NIDS/NIPS)
▪ Host intrusion detection system/prevention system (HIDS/HIPS)
▪ Encryption and data masking
▪ Secure Configuration Management
▪ Content filtering
▪ Security Incident and Event Management
▪ Network infrastructure hardening

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 73

To Be Application Security Architecture
IT Services Layer

Purpose
IT services layer consists of the internal IT components that MAFWR solution
infrastructure uses. This layer primarily covers the security for internal IT and
Endpoints

Common Threats
▪ Data leakage
▪ Data loss
▪ Exposure to Malware entities
▪ System malfunctions due to configuration issues
▪ Unauthorized access
▪ IS Initiatives not aligned with business goals

Security Control Considerations

▪ Endpoint protection
▪ Antivirus and DLP Solutions
▪ Host Intrusion detection system (HIDS)
▪ Identity and access management
▪ Security DR operations
▪ Incident Management processes
▪ Patch management process
▪ Secure Configuration Management
▪ IS Governance controls

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 74

 Section 7

To Be
Technology Matrix

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 75

To Be Technology Matrix

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 76

 Section 8

To Be
Integration Matrix

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 77

To Be Integration Matrix

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 78

Entities Ranked by Number of Services
‫م‬ ‫م‬
21% 228 1
1% 7 22
19% 197 2
1% 7 23 8% 86 3
0% 4 24 6% 66 4
0% 4 25 5% 51 5
0% 4 26 4% 45 6
0% 3 27
4% 45 7
0% 2 28
4% 42 8
0% 2 29
4% 42 9
0% 2 30 3% 36 10
3% 34 11
0% 2 31
0% 2 32 2% 20 12
0% 2 33
2% 17 13
0% 2 34
2% 17 14
0% 1 35
0% 1 36 2% 16 15

0% 1 37 1% 15 16

0% 1 38 1% 15 17
1% 12 18
0% 1 39
1% 12 19
0% 1 40 1% 9 20
0% 1 41 1% 8 21

MAFWR Digital Transformation Project | To Be Solution Architecture Report | 9 Jan 2023 79