Reference Document: ISO22301

Release Date: May – 2024

Year:

Najran University adopts its responsibility towards protecting its assets, ensuring the continuity of its operational processes, and providing services at a high level of quality, in order to maintain the interests of all its stakeholders. These efforts fall within Saudi Arabia’s Vision 2030 for digital transformation and improving electronic services, which the university seeks to implement through establishing an executable plan to ensure the continuity and restoration of electronic services in case of disasters.

Najran University is committed to supporting efforts to monitor and restore operations in alternative facilities in the event of an unexpected disruption of work. The University and its senior administrations are working to develop and maintain an effective business continuity and recovery plan that aligns with ethical and regulatory standards, and aligns with its strategic and tactical objectives.

This plan aims to enhance the University’s philosophy of providing high-quality services to its students, faculty members, and staff, and ensuring the provision of a distinguished e-environment that supports the educational and administrative processes in an integrated manner.

The Office of Digital Transformation and Knowledge Sources was established with the aim of managing technological operations and electronic services in the university. Its vision is to enable Najran University to achieve leadership in the field of e-services through creating an integrated and distinguished information technology environment.

The College’s message lies in enhancing the services provided and offering a high-quality electronic environment, supported by information and communication technologies, in accordance with Saudi Arabia’s strategies to promote the concept of e-government.

The main objectives of the Digital Transformation Deanship and Knowledge Sources are:

  • Adopting best global practices and utilizing information systems and IT tools to increase administrative efficiency and improve organization, in addition to contributing to achieving the goals of e-government.
  • Enhancing the use of information technologies to support policies, operations, and procedures that increase accountability, transparency, and responsibility across all university departments.
  • Developing IT infrastructure and tools to support faculty members in improving educational quality and developing research.
  • Strengthening IT infrastructure and developing IT tools to support students and motivate them to achieve academic success.

2. Objective:

The Business Continuity Management System policy at the Digital Transformation Office and Knowledge Sources – Najran University aims to ensure the office’s ability to continue its critical activities during emergencies, crises, or disasters, or due to sudden business interruptions or outages.

It also aims to reduce downtime to an acceptable level for senior management performance, through adopting a flexible framework for implementing the system, while ensuring compliance with all legal, regulatory, contractual, and ethical requirements.

The implementation of the system is based on a framework approved by senior management, consistent with the requirements and standards of ISO 22301:2019.

3. Core Services of the Institution:

Referring to the service catalog provided by the Office.

4. Scope:

The system is applied to all services provided by the Office and listed in the service catalog, in accordance with the organizational structure approved at the time.

5. Restrictions and Exceptions:

There are none.

6. Objectives of the University Business Continuity Management System:

  • Design and develop a system to ensure business recovery and continuity, build capabilities and resilience to ensure the continuity of vital activities.
  • Provide the appropriate and necessary resources for establishing, documenting, implementing, reviewing, and improving the system.
  • To comply with providing training needs and guidance required for business continuity management readiness.
  • Manage incidents and respond to them efficiently to minimize impacts on resources, operations, and infrastructure.

7. Risk Levels:

7.1 Risk Level:

Determined according to the methodology contained in ISO 22301:2019 standard and the approved risk register.

7.2 Acceptable Risk Level:

As defined in the risk register and the approved assessment methodology.

8. Roles and Responsibilities:

Referring to the administrative decision issued by the Dean of Digital Transformation regarding the formation of a Business Continuity and Risk Committee.

9. Competencies:

The Dean is committed to supporting the System Manager through providing the competencies, training, and resources necessary.

Tests and Exercises:

Implemented based on a decision of the Business Continuity Committee approved by Senior Management.

11. Documentation:

Responsibility for documentation lies with the System Manager, Business Continuity Representatives, and the relevant committee, with periodic review and continuous improvement to ensure the effectiveness of the system.