Reference Document: ISO22301

Version Number: 1.0

Release Date: May – 2024

1. General:

Ngarran University adopts its responsibility towards protecting its assets, ensuring the continuity of its operational processes, and providing services at a high level of quality, in order to maintain the interests of all its stakeholders. These efforts fall within Saudi Arabia’s Vision 2030 for digital transformation and improving electronic services, which the university seeks to implement by establishing an executable plan to ensure the continuity and restoration of electronic services in case of disasters.

Najran University is committed to supporting efforts to follow up and restore operations in alternative facilities in the event of an unexpected interruption of work. The university and its senior administrations are working to develop and maintain an effective business continuity and recovery plan that aligns with ethical and regulatory standards, and with its strategic and tactical goals.

This plan aims to strengthen the university’s philosophy of providing high-quality services to its students, faculty, and staff, and ensuring the provision of a distinguished electronic environment that supports both the educational and administrative processes in an integrated manner.

The Office of Digital Transformation and Knowledge Sources was established with the aim of managing technical operations and electronic services in the University, and its vision is to enable King Saud University to achieve leadership in the field of electronic services through creating a comprehensive and distinctive information technology environment.

The College’s message lies in improving the services provided and offering a high-quality electronic environment, supported by information and communications technologies, in accordance with Saudi Arabia's strategies to promote the concept of e-government.

The primary objectives of the Digital Transformation Deanship and knowledge sources are focused on:

  • Builds best global practices and utilizes information systems and IT tools to increase administrative efficiency and improve organization, in addition to contributing to achieving government e-strategy goals.
Enhancing the use of information technologies to support policies and operations and procedures that increase accountability, transparency, and responsibility in all university departments.   
  • Development of IT infrastructure and technical tools to support faculty members in improving educational quality and research development.
    • Enhancing infrastructure and developing information technology tools to support and motivate students to achieve academic success.

    2. Objective:

    The objective of the Business Continuity Management System at the Digital Transformation Deanship and Knowledge Sources - Najran University is to ensure the deanship’s ability to continue its vital activities during emergencies, crises, disasters, or due to sudden business interruptions.

    It also aims to reduce downtime to an acceptable level for senior management, through the adoption of a flexible framework for implementing the system, while ensuring compliance with all legal, regulatory, contractual and ethical requirements.

    The application of the system is based on a framework approved by senior management, compliant with the requirements and standards of ISO 22301:2019.

    3. Core Services at the Institution:

    In reference to the services catalog provided by the Deanship.

    4. Scope:

    The system applies to all services provided by the Deanship and those listed in the Service Catalog, according to the approved organizational structure at the time.

    5. Restrictions and Exceptions:

    There is nothing.

    6. Objectives of the University Business Continuity Management System:

    • Design and development of a system to ensure business continuity and disaster recovery, and to build capabilities and resilience to ensure the continuity of vital activities.
    Providing the appropriate and necessary resources to establish, document, implement, review, and improve the system.
  • The commitment to providing the necessary training needs and guidance to prepare business continuity management.
    •   
  • Efficiently manage incidents and their response to minimize impact on resources, operations, and infrastructure.

    • 7. Risk Levels:

    7.1 Risk Level:

    It is determined according to the methodology outlined in standard ISO 22301:2019 and the approved risk register.

    7.2 Acceptable Risk Level:

    As specified in the risk register and the adopted assessment methodology.

    8. Roles and Responsibilities:

    With reference to the administrative decision issued by the Dean of Digital Transformation Office regarding the formation of Business Continuity and Risk Committee.

    9. Competencies:

    The College is committed to supporting the System Manager by providing the competencies, training and resources necessary.

    10. Examinations and Exercises:

    Implemented based on a decision by the Business Continuity Committee approved by senior management.

    11. Documentation:

    Responsibility for documentation rests with the System Manager and Continuity Representatives, along with the relevant committee, with periodic review and continuous improvement to ensure the effectiveness of the system.