Business Continuity Policy
Recognizing the pivotal role of the Saudi Commission for Health Specialties (SCFHS) in regulating and developing the healthcare sector in the Kingdom of Saudi Arabia, through establishing professional standards and overseeing the qualification and classification of healthcare practitioners, the Commission is committed to the following:
- Establishing, implementing, maintaining, and continually improving a Business Continuity Management System (BCMS) to enhance organizational preparedness and resilience in responding to potential disruptions and crises, in alignment with relevant international standards, particularly ISO 22301:2019, ensuring its effectiveness and suitability to the nature of the Commission’s operations and critical services.
- Identifying critical services and processes, analyzing the impacts of disruptions and associated risks, and developing appropriate recovery strategies and plans to ensure their continuity within approved timeframes.
- Providing the necessary human, technical, and financial resources to support the Business Continuity Management System and ensuring the readiness of relevant teams to perform their assigned roles and responsibilities.
- Complying with relevant regulatory and legislative requirements, as well as national and international standards, including the Business Continuity Controls issued by the Digital Government Authority, “Qiyas Measurement Index,” and business continuity indicators issued by the General Secretariat of the National Risk Council, including the “Sumood” Index, to ensure the efficient and effective continuity of the Commission’s operations and critical services, while taking into consideration the requirements and expectations of internal and external stakeholders.
- Conducting periodic tests and exercises for business continuity plans, measuring the level of preparedness, documenting lessons learned, and following up on the implementation of improvement opportunities.
- Measuring and monitoring the performance of the Business Continuity Management System through clearly defined performance indicators and submitting periodic reports to the relevant management to support decision-making and continual improvement.
- Ensuring that this policy serves as a framework for establishing, updating, and implementing the Commission’s Business Continuity Management objectives.
The Commission is also committed to ensuring that this policy is made available to all relevant stakeholders through available communication channels and is reviewed periodically to verify its continued suitability and effectiveness.