Official government website of the Government of the Kingdom of Saudi Arabia
How to verify
Links to official Saudi websites end with org.sa

All links to official websites of government agencies in the Kingdom of Saudi Arabia end with gov.sa.

Government websites use the HTTPS protocol for encryption and security.

Check that the website uses the HTTPS protocol.

Risk Management Policy

Risk Management Policy

 

Recognizing the pivotal role of the Saudi Commission for Health Specialties (SCFHS) in regulating and developing the healthcare sector in the Kingdom of Saudi Arabia through establishing professional standards and overseeing the qualification and classification of healthcare practitioners. The Commission also recognizes the importance of managing risks within defined and acceptable levels. Accordingly, SCFHS is committed to the following:

  • Implementing the fundamental elements of the Risk Management Policy, which contribute to establishing a comprehensive and consistent approach that enables the Commission to identify, assess, and prioritize responses to risks and opportunities associated with strategic objectives, operations, and day-to-day practices. This approach has been developed in alignment with relevant international standards, particularly ISO 31000:2018.
  • Supporting the implementation of risk management by providing the necessary enablers and resources, and periodically reviewing its performance to ensure its effectiveness, sustainability, and alignment with the Commission’s strategic objectives.
  • Assigning appropriate authorities, responsibilities, and accountabilities related to risk management across relevant organizational levels to ensure clarity of roles, effective implementation, and sound governance of risk management practices throughout the Commission.
  • Implementing this policy to ensure effective risk management while taking into consideration the following factors to support the proper application of risk management processes, practices, and day-to-day activities:
    • Ensuring that the purpose and objectives of this policy are aligned with the Commission’s strategic direction.
    • Ensuring that risk management practices are integrated into the Commission’s operations and activities.
    • Communicating to relevant stakeholders involved in the Commission’s risk management processes the requirement to apply such processes in accordance with the Risk Management Policy, Risk Management Framework, and Risk Management Procedures Manual.
    • Guiding and supporting SCFHS personnel to participate effectively and efficiently in risk management activities.
    • Promoting and strengthening the concept of risk management across the Commission and its related activities and processes.
  • Ensuring that risks are adequately considered when establishing the organization’s objectives.
  • Complying with applicable regulatory and legislative requirements, as well as relevant national and international standards, including the Sumoud Index standards issued by the National Risk Council and the Qiyas Index issued by the Digital Government Authority, efficiently and effectively, while taking into consideration the requirements and expectations of internal and external stakeholders.
  • Establishing effective communication mechanisms for sharing risk-related data and information, as well as risk treatment and management strategies, across all relevant organizational levels.
  • Ensuring that this policy serves as a framework for establishing, planning, and implementing the Commission’s risk management objectives.

 

The Commission is also committed to ensuring that this policy is made available to all relevant stakeholders through available communication channels and is reviewed periodically to verify its continued suitability and effectiveness.