[BCM] [Damanat] [E3] [BIA] [P3] [CBF] [1] Impact Over Time of Business Functions

BIA Part 3: Impact Over Time of Business Functions

CBF-1 Mortgage Guarantee Origination

Impact-over-time analysis is a central component of the Business Impact Analysis (BIA).

It examines how the consequences of losing a business function change as the duration of disruption increases.

Rather than assigning a single static criticality rating, the analysis evaluates each Sub-Critical Business Function at defined time intervals to identify when operational, financial, regulatory, information, and stakeholder consequences become increasingly severe.

For the Saudi Mortgage Guarantees Services Company (Damanat), the analysis is particularly important because Mortgage Guarantee Origination is carried out through an interconnected sequence of application intake, eligibility verification, risk assessment, approval, guarantee issuance, registration, communication, and reporting.

Damanat operates through a business-to-business model involving financial institutions and other participants in the Saudi real estate finance ecosystem.

Disruption to one part of the origination process can therefore create backlogs and delays across multiple downstream activities.

Business impacts normally escalate as a disruption continues.

An interruption lasting several hours may initially be managed through existing work queues, manual procedures, or temporary communication channels.

As the disruption extends into days, however, application backlogs increase, service commitments are missed, guarantee decisions are delayed, records may become incomplete, and participating financial institutions may be unable to progress related mortgage financing transactions.

Prolonged disruption can also affect regulatory obligations, management oversight, financial reconciliation, and stakeholder confidence.

The impact scores in this assessment use the following scale:

The progressive impact ratings support the establishment of two important recovery parameters:

• The Recovery Time Objective (RTO) is the target time by which the Sub-CBF should be restored to its required minimum level following a disruption.
• The Maximum Tolerable Period of Disruption (MTPD) is the outer limit beyond which the consequences of disruption become intolerable and seriously threaten the continued delivery of Mortgage Guarantee Origination.

The RTO is intentionally set earlier than the MTPD to provide sufficient time for escalation, recovery, validation, backlog management, and stabilisation.

This approach is consistent with impact-over-time analysis, which uses progressive impact ratings to support recovery prioritisation and the development of continuity strategies.

The assessment also identifies Vulnerable Periods—specific operational windows during which a disruption would produce unusually severe consequences.

These periods should be reflected in continuity arrangements, staffing plans, system change controls, third-party coordination, and recovery readiness.

SAMA’s BCM framework emphasises establishing continuity controls, plans, recovery capabilities, and tested arrangements that enable critical and urgent activities to continue at predefined acceptable levels.

Table BIA P3: Impact Over Time of Business Functions for CBF-1 Mortgage Guarantee Origination (Part 1)

Impact-over-time analysis provides Damanat with a structured view of how the consequences of disruption escalate across the entire Mortgage Guarantee Origination lifecycle.

It distinguishes functions that require restoration within hours from those that can be temporarily deferred under controlled conditions.

This enables recovery priorities to be based on the timing and severity of business consequences rather than on perceived importance alone.

The impact scores provide an evidence-based foundation for setting Recovery Time Objectives. Functions whose impacts reach High or Very High levels rapidly should receive earlier recovery targets, stronger system availability arrangements, and more robust manual workarounds.

Functions whose effects develop more gradually may receive longer RTOs, provided that their deferred activities are securely recorded and subsequently reconciled.

The Maximum Tolerable Periods of Disruption establish the outer operating limits for the Sub-CBFs.

These limits guide the design and capacity of recovery strategies by clarifying how long Damanat can rely on degraded service, manual processing, alternate technology, reassigned staff, or third-party support before the consequences become intolerable.

Recovery strategies must be capable of restoring the minimum required service before the relevant MTPD is reached.

The identification of Vulnerable Periods further strengthens contingency planning by showing when ordinary recovery arrangements may be insufficient.

During these periods, Damanat may need additional staffing, tighter change controls, enhanced technology support, accelerated escalation, or pre-emptive backlog reduction.

Collectively, the impact ratings, RTOs, MTPDs, and Vulnerable Periods provide key inputs for:

• recovery strategy selection;
• technology recovery priorities;
• minimum resource determination;
• alternate workplace and remote-working arrangements;
• manual workaround design;
• third-party continuity requirements;
• crisis escalation criteria;
• Business Continuity Plan procedures;
• exercising and scenario testing; and
• management approval of continuity investments.

By applying these outputs consistently, Damanat can strengthen its ability to continue delivering important mortgage guarantee activities at an acceptable predefined level, maintain appropriate records and controls, support participating financial institutions, and protect the resilience of the wider mortgage finance ecosystem.

This reflects the broader BCM expectation that organisations establish, implement, maintain, and test continuity arrangements for critical services and business processes.

 

eBook 3: Starting Your BCM Implementation
MBCO	P&S	RAR T1	RAR T2	RAR T3	BCS T1	CBF
CBF-1 Mortgage Guarantee Origination
DP	BIAQ P1	BIAQ P2	BIAQ P3	BIAQ P4	BIAQ P5	BIAQ P6
		BCS T2	BCS T3	PD