[BCM] [Damanat] [E3] [BIA] [PS] Key Product and Services

Chapter: Key Products and Services for The Saudi Mortgage Guarantees Services Company (Damanat)

Introduction

An important objective of Business Continuity Management (BCM) is to ensure that an organisation can continue delivering its most important products and services during incidents, emergencies, and disruptive events.

ISO 22301 emphasises that organisations should identify the products and services that are essential to achieving their strategic objectives and meeting the expectations of customers, regulators, business partners, and other stakeholders.

These products and services provide the foundation for determining Critical Business Functions (CBFs), conducting Business Impact Analyses (BIA), establishing Maximum Acceptable Business Continuity Objectives (MBCO), and developing appropriate continuity and recovery strategies.

For The Saudi Mortgage Guarantees Services Company (Damanat), the delivery of mortgage guarantee services plays a critical role in supporting the Kingdom of Saudi Arabia's housing finance ecosystem by enhancing access to mortgage financing, managing guarantee risks, and strengthening confidence among participating financial institutions.

In addition to its core guarantee operations, Damanat relies on a range of corporate, governance, technology, cybersecurity, regulatory, financial, and support services to ensure that its operations remain effective, secure, and compliant.

The key products and services identified in this chapter represent the outputs that Damanat should prioritise during a disruption. They provide the basis for identifying recovery priorities, allocating resources, establishing recovery time objectives, and determining continuity strategies for each Critical Business Function.

The products and services presented below are indicative and should be validated by Damanat's business owners and senior management during the Business Impact Analysis.

Table C3: Key Products and Services

Summary of Key Products and Services

The products and services delivered by Damanat can be grouped into several strategic service categories that collectively support the organisation's mandate.

Importance of Identifying Key Products and Services

Identifying key products and services enables Damanat to:

• determine which services must be maintained during disruptive incidents;
• establish priorities for Business Impact Analysis and continuity planning;
• identify supporting business processes, technology, facilities, information, personnel, and third-party dependencies;
• allocate resources to the organisation's most critical operational activities;
• support compliance with regulatory expectations issued by The Saudi Central Bank (SAMA) and the Insurance Authority of Saudi Arabia;
• improve organisational resilience through risk-informed recovery planning; and
• ensure that continuity strategies are aligned with business objectives and stakeholder expectations.

The identification of products and services also provides the foundation for establishing Maximum Acceptable Business Continuity Objectives (MBCO), Recovery Time Objectives (RTOs), and Minimum Business Continuity Objectives for each Critical Business Function.

The identification of key products and services is a fundamental step in implementing an effective Business Continuity Management programme.

It enables Damanat to focus its continuity planning efforts on the services that are essential to fulfilling its organisational mandate, supporting financial institutions, meeting regulatory obligations, and maintaining stakeholder confidence during disruptive events.

The products and services identified in this chapter provide the starting point for the Business Impact Analysis, where each Critical Business Function will be examined in greater detail to determine its operational impacts, recovery priorities, supporting resources, interdependencies, and continuity requirements.

Together with the identified Critical Business Functions, these products and services establish the operational scope of Damanat's Business Continuity Management programme and contribute to strengthening the organisation's overall resilience in accordance with ISO 22301 and recognised Business Continuity Management good practices.