Welcome to Starting Your BCM Implementation, the third eBook in the series "Implementing Business Continuity Management for The Saudi Mortgage Guarantees Services Company: An Enterprise Implementation Guide."
This eBook is designed to bridge the gap between understanding Business Continuity Management (BCM) concepts and performing the practical activities required to develop a comprehensive Business Continuity Management programme for The Saudi Mortgage Guarantees Services Company (Damanat).
The preceding publications in this series provide the foundation for this implementation guide:
Having completed these two foundational references, this third eBook focuses on the actual completion of the Business Continuity Management project deliverables.
Rather than discussing BCM concepts at a theoretical level, this implementation guide provides a structured workbook to help project teams document, review, validate, and maintain the information required to develop an organisation-wide Business Continuity Management programme.
Instead of asking "What is Business Continuity Management?", this guide asks:
• What information must be collected?
• Who should provide the information?
• How should the information be documented?
• How should it be validated?
• How should it be maintained?
Accordingly, this eBook serves as the primary working document during the BCM implementation project.
This implementation guide should be used together with the previous two eBooks.
eBook 1 establishes the organisational context by explaining Damanat's business model, governance arrangements, operating environment, critical business functions, and business continuity objectives.
eBook 2 explains the planning methodology for implementing Business Continuity Management, including governance arrangements, project planning, risk analysis, business impact analysis, continuity strategy development, plan development, exercising, maintenance, and continual improvement.
eBook 3 builds upon both publications by providing the detailed templates and implementation activities required to produce the Business Continuity Management documentation.
Together, the three eBooks provide a complete implementation roadmap—from understanding the organisation, through planning the BCM programme, to producing the operational deliverables that support organisational resilience.
The content of this eBook 3, "Starting Your BCM Implementation," drills down into the specific requirements for each phase of the BCM planning methodology.
The four phases of the BCM planning methodology are
In the Risk Analysis and Review (RAR) phase, the content includes the completion of these three templates:
During the business impact analysis (BIA) phase, six-part templates are completed for each critical business function.
Each section is completed for all the organisation's critical business functions, providing granular insight into operational dependencies and recovery priorities.
In the Business Continuity Strategy (BCS) phase, each critical business unit will have the following requirements presented:
Once strategies are finalised, the BCM team develops and documents the Business Continuity Plans [PD] for each business function. This includes the:
The following Critical Business Functions form the foundation of the Business Impact Analysis and subsequent continuity planning activities.
|
CBF No. |
Critical Business Function |
|
CBF-1 |
Mortgage Guarantee Origination |
|
CBF-2 |
Guarantee Risk Assessment |
|
CBF-3 |
Guarantee Issuance and Administration |
|
CBF-4 |
Claims Assessment and Settlement |
|
CBF-5 |
Financial and Treasury Management |
|
CBF-6 |
Enterprise Risk Management |
|
CBF-7 |
Regulatory Compliance and Reporting |
|
CBF-8 |
Information Technology Services |
|
CBF-9 |
Information Security and Cyber Resilience |
|
CBF-10 |
Customer and Financial Institution Relationship Management |
|
CBF-11 |
Legal and Corporate Governance |
|
CBF-12 |
Human Resource Management |
|
CBF-13 |
Procurement and Vendor Management |
|
CBF-14 |
Corporate Communications and Stakeholder Management |
|
CBF-15 |
Business Continuity and Crisis Management |
These Critical Business Functions are the activities essential to Damanat's ability to fulfil its strategic objectives, maintain mortgage guarantee operations, satisfy regulatory expectations, and continue providing services to financial institutions and stakeholders.
Each Critical Business Function will be analysed individually throughout this implementation guide using the structured Business Impact Analysis methodology.
This publication is provided as part of the value-added implementation resources accompanying the BCM Institute's training-led Business Continuity Management implementation approach.
It complements the Institute's certification and competency-based training programmes by providing participants with practical templates, implementation guidance, and structured documentation that can be directly applied during organisational BCM projects.
Rather than developing documentation from a blank starting point, participants are guided through a consistent methodology that promotes standardisation, completeness, and alignment with recognised Business Continuity Management practices.
This practical approach accelerates project implementation while improving documentation quality, stakeholder engagement, and governance throughout the BCM lifecycle.
Business Continuity Management is an important component of organisational resilience within Saudi Arabia's financial services sector.
As a mortgage guarantee provider operating within the Kingdom, Damanat should ensure that its Business Continuity Management programme aligns with applicable regulatory expectations issued by the Saudi Central Bank (SAMA) and the Insurance Authority of Saudi Arabia.
These regulatory bodies emphasise effective governance, operational resilience, risk management, service continuity, incident response, third-party oversight, cybersecurity resilience, testing, and continual improvement to safeguard the stability of the financial system and protect customers and stakeholders.
Accordingly, the methodologies, templates, and implementation guidance contained in this eBook are structured to support organisations in developing a systematic, documented, and auditable BCM programme that is consistent with recognised Business Continuity Management practices and responsive to applicable regulatory expectations in the Kingdom of Saudi Arabia.
Business continuity planning is most effective when supported by a structured and disciplined implementation process.
It transforms the principles and methodologies presented in the earlier eBooks into tangible organisational deliverables by guiding project teams through the completion of risk assessments, business impact analyses, continuity strategies, and business continuity plans.
When completed, the documentation developed through this implementation guide will provide Damanat with a structured and maintainable Business Continuity Management framework that strengthens organisational resilience, supports informed decision-making during disruptions, and contributes to the continued delivery of critical mortgage guarantee services in alignment with organisational objectives and regulatory expectations.
| eBook 3: Starting Your BCM Implementation |
||||||
| MBCO | P&S | RAR T1 | RAR T2 | RAR T3 | BCS T1 | CBF |
| CBF-1 Mortgage Guarantee Origination | ||||||
| DP | BIAQ P1 | BIAQ P2 | BIAQ P3 | BIAQ P4 | BIAQ P5 | BIAQ P6 |
| BCS T2 1(x) | BCS T3 (x) | PD (x) | ||||
|
If you have any questions, click to contact us.
|
||