# SAMA BCM Framework: Saudi Central Bank Business Continuity Management Framework

> Business continuity requirements for banks, insurers and finance companies regulated by SAMA.

URL: https://securei3.com/standards/sama-bcm/
Category: GCC regulations: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


SAMA’s Business Continuity Management Framework requires regulated institutions to establish BCM governance, perform business impact analysis and risk assessment, define continuity strategies and plans, test them regularly and report to SAMA. It complements the SAMA Cyber Security Framework.

We implement the framework, run BIA and exercises, and align your programme with ISO 22301 for optional certification.

## Who it is for

- SAMA-regulated banks, insurers and finance companies
- Fintechs licensed by SAMA
- Critical vendors to SAMA-regulated entities

## Benefits

- Tested, regulator-ready continuity
- Alignment with ISO 22301

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### Is ISO 22301 certification required by SAMA?

Not as such, but ISO 22301 aligns closely with the framework and gives independent assurance many institutions value.

Related: https://securei3.com/standards/sama-csf/, https://securei3.com/standards/iso-22301/, https://securei3.com/standards/sama-counter-fraud/

Contact: https://securei3.com/contact/: info@securei3.com