BUSINESS CONTINUITY MANAGEMENT SYSTEM

Introduction

In line with the vision of the Abu Dhabi Government, Abu Dhabi Media Network is committed to implementing an integrated business continuity management system, in line with the requirements of the National Business Continuity Management Standard AE/SCNS/NCEMA 7000:2021, to participate in enhancing the national stability of the United Arab Emirates by building a management ready to respond. and recover time in potential disruptions.

Abu Dhabi Media Network will respond to emergency and crisis situations by working in a flexible manner to ensure the continuation of all vital services of the Abu Dhabi Media Network during crises. Abu Dhabi Media Network also commits to the restoration of services provided after a crisis occurs, in accordance with the requirements of the National Emergency, Crisis and Disaster Management Authority and the directives of senior management.

Business Continuity Management System Model

Objectives

1. To ensure the development and implementation of business continuity plans, considering the expected changes in the services and business functions.

2. A commitment to fulfilling all legislative, legal, regulatory, or contractual requirements internally and externally, in addition to the concerned parties and the network's dealers regarding business continuity.

3. To provide the necessary specialised training requirements and guidance and to enhance the skills of employees and teams to achieve the desired results to fulfil their emergency, crisis and business continuity roles and responsibilities.

4. To establish, oversee and maintain continual monitoring, testing and review of critical activities, procedures and the maturity level of the emergency crisis and business continuity management.

5. Incident management and response with high efficiency and effectiveness in order to reduce the impact on the network's human resources, customers, operations and infrastructure of the network.

Scope

This framework applies to all Abu Dhabi Media Network employees, business units, facilities, systems, information, and its companies and subsidiaries across all locations in the United Arab Emirates.

This framework also applies to Abu Dhabi Media Network functions performed by outsourced entities that are governed by contracts. This also applies to Abu Dhabi Media Network’s infrastructure.

The General Terms of Business Continuity

1. Fulfilling all the requirements of the national standard for a business continuity management system by establishing an effective management system in line with the network's context and strengthening the system's communication channels with all stakeholders.

2. Abu Dhabi Media Network must be prepared for all scenarios including but not limited to, disasters (natural/man-made), power outages, failure of electronic devices/communications, data outage/loss, explosions, unavailability of human resources for a specific cause, accidents related to hazardous materials and health pandemics.

3. All departments and work teams in Abu Dhabi Media Network responsible for providing services/products shall develop and implement business continuity plans and maintain a guarantee of continuity and recovery of their services/products.

4. The development and implementation of a business continuity plan must be in line with the principles and standards of the National Emergency Crisis and Disaster Management Authority, the requirements of the Emergency and Crisis Management Committee and the business continuity management team at Abu Dhabi Media Network, and the prevailing regulations in this field such as the national standard for business continuity management, the international standard ISO22301, and best practices.

5. All business continuity strategies and plans should be based on the results of a Business Impact Analysis (BIA) and an assessment of operational business continuity risks and controls, considering the seven key business continuity resources (people, operations, buildings, information, technology, supplies, and stakeholders) and focus on the concept of continuous improvement.

6. Abu Dhabi Media Network departments responsible for providing services/products shall conduct a business impact analysis, including Service Retrieval Criteria, for example: Recovery Time Objective (RTO), Maximum Allowable Outage, Maximum tolerable period of disruption to determine the impact of an interruption or disruption.

7. Abu Dhabi Media Network departments responsible for providing services/products are to implement additional controls, where appropriate, to reduce risks in line with the prevailing guidelines issued by the ERM framework and in accordance with the recommendations of the Emergency and Crisis Management Committee and the Business Continuity Team based on the requirements of NCEMA.

8. All departments and work teams in Abu Dhabi Media Network are required to ensure that the plans created are practiced and tested annually. All business continuity drills and exercises should be in coordination with the Business Continuity team. All disaster recovery tests and exercises results must also be reported to the Business Continuity team.

9. All business continuity plans should be reviewed annually or after any significant changes in infrastructure / organizational structure / corporate processes / products and services, in coordination with the network’s business continuity team.

10. Documents for key business continuity activities (business impact analysis, operational risk register, business continuity plan) should have a clear document control reference showing the year, department name and issue number.

BCMS Responsibilities

CEO:

Approval of Business Continuity Framework and support business continuity plans and implementation, in addition to supporting the continuity of planning and operational compliance with this system.

Executives/Directors & Department Managers:

All department managers within the network are responsible for supporting and implementing business continuity strategies within their departments and ensuring the implementation of the business continuity system.

Emergency & Crisis Management Committee in ADM:

Emphasis on implementing the business continuity system. Improving the network's ability to survive and operate during disturbances/emergencies, protecting lives and property, and to implement response and recovery plans. Demonstrate a proactive control of risks effectively and efficiently.

Business Continuity Section:

Preparing documents related to the business continuity system, such as the system & procedures manual, for example, but not limited to, accordance with the National Standard. Supervising, directing, and reviewing all business continuity system activities to organize, operate, and provide advice on the system in an integrated manner, comply with all relevant legal and regulatory requirements, submit reports to senior management and concerned parties, and coordinate institutional arrangements inside and outside the network.

Business Continuity Management Team:

Applying the business continuity, reviewing, and updating the system to include objectives, procedures, plans, programmes and responsibilities for business continuity and basic services, analyzing the impact on the business and assessing risks, preparing, and following up the programme and testing business continuity plans before, during and after recovery from emergencies, crises and disasters or any tasks assigned to the team related to the programme.

Corporate communication:

Ensuring communication with the concerned parties regarding crises and managing the relevant media plans in line with the directions of the senior management.

Human Resource Management:

Provide induction training and ongoing support to employees to ensure understanding of business continuity expectations and requirements.

All Employees:

Contribute to and comply with Abu Dhabi Media Network’s Business Continuity system as part of their normal duties and responsibilities.