Risk Management System Policy

In the quest to realize the goals and to fulfil the needs of concerned stakeholder as well as the requirements thereof, NAORAS Organization has adopted a proactive approach under which it manages risks with a purpose of to achieve the objectives and meet all needs and the requirements of concerned stakeholders, the Organization shall adopt a proactive approach to risk management with the aim of reducing the impact on the structures operations and activities and supporting his orientation towards governance and effective contribution to decision-making. reducing the effects of such risks on the structures operations and activities while supporting the government's vision of implementing governance and contributing effectively to the process of decision making.

In order to achieve these directions, the Risk Management System Policy focused on the following:

• Identifying, evaluating, monitoring, and reviewing risks, reporting them, and dealing with them effectively according to the guidelines of the International Standard ISO 31001 and the requirements of the work systems applied in the Organization
• Predicting potential risks, estimating their probability of occurrence, severity, and level, and implementing treatment plans as well as providing the necessary resources.
• Applying the risk management system and its operations to the work systems applied in the Organizations, such as the asset management system ISO 55001, business continuity ISO 22301, good governance ISO 37000, and the integrated administrative system
• Linking and integrating risk management with the department's policy, objectives, systems, operations, and performance indicators.
• Developing risk treatment plans to ensure the effective application of the risk management system.
• Periodically reviewing the risk management and acceptance levels and making informed decisions in mitigating, eliminating, sharing, or tolerating risks.
• Reviewing the policy and context of the risk management system annually to ensure its consistency with the objectives and expectations of senior management and stakeholders.
• identifying the authorities, responsibilities, and accountability towards risk management and balance between innovations and change and associated risks.
• Enhancing the culture of risk management in the Country and raising the awareness of employees of its importance and understanding of each individual in the Country his responsibility in risk management
• Encouraging the reporting of new and emerging risks
• Determining risk tolerance and acceptance. Continuously improving the risk management system.

We are committed in NAORAS Organization to follow the directive designed by the international standards of risk management and followed by the majority of successful governments