Risk Management Manual

Health Risks

Human-Related Risks in Workshops and Laboratories

Risk-Responsible Entity	Support Services Administration. Primary Health Clinic at the Colleges.
Locations Affected by the Risk	Workshops and laboratories.
Risk Description	Risks to staff and students due to: Lack of first-aid supplies and a fire extinguisher. Missing or malfunctioning water hoses
Risk Prevention Measures	Laboratory staff must wear protective clothing that is flame-resistant. Wear masks that protect against inhaling toxic gases. Wear gloves and protective goggles to prevent eye irritation. Place guidance signs in the laboratory.
Risk Mitigation Measures	Place safety instructions and awareness posters inside laboratories. Provide sufficient space for the number of students in laboratories to avoid overcrowding. Provide lighting and natural ventilation in laboratories to improve the indoor environment. Ensure laboratory sinks are resistant to chemicals. Provide multiple fire-fighting means (fire extinguishers and dry sand). Provide a direct line to contact the Support Services Administration. Install a highly sensitive fire alarm. Perform regular equipment maintenance.

Respiratory Suffocation

Risk-Responsible Entity	Support Services Administration.
Locations Affected by the Risk	Areas where gas emissions or fires may occur.
Risk Description	Suffocation resulting from: Chemical reactions. Leaks during laboratory experiments. Fire.
Risk Prevention Measures	Train staff to handle gases and chemical reactions. Use an appropriate location for experiments. Maintain pipes regularly and dispose of damaged ones.
Risk Mitigation Measures	Move away from the source of gas emissions and surrounding areas. Shut off the gas supply and use emergency measures, including breaking glass to let in fresh air and crawling to reach the source. Provide affected people with more air by moving them elsewhere or using an oxygen cylinder. The rescuer should remove obstructive clothing to facilitate rescue. Lay an unconscious person on their back and check whether breathing is normal, stopped, or intermittent. Immediately transport the person to hospital if breathing has stopped, documenting the type of gas inhaled.

Public Health and Chronic Diseases

Risk-Responsible Entity	Support Services Administration. Primary Health Clinic at the Colleges.
Locations Affected by the Risk	All areas of the Colleges.
Risk Description	Impact on employees’ health. Cuts or burns caused by neglecting preventive requirements. Work-related injuries or occupational illness.
Risk Prevention Measures	Transport materials correctly while taking the necessary precautions. Provide basic safety supplies. Ensure sanitizers are readily available in all corridors.
Risk Mitigation Measures	Accidents: Clean the wound and surrounding area with soap and water. Do not touch the wound with hard or non-sterile materials. Place sterile gauze over the wound to stop bleeding. Contact the Colleges’ primary health clinic. Burns: Remove watches, shoes, and other items before the skin swells. Use cold water or compresses to reduce swelling. Wrap the injured area with a clean, sterile dressing free of threads and ties. Contact the Colleges’ primary health clinic. Chronic diseases: Provide the primary health clinic with information about employees’ health conditions. Arrange regular employee medical examinations through accredited centers.

Food Poisoning

Risk-Responsible Entity	Housing and Nutrition Administration. Primary Health Clinic at the Colleges.
Locations Affected by the Risk	Restaurants and cafeterias.
Risk Description	A sudden illness resulting from eating contaminated food.
Risk Prevention Measures	Enforce health requirements for food providers. Establish a self-monitoring system for food providers. Identify drinking-water sources and monitor their quality continuously. Control sources of contamination, including insects and rodents.
Financial Risks	Decline in the Colleges’ financial inflow. Student tuition fees. Liquidity Management at the Colleges. Poor Asset Management.

Financial Risks

Decline in the Colleges’ Financial Inflow

Risk-Responsible Entity	Chairman of the Board of Trustees. Deputy Chairman of the Board of Trustees. Financial Affairs Administration.
Locations Affected by the Risk	All College activities.
Risk Description	Declining income due to a decrease in the number of students enrolled at the Colleges.
Risk Prevention Measures	Seek institutions that can provide interest-free loans to students. Offer price incentives to students. Promote and advertise the programs offered by the Colleges. Close unviable academic programs.
Risk Mitigation Measures	Seek institutions that can provide interest-free loans to students. Offer price incentives to students. Promote and advertise the programs offered by the Colleges. Close unviable academic programs.

Student Tuition Fees

Risk-Responsible Entity	Deputy Chairman of the Board of Trustees. Admissions and Registration Administration. Admissions and Registration Unit – Women’s Section.
Locations Affected by the Risk	All College activities.
Risk Description	Students’ financial difficulties in paying registration fees to the Colleges.
Risk Prevention Measures	Continuously monitor students’ balances and payment dates. Follow up regularly with students and encourage payment by the specified deadlines to benefit from partial scholarships offered by the founders. Send students periodic reminders of tuition payment dates and deadlines. Introduce an installment payment system.
Risk Mitigation Measures	Activate the Solutions Center to discuss payment difficulties with students. Submit a detailed report to the Deputy Chairman of the Board of Trustees.

Liquidity Management at the Colleges

Risk-Responsible Entity	Chairman of the Board of Trustees. Deputy Chairman of the Board of Trustees. Financial Affairs Administration.
Locations Affected by the Risk	All College activities.
Risk Description	A shortfall in the liquidity allocated in the estimated budget.
Risk Prevention Measures	Establish an accounting system to monitor spending within the Colleges. Establish an accounting system to monitor cash flows within the Colleges. Develop templates to forecast cash inflows and outflows at the Colleges. Use financial methods to analyze relationships between budget items at the Colleges.

Poor Asset Management

Risk-Responsible Entity	Chairman of the Board of Trustees. Deputy Chairman of the Board of Trustees. College Deans. Administration Directors.
Locations Affected by the Risk	All College activities.
Risk Description	Ineffective utilization of assets at the Colleges.
Risk Prevention Measures	Implement a strategic asset management plan. Assess and update assets. Adopt a policy for disposing of unproductive assets and maintaining assets effectively. Assess whether retaining assets is worthwhile.
Risk Mitigation Measures	Identify damages that may lead to risks arising from poor asset management. Discontinue projects proven to be unviable. Adopt flexible and effective investment policies to achieve stable returns. Submit a report to the Chairman of the Board of Trustees.

Information Technology Risks

Hacking

Risk-Responsible Entity	Information and Statistics Center.
Locations Affected by the Risk	All College devices.
Risk Description	Unauthorized intrusion and breaching the Colleges’ server security.
Risk Prevention Measures	Enable and update firewalls on all servers. Encrypt connections using security certificates. Conduct regular technical tests of firewalls to ensure they are difficult to breach. Explore new technologies to counter hacking. Perform regular data backups.
Risk Mitigation Measures	Shut down and isolate systems to prevent impact on other data. Assess data-related damage. Identify the vulnerability that allowed the attacker to access the data. Update the firewall and test systems before restarting them. Send a report to senior management and inform employees about the incident.

Viruses

Risk-Responsible Entity	Information and Statistics Center.
Locations Affected by the Risk	All College devices.
Risk Description	Viruses infiltrating the Colleges’ servers and networks.
Risk Prevention Measures	Apply approved information security procedures and policies. Provide antivirus protection using Symantec Endpoint Security. Update antivirus software regularly. Configure automatic scans on faculty and student devices. Install antivirus software on all College computers.
Risk Mitigation Measures	Limit the impact of the virus by isolating affected data. Disconnect affected devices from the internal network. Assess data damage and remove the virus. Investigate the issue and update the firewall. Do not operate devices until they have been confirmed virus-free. Send a report to senior management and inform employees about the incident.

Unauthorized Access

Risk-Responsible Entity	Information and Statistics Center.
Locations Affected by the Risk	All College devices.
Risk Description	Unauthorized access by illegally obtaining a username and password.
Risk Prevention Measures	Implement system security measures and password policies. Use authentication through Active Directory Authentication. Raise awareness about protecting usernames and passwords and securing them. Encourage regular password updates.
Risk Mitigation Measures	Disable the username to limit damage. Assign the specialized technical team to address and update affected systems. Send a report to senior management and inform employees while maintaining confidentiality.

Use of Unlicensed Software

Risk-Responsible Entity	Information and Statistics Center.
Locations Affected by the Risk	All College devices.
Risk Description	Copied, leaked, or custom-built software without an official source and without support.
Risk Prevention Measures	Regularly identify software requiring licenses. Provide licensed original copies directly. Prohibit the use of unlicensed software. Do not allow software installation on public devices used by students. Regularly monitor software installed on devices.
Risk Mitigation Measures	Stop using devices running unlicensed copies. Update devices regularly. Connect computers to servers that prevent unauthorized software installation.

Hardware and Software Failures

Risk-Responsible Entity	Technical Support Unit.
Locations Affected by the Risk	All College devices and software.
Risk Description	Failures affecting software and devices used by beneficiaries of College services.
Risk Prevention Measures	Update devices and software regularly. Perform regular device maintenance. Provide a dedicated email address and direct phone number for the support team. Provide help guides for communicating with the support team.
Risk Mitigation Measures	Equip the technical team with the expertise needed to handle failures. Identify the problem and address the failures. Provide immediate maintenance. Inform users and send a report assessing the problem, its solutions, and the time required to resolve it.

Employee Skills Shortage

Risk-Responsible Entity	Information and Statistics Center.
Locations Affected by the Risk	All College devices.
Risk Description	Information and Statistics Center.
Risk Prevention Measures	All College devices. Insufficient skills among employees at the Information and Statistics Center.

Organize training courses for new employees suited to their duties.

Risk-Responsible Entity	Information and Statistics Center. Support Services Administration.
Locations Affected by the Risk	Monitor productivity and submit periodic achievement reports.
Risk Description	Data Loss Due to Natural Factors
Risk Prevention Measures	Information and Statistics Center housing the servers. Data loss due to floods, earthquakes, or fires. Provide a backup server, with daily backups scheduled to the Synology Backupserver.
Risk Mitigation Measures	Maintain a secure copy of data outside the Colleges’ premises and update it regularly. Provide fire-resistant doors and cabinets around servers. Coordinate with the Support Services Administration to ensure there is no electrical hazard to the servers. Provide alternative solutions to allow users temporary access to network devices.

Use data copies stored outside the Colleges’ premises.

Risk-Responsible Entity	Send senior management detailed reports on the incident, improvement priorities, and recommendations.
Locations Affected by the Risk	Faculty and Staff Unaware of Their Rights
Risk Description	Human Resources Administration.
Risk Prevention Measures	Faculty members and employees. Lack of awareness of rules and regulations. Promote legal awareness of duties and rights through various means across the Colleges.
Risk Mitigation Measures	Conduct training courses for all College personnel. Lack of awareness of rules and regulations. Provide sufficient copies of laws and regulations in Arabic and English.

Provide copies of laws and regulations in Arabic and English.

Risk-Responsible Entity	Require academic, administrative, and technical staff to review their rights and duties and sign to acknowledge having done so.
Locations Affected by the Risk	Unauthorized Use of the Colleges’ Logo
Risk Description	Legal Advisor.
Risk Prevention Measures	All College Administrations. Use of the logo without approval.
Risk Mitigation Measures	Identify the entity authorized to use the Colleges’ logo. Issue a directive from the authorized official prohibiting logo use without approval. Identify the ways in which the logo is being used. Obtain legal approval. Notify the authorized official. Stop using the logo when the risk is identified.

Refer anyone within the Colleges responsible for unauthorized logo use to the Colleges’ Disciplinary Committee.

Risk-Responsible Entity	Require academic, administrative, and technical staff to review their rights and duties and sign to acknowledge having done so.
Locations Affected by the Risk	Unauthorized Use of the Colleges’ Logo
Risk Description	Refer the matter to the competent authorities in the Kingdom if the logo is used by an external entity or person.
Risk Prevention Measures	Employees Commencing Work Before Signing a Contract Lack of awareness of the resulting legal consequences.
Risk Mitigation Measures	Require a signed contract document before handing over any assigned items (accounts, keys, correspondence). Inform Administrations that employees may not start work before signing the contract. Immediately instruct the employee concerned to stop working.

Return all items entrusted to the employee.

Risk-Responsible Entity	Require academic, administrative, and technical staff to review their rights and duties and sign to acknowledge having done so.
Locations Affected by the Risk	Unauthorized Use of the Colleges’ Logo
Risk Description	Direct the employee to the Legal Advisor’s office to complete contract signing and explain their contractual rights and duties.
Risk Prevention Measures	Failure to Involve Legal Affairs in Drafting Regulations, Contracts, Agreements, and Administrative Decisions Legal Advisor. All College Administrations.
Risk Mitigation Measures	Some units engage external legal entities and regulations, contracts, agreements, and decisions are not reviewed without consulting the Legal Advisor. Prepare and publish the Legal Advisor’s job description to define the assigned duties.

Establish work procedures outlining the stages of contract signing.

Risk-Responsible Entity	Require academic, administrative, and technical staff to review their rights and duties and sign to acknowledge having done so.
Locations Affected by the Risk	Unauthorized Use of the Colleges’ Logo
Risk Description	Instruct Administrations and leadership not to issue regulations, contracts, agreements, or decisions until reviewed by the Legal Advisor.
Risk Prevention Measures	Prepare the Legal Advisor’s job description and publish it to define the assigned duties. Issue a circular to Administrations and leadership prohibiting the issuance of regulations, contracts, agreements, or decisions without review by the Legal Advisor. Freeze the executed contract, if possible without cost to the Colleges, and sign it again. Issue a circular to Administrations and leadership prohibiting the drafting of any contract, agreement, or decision without review by the Legal Advisor. Loss of Documents, Especially Confidential Ones, Due to Inadequate Protection
Risk Mitigation Measures	Legal Advisor. All College Administrations. Failure of the Colleges’ document-retention system. Keep original documents with the Legal Advisor.

Keep electronic copies of documents for easy retrieval upon request.

Risk-Responsible Entity	Support Services Administration.
Locations Affected by the Risk	Maintain confidentiality of access to documents. Establish disciplinary regulations concerning breaches of document confidentiality. Establish a document archive center at the Colleges.
Risk Description	Announce the loss of documents. Apply disciplinary regulations concerning breaches of document confidentiality. Contact the entity/persons related to the missing document. Announce that the missing documents are no longer valid for use. Storms and Dust
Risk Prevention Measures	Colleges building – Men’s Section. Colleges building – Women’s Section. Facilities surrounding the Colleges. These conditions occur frequently in the Qassim Region, particularly during seasons known for storms and dust, affecting teaching and learning at the Colleges, staff, and students. Risks include: Asthma attacks. Injuries caused by flying metal pieces.
Risk Mitigation Measures	Property damage caused by strong winds. Disruption to communications networks and lectures. Follow weather updates from the primary source. Secure alternative power supplies in case of an outage.

Ensure the health clinic at the Colleges has all necessary supplies and equipment.

Risk-Responsible Entity	Support Services Administration.
Locations Affected by the Risk	Maintain confidentiality of access to documents. Establish disciplinary regulations concerning breaches of document confidentiality. Establish a document archive center at the Colleges.
Risk Description	Provide sufficient masks to prevent allergies and asthma. Secure windows, awnings, and panels properly.
Risk Prevention Measures	Maintain windows and exterior doors regularly to prevent dust from entering. Use multiple communication channels to report storms and dust events. Advise staff and students to stay in a safe place, avoid leaving buildings, and avoid driving. Prepare a detailed report on the incident, improvement priorities, and recommendations, and submit it to the Chairman of the Board of Trustees.
Risk Mitigation Measures	Carry out cleaning after the event ends. Heatstroke Support Services Administration. Colleges building – Men’s Section.

Colleges building – Women’s Section.

Risk-Responsible Entity	Support Services Administration.
Locations Affected by the Risk	Facilities surrounding the Colleges.
Risk Description	College personnel suffering from heatstroke.
Risk Prevention Measures	College personnel developing illnesses due to high temperatures. Install shade structures in exposed areas of the Colleges.
Risk Mitigation Measures	Provide air conditioning in all College buildings and maintain it regularly. Provide seating areas, student clubs, recreation areas, and cafeterias within the Colleges. Raise staff awareness of the risks of heatstroke. Contact the Colleges’ primary health clinic to transport the affected person.

Provide first aid until the treating physician arrives.

Risk-Responsible Entity	Information and Statistics Center.
Locations Affected by the Risk	All College activities.
Risk Description	Advise people to avoid direct exposure to sunlight.
Risk Prevention Measures	Prepare a detailed report on the incident and recommendations, and submit it to the Chairman of the Board of Trustees. Power Outage All College facilities. All educational activities and electronic equipment come to a halt. Perform regular maintenance on the electrical system.
Risk Mitigation Measures	Provide backup generators for temporary use during outages. Operate the backup power generator. Monitor how devices and servers respond to fluctuations in electrical power. Analyze the problem to reduce the likelihood of recurrence.