Board of Grievances
Project charter
Board Cybersecurity Programme
APPROVEDV2Approved 2025-01-31
1Project identity
- Project name
- Board Cybersecurity Programme
- Project code
- PRJ-2026-005
- Sponsor
- Eng. Majed S. Al-RasheedEng. Majed S. Al-RasheedVice President, Judicial AffairsP-011m.alrasheed@bog.gov.sa
- Project manager
- Eng. Yasser M. Al-ZahraniEng. Yasser M. Al-ZahraniDirector, CybersecurityP-026y.alzahrani@bog.gov.sa
- Business owner
- Eng. Nayef H. Al-BuqamiEng. Nayef H. Al-BuqamiDirector General, Information TechnologyP-017n.albuqami@bog.gov.sa
- Portfolio & programme
- Technology & Enterprise Systems PortfolioDigital Infrastructure Programme
- Type & methodology
- IT · Waterfall
- Current phase
- 8Monitoring & Control
2Background & rationale
A security operations centre, identity & access management and full ECC compliance.
3Objectives
- 1Build secure, reliable, cloud-first technology
Serves the strategic objectives:SO-3.2Build secure, reliable, cloud-first technology
4Scope
In scope
- A security operations centre, identity & access management and full ECC compliance.
- Migration from legacy systems
- ERP integration
Out of scope
- Operation and maintenance after the warranty period
- Work outside the approved site or system boundary
5High-level requirements
- 1Migration from legacy systems
- 2ERP integration
- 3Essential cybersecurity controls
6Deliverables
| 1 | Project management plan | 2025-03-01 |
| 2 | Main deliverable — stage 1 | 2026-01-16 |
| 3 | Main deliverable — final stage | 2026-09-11 |
| 4 | Final report | 2026-12-15 |
7Key milestones
- Charter approved2025-01-31
- Contract signed2025-05-22
- 50% of works complete2026-01-16
- Provisional acceptance2026-10-22
- Closure2026-12-15
8Budget
- Main contract72.0%27.8M
- Supervision & consulting14.0%5.4M
- Internal team9.1%3.5M
- Contingency reserve (5%)4.9%1.9M
The owning sector’s approved budgetTotal38.6M
9Timeline
10Key risks
- MediumUndetected vulnerabilities in legacy systems before SOC onboarding
11Constraints
- Stay within the approved budget
- Comply with the Government Tenders & Procurement Law
12Assumptions
- Named internal staff available throughout
- Approvals land within workflow SLAs
13Stakeholders
- Project sponsorDecisions and funding
- Business ownerAccepts deliverables, owns benefits
- Projects Follow-up Office (EPMO)Governance and compliance
14Success criteria
- 1Delivered within the approved budget
- 2On the approved date ±5%
- 3Target benefits within 12 months
15Governance structure
- Change Control BoardApproves scope, cost and schedule changesWeekly
- EPMO CommitteeMethodology compliance, data quality, stage gatesFortnightly
- Project management teamDay-to-day control, risks, issues, weekly statusWeekly