RSK-0047Electronic Skills-test Halls — Makkah Region
Privacy requirements for e-test recordings under the Personal Data Protection Law
A risk's detail, response, contingency and residual risk.
Risk statement
From cause to event to impact — with the preventive controls before the event and the contingency after it
Cause
E-test recordings hold candidates’ images and personal data, and no policy yet sets how they are stored, for how long, and who may view them
Preventive controls
- A privacy impact assessment of e-testing with the data office
- Encrypt recordings and limit viewing to the test committee and the candidate through Muqawil
- Retention period approved by the Head of the Qualification & Training Sector
3 / 3
Event
Privacy requirements for e-test recordings under the Personal Data Protection Law
A finding from the personal-data regulator, or candidates objecting to recording
Contingency
Run the halls without keeping recordings for now, relying on the written proctoring record
Impact
Recording suspended in the new halls or the storage platform reworked, delaying 180 test seats in the Makkah region
Assessment
The level before and after the response
Inherent
Residual
Exposure
SAR 900K
Residual
56% off the score
Score trend
Last six months
- Score
- Target residual
Escalation path
Escalation engine: a high risk unreviewed for 10 days notifies the PM, 15 the programme manager, 20 the PMO director
Last reviewed 10 days ago · Outside the engine — below «high»
Project manager
Current levelEng. Yasser M. Al-Zahrani
Currently followed up here- 2
Programme manager
Eng. Omar H. Bawazir
- 3
PMO director
Dr. Noura M. Al-Otaibi
- 4
Executive committee
Dr. Abdullah S. Al-Qahtani
By the PMO director’s decision
Mitigation plan
Each action with its owner and date — tick it off when complete
A privacy impact assessment of e-testing with the data office
Eng. Yasser M. Al-ZahraniEng. Yasser M. Al-ZahraniDirector, CybersecurityP-026y.alzahrani@sca.saIn progressIn 23 days2026-11-2010 Jumada II 1448 AHEncrypt recordings and limit viewing to the test committee and the candidate through Muqawil
Eng. Omar H. BawazirEng. Omar H. BawazirDirector, IT InfrastructureP-024o.bawazir@sca.saNot startedIn 48 days2026-12-156 Rajab 1448 AHRetention period approved by the Head of the Qualification & Training Sector
Eng. Turki A. Al-AnaziEng. Turki A. Al-AnaziHead, Qualification & Training SectorP-010t.alanazi@sca.saNot startedIn 74 days2027-01-102 Shaʻban 1448 AH
Trigger
A finding from the personal-data regulator, or candidates objecting to recording
Contingency
Run the halls without keeping recordings for now, relying on the written proctoring record