Cloud-Based Disaster Recovery Frameworks for Business Continuity in Mission-Critical Saudi Organizations

References

[1] Digital Government Authority. Cloud Computing Adoption Guideline. Riyadh: DGA; 2023.

[2] Communications, Space and Technology Commission. Cloud Computing Services Provisioning Regulations. Riyadh: CST; 2023.

[3] Communications, Space and Technology Commission. Cloud Computing Regulatory Framework, Version 3. Riyadh: CST; 2023.

[4] National Cybersecurity Authority. Cloud Cybersecurity Controls, CCC-1:2020. Riyadh: NCA; 2020.

[5] National Cybersecurity Authority. Essential Cybersecurity Controls, ECC-2:2024. Riyadh: NCA; 2024.

[6] Saudi Data and Artificial Intelligence Authority. Implementing Regulation of the Personal Data Protection Law. Riyadh: SDAIA; 2024.

[7] Saudi Data and Artificial Intelligence Authority. Regulation on Personal Data Transfer Outside the Kingdom. Riyadh: SDAIA; 2024.

[8] National Institute of Standards and Technology. Zero Trust Architecture, Special Publication 800-207. Gaithersburg: NIST; 2020.

[9] National Institute of Standards and Technology. Security and Privacy Controls for Information Systems and Organizations, Special Publication 800-53 Revision 5. Gaithersburg: NIST; 2020.

[10] National Institute of Standards and Technology. The Cybersecurity Framework 2.0. Gaithersburg: NIST; 2024.

[11] International Organization for Standardization. ISO/TS 22317:2021 Security and Resilience - Business Continuity Management Systems - Guidelines for Business Impact Analysis. Geneva: ISO; 2021.

[12] International Organization for Standardization. ISO 22361:2022 Security and Resilience - Crisis Management - Guidelines. Geneva: ISO; 2022.

[13] International Organization for Standardization and International Electrotechnical Commission. ISO/IEC 27001:2022 Information Security Management Systems - Requirements. Geneva: ISO; 2022.

[14] International Organization for Standardization and International Electrotechnical Commission. ISO/IEC 27002:2022 Information Security, Cybersecurity and Privacy Protection - Information Security Controls. Geneva: ISO; 2022.

[15] Cloud Security Alliance. Business Continuity and Disaster Recovery in the Cloud. Seattle: CSA; 2021.

[16] European Union Agency for Cybersecurity. ENISA Threat Landscape 2024. Athens: ENISA; 2024.

[17] Business Continuity Institute. Good Practice Guidelines 2023: Global Guide to Business Continuity and Resilience. Caversham: BCI; 2023.

[18] Uptime Institute. Annual Outage Analysis 2024. New York: Uptime Institute; 2024.

[19] Flexera. State of the Cloud Report 2024. Itasca: Flexera; 2024.

[20] World Economic Forum. Global Cybersecurity Outlook 2024. Geneva: WEF; 2024.

[21] Issaoui A, Ortensjo J, Islam MS. Exploring GDPR compliance in cloud services: insights from Swedish public organizations on privacy compliance. Future Business Journal. 2023;9(1):107.

[22] Lee C, Kim HF, Lee BG. A literature review on the strategic shift to cloud ERP: leveraging microservice architecture and managed service providers for resilience and agility. Electronics. 2024;13(14):2885.

[23] Soveizi N, Turkmen F, Karastoyanova D. Security and privacy concerns in cloud-based scientific and business workflows: a structured review. Journal of Cloud Computing. 2023;12:47.

[24] Shastri S, Wasserman M, Chidambaram V. How design and operation of modern cloud-scale systems conflict with data protection requirements. Communications of the ACM. 2021;64(2):66-74.

[25] Jaatun MG, Pearson S, Gittler F, Leenes R, Niezen M. Enhancing accountability in the cloud. International Journal of Information Management. 2020;53:101498.

[26] Reisinger T, Wagner I, Boiten EA. Security and privacy in unified communication. ACM Computing Surveys. 2022;55(3):1-35.

[27] Weir GRS, Assmuth A, Jager N. Managing forensic recovery in the cloud. Digital Investigation. 2024;49:301742.

[28] McIntosh TR, Susnjak T, Liu T, Watters P, Nowrozy R, Halgamuge MN. Evaluating cybersecurity governance frameworks for emerging compliance risks. Computers & Security. 2024;141:103815.

[29] Kanaan A, Alkhateeb A, Alzoubi H. Technology-driven business continuity and operational risk management in healthcare digital environments. Computers in Industry. 2025;165:104215.

[30] Stamenkov G. Cloud service models, business continuity and disaster recovery planning. International Journal of Organizational Analysis. 2025;33(3):437-458.

@article{1718917,
      author = {Asim Badhuralam},
      title = {Cloud-Based Disaster Recovery Frameworks for Business Continuity in Mission-Critical Saudi Organizations},
      journal = {Iconic Research And Engineering Journals},
      year = {2026},
      volume = {9},
      number = {12},
      pages = {1907-1917},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1718917.pdf},
      abstract = {Mission-critical Saudi organizations increasingly operate digital public services, healthcare platforms, payment channels, energy systems, logistics networks, and enterprise resource planning environments through cloud-enabled infrastructure. This review develops a governance-centered framework for cloud-based disaster recovery and business continuity in the Saudi context. The study integrates recent literature, national cloud and cybersecurity requirements, international resilience guidance, and practitioner evidence from 2020 to 2025. It argues that cloud disaster recovery should not be treated as a technical backup arrangement alone; rather, it should be positioned as a board-visible capability that links business impact analysis, data classification, sovereignty obligations, cyber resilience, and measurable recovery evidence. The paper advances five objectives: to clarify critical drivers of cloud recovery adoption, map recovery patterns to business criticality, align architecture choices with Saudi regulatory expectations, identify assurance metrics for continuity governance, and propose an implementation roadmap for mission-critical sectors. A structured integrative review method was used, combining database searches, regulatory analysis, thematic coding, and framework synthesis. The findings show that the strongest recovery posture emerges when organizations combine multi-zone design, immutable backup, zero trust access, continuous replication, tested failover, contractual accountability, and evidence-based reporting. The proposed framework supports Saudi entities seeking resilient, compliant, and economically rational continuity arrangements while avoiding overdependence on undocumented recovery assumptions.},
      keywords = {Cloud Disaster Recovery, Business Continuity, Saudi Arabia, Mission-Critical Systems, Data Sovereignty, RTO, RPO, Cyber Resilience},
      month = {June},
      doi = {https://doi.org/10.64388/IREV9I12-1718917}
  }