IoL Workflows
Administrative   Family M · Communications, events, relationships  ·  IoL Administrative Affairs

AW-23 · Contracts, MoUs and Legal Review Administration

Primary KPIsnone
Contributes to
TriggerAny proposal for a relationship that would bind IoL or MBRU; a counterparty's draft; a renewal alert; a request to vary or terminate; the annual reconciliation
EndpointThe register shows, for every live agreement, counterparty, type, value, start and end dates, renewal terms, signatory, obligations, agreement or MoU number, storage location and the dependent workflows notified; every executed instrument can be produced within the standard
OBEF touchpoint**Agreement or MoU number.** The number recorded here is the evidence that a research partner was aware of the collaboration (KPI 4.3 and 5.4 via WF-17), that a mobility or joint-degree option is CAA-approved (KPI 5.3 via WF-01 and WF-24), and that a placement site is approved (WF-13). WF-24 owns the OBEF classification of a partnership; AW-23 owns the legal instrument and its register

BPMN 2.0 (ISO/IEC 19510), generated from the procedure section of this document. Lanes are the roles in the RACI; a cylinder marks a capture point and the KPI it feeds; a diamond is a decision point. Click a task to jump to its step. Scroll to zoom, drag to pan.

AW-23 — Contracts, MoUs and Legal Review Administration

Workflow ID AW-23
Pack owner IoL Administrative Affairs (decision of 2 September 2026; see Architecture/04_Ownership_Model.md)
Family M — Communications, events and relationships
Ownership Slice of MBRU legal and contracts office. MBRU Legal reviews and negotiates legal terms and holds the institutional contract policy; signature authority sits where AW-05 and the MBRU delegation place it; IoL owns intake, classification, the departmental contracts register, obligation tracking, renewal alerts and notification of dependent workflows [IoL to confirm]
Governing policy MBRU contracts and legal review policy; MBRU delegation of authority; Dubai Health governance for agreements binding the health system; MBRU data protection policy; CAA requirements for collaborative and mobility provision [IoL to confirm]; ISO 9001:2015 clause 8.4; ISO 21001:2018 clause 8.4
Interfaces WF-24 partnerships; WF-17 research partnership; WF-13 placements; WF-01 programme design; WF-20 IP; AW-05 delegation; AW-04 records; AW-11 payments; AW-12 revenue; AW-16 data protection; AW-10 procurement; AW-22 brand
OBEF touchpoint Agreement or MoU number. The number recorded here is the evidence that a research partner was aware of the collaboration (KPI 4.3 and 5.4 via WF-17), that a mobility or joint-degree option is CAA-approved (KPI 5.3 via WF-01 and WF-24), and that a placement site is approved (WF-13). WF-24 owns the OBEF classification of a partnership; AW-23 owns the legal instrument and its register
Process owner ______________
Version 0.1 draft
Effective
Next review

An agreement IoL cannot find is an agreement IoL does not have. Four OBEF KPIs, every placement and every research collaboration rest on producing a signed, numbered, in-date instrument on demand.


1. Purpose

To ensure that every agreement IoL enters, relies on or is bound by is identified before it is agreed in principle, routed to MBRU Legal, signed only by a person with authority to sign it, recorded in one register with its number, dates, obligations and signatory, tracked through its life, varied or terminated only through the same route, and stored so that it can be produced within the service standard. Legal safety comes first; the evidence value follows from it.

2. Scope

Scope statement. This procedure manages an agreement from the first proposal of a relationship that would bind IoL or MBRU, through classification, legal review, approval, execution and registration, to obligation tracking, renewal, variation, termination and archiving.

Applies to. MoUs; partnership and collaboration agreements; placement-site agreements; research collaboration agreements; dual or joint degree and mobility agreements; sponsorship in either direction; service and consultancy contracts; NDAs; data-sharing and data-processing agreements; licences; letters of intent and any document a counterparty could rely on as a commitment.

Does not apply to. Purchase orders on MBRU standard terms (AW-10); adjunct and clinical-educator appointment letters (AW-08); employment contracts (MBRU HR); the OBEF classification and contribution valuation of a partnership (WF-24); the academic approval of a placement site (WF-13); institutional contract policy and the conduct of legal negotiation (MBRU Legal).

Applicable requirements. ISO 9001:2015 clauses 7.5 and 8.4; ISO 21001:2018 clause 8.4; MBRU contracts and delegation policies and Dubai Health governance [IoL to confirm]; CAA Standards for collaborative provision and mobility [IoL to confirm edition]; UAE data protection law; OBEF guide v11.5 Appendix B evidence requirements for KPIs 4.3, 5.3 and 5.4.

3. Trigger, boundary and endpoint

Trigger Any proposal for a relationship that would bind IoL or MBRU; a counterparty's draft; a renewal alert; a request to vary or terminate; the annual reconciliation
First activity Opening a register row with a provisional number before anything is agreed in principle
Last activity Archiving the executed instrument or termination record under AW-04 with the register row closed
Endpoint The register shows, for every live agreement, counterparty, type, value, start and end dates, renewal terms, signatory, obligations, agreement or MoU number, storage location and the dependent workflows notified; every executed instrument can be produced within the standard
Upstream Requesting Owners; WF-24, WF-17, WF-13, WF-01; AW-10 and AW-21 (non-standard terms)
Downstream WF-24, WF-17, WF-13, WF-01 (number and validity); AW-11, AW-12, AW-16, AW-22 (terms); AW-04 (storage); AW-25

The boundary with WF-24 is the register. WF-24 keeps the partnership register with the OBEF classification and contribution values; AW-23 keeps the contracts register with the instrument. They share the agreement number and reconcile annually.

4. SIPOC

Element Content
Suppliers Requesting Owners; counterparties; MBRU Legal; Budget Holders; Data Protection; Partnerships Office; CAA via WF-01 and WF-24
Inputs Proposal; counterparty draft or MBRU template; AW-05 matrix; budget confirmation; AW-16 assessment; CAA position; existing register entries for the counterparty
Process Intake and register row → classify → route → negotiate → approve to sign → execute and number → complete register and obligations → notify dependents → track → renewal alerts → vary or terminate by the same route → archive → reconcile annually
Outputs Executed instrument with a number; complete register row; obligations schedule; renewal alerts; notifications; variation and termination records; archived instrument
Customers Requesting Owners; WF-24, WF-17, WF-13, WF-01; MBRU Legal; auditors; MoHESR; the counterparty
Success criteria No agreement in force off the register; none signed without review and AW-05 authority; every obligation owned; no expiry without a prior decision; every instrument retrievable within the standard; zero unexplained differences at the WF-24 reconciliation

5. Accountability

Process owner. IoL Contracts Administrator or equivalent [IoL to confirm], with authority to refuse to register an agreement that has not passed review and signature control.

Step Requesting Owner Contracts Administrator MBRU Legal Signatory (AW-05) Data Protection (AW-16) Partnerships (WF-24)
Open the register row at intake R A/R I I I I
Classify and route C A/R C I C C
Legal review and negotiation of terms C I A/R I C I
Data-protection review of data-sharing terms C R C I A/R I
Approve to sign I R C A/R I I
Execute, number and complete the register C A/R I R I I
Notify dependent workflows I A/R I I I R
Track obligations and decide on renewal A/R R C I I C
Authorise variation or termination R R C A/R I I
Reconcile with the WF-24 register I A/R I I I R

Budget or income treatment is confirmed by the Budget Holder under AW-02.

Signature authority [IoL to confirm against AW-05 and the MBRU delegation]

Instrument Signatory
MoU, letter of intent or template NDA, no financial commitment Senior Director, IoL, or as MBRU delegation provides
Agreement with financial commitment or income The AW-05 level for full-term value, not per year
Placement, research, mobility, joint-degree or data-sharing agreement; any instrument binding Dubai Health MBRU institutional signatory, or Dubai Health authority, as their governance provides

Escalation.

Condition Escalates to Within
Agreement in force but not registered, or signed without review or outside AW-05 Senior Director, IoL, and MBRU Legal; non-conformity via AW-24 Same day
Renewal alert unanswered 30 days before expiry Requesting Owner's line manager Immediately
Mobility or joint-degree agreement without a CAA position; data-sharing agreement without an AW-16 assessment Programme Director and WF-24; Data Protection Before legal review proceeds

6. Procedure

  1. Intake. The Requesting Owner notifies the Administrator at first contact, before terms are discussed, using the intake form: purpose, counterparty, type, term, value or in-kind element, personal data, IP, and the dependent IoL workflow. The Administrator opens a register row with a provisional number and checks for an existing agreement with the counterparty. [CONTROL] Nothing that could be read as a commitment is sent before the row exists. Decision point. If a live agreement covers the relationship, the request becomes a variation (step 11).

  2. Classify. Type from the section 2 list, value band, financial commitment or income, personal data, IP, placement, research, mobility or joint award, and whether an MBRU template exists. This sets the routing and the signatory.

  3. Route for review. [CONTROL] Every instrument goes to MBRU Legal except an unamended MBRU template listed as pre-cleared [IoL to confirm which]. In parallel: data-sharing terms to AW-16; financial commitment to AW-02 and income to AW-12; IP to WF-20; research collaborations to the WF-17 project record; placement sites to WF-13; mobility and joint-degree agreements to WF-01 and WF-24 for the CAA pre-approval check; any partnership to WF-24 for classification. Decision point. A mobility or joint-degree agreement does not proceed until WF-24 confirms the CAA position: KPI 5.3 scores zero for an exchange under an unapproved agreement, and the learner exposure is worse.

  4. Negotiate. MBRU Legal negotiates legal terms; the Requesting Owner negotiates academic, service or commercial content within the Budget Holder's mandate. Drafts pass through the Administrator, who keeps the version history. [CONTROL] No side letter, email undertaking or verbal assurance forms part of an agreement.

  5. Approve to sign. The Administrator assembles the signature pack: final draft, Legal clearance, AW-16 clearance and CAA position where applicable, budget or income confirmation, and the register row. The Authorised Signatory approves. [CONTROL] The negotiator does not sign; the Requesting Owner does not sign their own agreement; anyone with an interest in the counterparty declares it under MBRU conflict-of-interest policy and takes no part. Value is assessed over the full term.

  6. Execute and number. Both parties sign; the Administrator confirms the signed versions are identical, assigns the definitive number in the form [IoL to confirm] and files the instrument, with originals held as MBRU policy provides. [CONTROL] A number is assigned only to a fully executed instrument.

  7. Complete the register row. Counterparty (normalised to the AW-22 organisation list), type, value, start and end dates, renewal terms and notice period, signatories, storage location, Requesting Owner and number. Every obligation on either side goes into the obligations schedule with an owner, a due date and a status. [CONTROL] A row without an end date or an obligations schedule is flagged at the monthly check.

  8. Notify dependent workflows. Within 5 working days of execution: number, type, dates and validity window to WF-24 for the partnership register; to WF-17 for Agreement/MOU Number on the research project record; to WF-13 for the approved-site list; to WF-01 where a mobility or joint-degree component depends on it; to AW-11 or AW-12, AW-16 and AW-22 for their terms. [CONTROL] The notification is logged per recipient; an agreement nobody downstream knows about evidences nothing.

  9. Track obligations. The Requesting Owner reviews the schedule each quarter and reports met, due, overdue or in breach. Payments are made only through AW-11 against the schedule; income through AW-12. Decision point. Suspected breach goes to MBRU Legal via the Administrator within 5 working days.

  10. Run renewal alerts. Alerts at 180, 90 and 30 days before expiry or notice deadline. The Requesting Owner records renew, renegotiate, expire or terminate by 60 days before expiry, and WF-24, WF-13 and WF-17 are told. [CONTROL] No agreement on which a placement, project or mobility option depends expires without the dependent workflow owner's written acceptance.

  11. Vary. Any change to term, scope, value, parties or data handling repeats steps 3 to 8 as a numbered variation against the parent. [CONTROL] Variation by email or conduct is not recognised; the Administrator refuses to record it and refers it to MBRU Legal.

  12. Terminate or expire. The Administrator records date, reason, surviving obligations (confidentiality, data return, IP, publication rights) and the AW-16 confirmation that personal data has been returned or destroyed. Dependent workflows are told.

  13. Archive. Instrument, variations, signature pack, schedule and termination record go to AW-04 with the row marked closed, never deleted.

  14. Reconcile annually. The Administrator and the Partnerships Office compare the two registers: every partnership has a live or explicitly expired instrument, every partnership instrument is classified, and the numbers match. Both sign. [CONTROL] The reconciliation is dated before the WF-26 evidence freeze, so the numbers cited in Institute - Research Projects.xlsx and Institute Partnerships.xlsx are the numbers here.

7. Information handled and interfaces

Flow Content Classification To or from
In Intake form; counterparty drafts; clearances (Legal, AW-16, budget, CAA position) Confidential, restricted Requesting Owners; upstream workflows; MBRU Legal; AW-16; AW-02; WF-24
Out Executed instrument with number Confidential; register access list only Contracts repository; AW-04
Out Number, type, dates, validity window Internal WF-24, WF-17, WF-13, WF-01
Out Payment and income terms; data obligations; publicity rights Internal, financial or restricted AW-11, AW-12; AW-16; AW-22
Register Counterparty, type, value, dates, renewal, signatory, obligations, number, storage, owner, status, AW-16 reference Confidential Maintained here; read by AW-24, AW-25, WF-24

8. Controls

Stated as assertions an auditor can test.

# Control Evidence
C1 Every agreement in force appears on the register with a definitive number Register versus WF-24, WF-13 and WF-17 records and AW-11 payments citing an agreement
C2 Every executed instrument has MBRU Legal clearance or a pre-cleared template reference on file Signature pack sample
C3 Every signature is at or above the AW-05 level for full-term value Signature pack versus the matrix
C4 Negotiator and signatory differ, and no signatory has an undeclared interest Signature pack; declarations
C5 Every data-sharing agreement carries an AW-16 assessment reference Register
C6 No mobility or joint-degree agreement was executed without the CAA position recorded Register; WF-24 and WF-01 records
C7 Every row has an end date, an obligations schedule with owners, and notifications logged; no agreement expired without a decision recorded 60 days before Monthly register check; renewal decision log
C8 No variation exists outside the register Live agreements against correspondence; AW-11 payments outside schedule
C9 Every executed instrument can be produced within 5 working days Retrieval test at AW-24 audit
C10 The two registers reconcile annually with a signed record dated before the WF-26 evidence freeze Reconciliation record

9. Exceptions and escalation

Exception Authorised by Rationale required Recorded where
Urgent execution before full review (regulator, safety or funding deadline) Senior Director, IoL, with MBRU Legal informed the same day The deadline and the terms accepted; full review within 10 working days Register, marked PROVISIONAL
Counterparty insists on its own terms over the MBRU template MBRU Legal Legal's risk assessment Register and signature pack
Agreement discovered in force but never registered Contracts Administrator, with a non-conformity in AW-24 How it arose; validity; retrospective review by MBRU Legal Register, marked LEGACY; AW-24
Letting an agreement lapse that a dependent workflow relies on Requesting Owner, with the dependent owner's written acceptance The consequence for placements, projects or KPI evidence Renewal decision log

This procedure must never: allow a commitment before a register row exists; assign a definitive number to an unexecuted draft; supply WF-17 or WF-24 with a number that has no executed instrument behind it; let a mobility or joint-degree agreement carry a registered learner without the CAA position recorded; accept an informal variation; let anyone but the Administrator edit the register; or delete a row.

10. Service standards

Service Standard
Register row opened at intake 2 working days
Classification and routing 5 working days from a complete intake form
MBRU Legal review Per MBRU Legal's standard [IoL to confirm]; chased at 15 working days
AW-16 review of data-sharing terms 10 working days, in parallel
Signature pack assembled after clearances 3 working days
Number, filing, register completion and notifications 5 working days from execution
Renewal alerts 180, 90 and 30 days before expiry or notice deadline
Renewal decision recorded 60 days before expiry
Retrieval of an executed instrument 5 working days; 2 working days for a regulator or MoHESR request
Annual reconciliation with WF-24 Before the WF-26 evidence freeze

11. Records and retention

Record System Retention Owner
Contracts register Contracts register [IoL to confirm system] Permanent Contracts Administrator
Intake, classification, drafts, correspondence and signature pack Contracts repository Life of agreement plus 7 years Contracts Administrator
Executed instruments and variations Contracts repository; originals per MBRU policy Life of agreement plus 10 years, or longer where MBRU or law requires [IoL to confirm] Contracts Administrator, then AW-04
Obligations schedule, quarterly status, renewal decisions, notification log Contracts register Life of agreement plus 7 years Requesting Owner and Administrator
Termination records and surviving obligations Contracts repository Longest surviving obligation plus 7 years Contracts Administrator
Annual reconciliation record Contracts register and WF-24 register 10 years Contracts Administrator

Retention must cover the OBEF evidence window for any KPI the agreement evidences; the Ministry may demand the instrument behind an Agreement/MOU Number in a later cycle.

12. Risks and controls

# Risk Consequence Control Owner
1 Staff agree terms informally before intake MBRU bound without review Step 1 rule; induction briefing; C1 Contracts Administrator
2 Signature below the AW-05 level or by the wrong person Invalid or unauthorised commitment Signature matrix; C3; C4 Authorised Signatory
3 Agreement expires unnoticed while a placement, project or mobility option depends on it Learner without a valid site agreement; KPI evidence invalid Renewal alerts; written-acceptance rule; C7 Requesting Owner
4 Number cited in OBEF templates does not match an instrument on file Evidence fails on demand; claim withdrawn C1; C10; reconciliation before the evidence freeze Contracts Administrator
5 Mobility or joint-degree agreement executed without CAA pre-approval KPI 5.3 scores zero; learners on an unapproved award Step 3 stop; C6 Programme Director via WF-01 and WF-24
6 Data-sharing agreement inconsistent with the AW-16 assessment Breach of law; incident under AW-16 Joint review; C5 Data Protection
7 Obligations untracked; payments outside the schedule Overpayment, breach, dispute Obligations schedule; AW-11 pays only against it; C8 Requesting Owner
8 Register edited or rows deleted Loss of the evidence base Write access limited to the Administrator; AW-15 access review AW-15
9 Legacy agreements never registered Unknown exposure and evidence Legacy sweep at implementation; LEGACY route Senior Director, IoL

13. Performance measures

Dimension Measure Target
Compliance Agreements in force with a register row and a definitive number 100%
Compliance Executed instruments with clearance, AW-05 signature and, where applicable, an AW-16 reference on file, on sample 100%
Timeliness Register completed and dependents notified within 5 working days of execution 95%
Timeliness Renewal decisions recorded 60 days before expiry 100%
Accuracy Unexplained differences at the WF-24 reconciliation 0
Evidence Instruments retrieved within 5 working days on test 100%
Experience Requesting Owners rating the process clear and timely, annual pulse 80%
Touchpoint Numbers cited by WF-17, WF-24, WF-13 and WF-01 that match an executed instrument 100%

14. Change control

Date Version Change Reason Approved by
2026-09-02 0.1 Initial draft IoL administrative pack draft, unapproved