[BCM] [ASMPT] [E2] [C5] Business Continuity Strategy

Chapter 5

Implementing Business Continuity Strategy Phase as Part of the Business Continuity Management Planning Methodology for ASMPT

Introduction

The Business Continuity Strategy (BCS) phase is a cornerstone of ASMPT’s Business Continuity Management (BCM) planning methodology, aligning directly with the ISO 22301 requirements.

This phase transforms the findings of the Business Impact Analysis (BIA) and Risk Assessment (RAR) into actionable strategies that protect ASMPT’s most critical business functions.

By focusing on mitigation, prevention, and recovery measures, ASMPT ensures that its semiconductor and electronics assembly operations can withstand disruptions ranging from supply chain interruptions to technology failures, safeguarding both its global reputation and customer trust.

What Does the Business Continuity Strategy Phase Entail?

The BCS phase involves the design and selection of strategies that reduce ASMPT’s vulnerabilities while ensuring that recovery time objectives (RTOs) and recovery point objectives (RPOs) can be achieved. This process requires collaboration between ASMPT’s BCM coordinators, business unit leaders, and executive management to balance cost, feasibility, and operational effectiveness.

1. Mitigation Strategies

Mitigation strategies aim to reduce ASMPT’s exposure to risk before an incident occurs.

• Example at ASMPT: Installing redundant power supply systems in manufacturing plants located in Hong Kong and China to minimise production downtime during power outages.
• Example at ASMPT: Securing multiple logistics partners to diversify shipping routes for high-value components, ensuring continuity in the event of port closures or geopolitical disruptions.

2. Prevention Strategies

Prevention strategies are proactive measures to avoid disruptions altogether.

• Example at ASMPT: Implementing stringent cybersecurity protocols, including advanced intrusion detection systems and multi-factor authentication, to prevent ransomware attacks targeting design and production data.
• Example at ASMPT: Conducting preventive maintenance programs for critical assembly equipment, ensuring machines remain in peak condition and reducing the likelihood of mechanical failures.

3. Recovery Strategies

Recovery strategies enable ASMPT to resume critical business functions quickly after an incident.

• Example at ASMPT: Establishing a secondary production site in Southeast Asia to serve as a backup in case primary manufacturing hubs face prolonged disruption.
• Example at ASMPT: Creating cloud-based backups of R&D design files, allowing engineering teams in different regions to continue product development even if local servers become inaccessible.

Integrating Strategies into ASMPT’s BCM Framework

Once selected, these strategies are integrated into ASMPT’s continuity plans for each critical business function. The process involves:

• Assigning responsibilities to business unit BCM coordinators and ensuring alignment with corporate governance.
• Documenting strategy details in ASMPT’s BCM plans, ensuring clear procedures are accessible during disruptions.
• Testing selected strategies through walkthroughs and simulation exercises to confirm effectiveness and identify gaps.

This ensures strategies are not just conceptual but embedded into ASMPT’s operational resilience framework.

Summing Up …

The Business Continuity Strategy phase provides ASMPT with a structured, proactive approach to safeguard its operations against disruption. By adopting a combination of mitigation, prevention, and recovery measures, ASMPT strengthens its ability to protect employees, sustain production, and maintain customer confidence during crises.

Ultimately, these strategies transform ASMPT’s BCM framework into a practical, actionable program that enhances resilience, supports compliance with ISO 22301, and reinforces ASMPT’s position as a trusted global leader in semiconductor and electronics assembly solutions.