Business Continuity Strategy
Part 2: BCS - Recovery Strategies
Notes for BCM Institute's Course Participants: This is the template for completing the "Part 2: BCS - Recovery Strategies"
CBF-8: Procurement & Supply Chain Management
The ability to maintain continuity in procurement and supply chain operations is vital to the sustained delivery of Bandtree Brunei’s services.
As a government-linked company operating within the infrastructure and real estate management sector, Bandtree relies heavily on its network of suppliers, vendors, and logistical support systems to meet its obligations.
Any disruption to procurement-related functions can result in delays, cost escalations, and reputational risk.
Purpose of Chapter
This chapter outlines the Business Continuity Strategies (BCS) designed to recover the sub-processes under CBF-8: Procurement & Supply Chain Management in the event of a disruption.
It identifies specific Recovery Time Objectives (RTOs) for each sub-function, outlines the recovery strategies to be implemented, defines the recovery locations, and provides detailed justifications for the selected approaches.
The strategies are aligned with Bandtree’s operational priorities and business continuity objectives, ensuring that critical procurement functions can resume within acceptable timeframes with minimal business impact.
By clearly defining recovery actions in advance, Bandtree enhances its resilience and readiness to restore procurement operations in a timely and structured manner, thereby safeguarding essential supply lines and maintaining service continuity across the organisation.
Here is the Recovery Strategies Table for CBF-8: Procurement & Supply Chain Management of Bandtree Brunei, aligned with BCM Institute’s Mitigation Strategies guidelines:
Table 1: [BCS] Recovery Strategies for CBF-8: Procurement & Supply Chain Management
Sub-Critical Business Function |
Sub-CBF Code |
RTO |
Recovery Strategy |
Recovery Location |
Details of Recovery Strategy |
Justification for Selected Recovery Strategy |
Vendor Selection & Prequalification |
8.1 |
48 hrs |
Work-from-Alternate Site |
Backup Office – Level 3 HQ |
Enable remote access to vendor database; the procurement team operates from an alternate HQ floor using backup laptops and VPN. |
Process is document-driven and can resume with basic connectivity and access to evaluation records. |
Contract Management |
8.2 |
72 hrs |
System Redundancy & Remote Access |
DR Data Centre & Cloud Storage |
Contract management system replicated on the cloud with version control. Legal & Procurement units can retrieve contracts from SharePoint. |
Contracts must be accessible for reference and compliance; recovery time allows for partial manual processing. |
Purchase Requisition & Approval |
8.3 |
24 hrs |
ERP Access via Cloud Backup |
Remote Work / Mobile Devices |
A procurement system integrated with an ERP, enabling mobile approval workflows via a cloud platform for rapid requisition processing. |
Ensures uninterrupted purchasing of critical supplies, especially for operations and emergency services. |
Supplier Relationship Management |
8.4 |
72 hrs |
Manual & Digital Hybrid Approach |
HQ Backup Office |
Maintain hardcopy backup of supplier contacts; use CRM backup to re-establish communication lines. |
Not immediately critical, but needed within 3 days to manage ongoing contracts and service quality. |
Inventory & Logistics Coordination |
8.5 |
8 hrs |
Alternate Logistics Channel Activation |
Partner Warehouses & Mobile App |
Pre-agreed fallback logistics partners activated; inventory status accessed via mobile inventory system; limited dispatch operations restarted. |
Inventory disruptions impact asset delivery; fast recovery ensures facilities maintenance continuity. |
Compliance & Procurement Governance |
8.6 |
72 hrs |
Remote Access to SOPs & Audit Tools |
SharePoint & Offsite Systems |
SOPs and audit records are cloud-hosted; compliance team operates remotely to conduct checks and documentation compliance. |
Non-immediate recovery; however, needed soon to support audit trails and vendor governance. |
Risk Management in Supply Chain |
8.7 |
48 hrs |
Backup Risk Registry Access |
DR Cloud Portal |
Cloud-based risk register and supplier risk reports are accessible to identify priority threats and update mitigation plans. |
Supports proactive decision-making during disruption; helps prioritize vendor engagement and contingency activation. |
Emergency Procurement |
8.8 |
4 hrs |
Pre-Approved Vendor Activation Plan |
HQ Emergency Room / Remote Access |
An emergency vendor list is maintained both offline and on mobile devices; procurement bypass protocols are approved and ready for fast-track activation. |
Critical for continuing essential operations; rapid access prevents operational shutdowns. |
Procurement System & Data Management |
8.9 |
24 hrs |
System Failover & Data Synchronisation |
DR Server & Cloud Platform |
Procurement systems backed up daily; auto-failover mechanisms in place to switch to DR system within the RTO. |
Ensures business continuity across all procurement sub-functions; essential for data integrity and operational resumption. |
Legend/Explanation
- RTO (Recovery Time Objective): The targeted maximum allowable time to recover the function.
- Recovery Strategy: The planned approach to restore the function within the RTO.
- Recovery Location: The physical or virtual location where recovery will be carried out.
- Details: Specifics on how the recovery is implemented.
- Justification: The rationale behind selecting the specific strategy is based on criticality and impact.
Summing Up ...
In summary, the recovery strategies presented in this chapter are specifically developed to ensure that CBF-8: Procurement & Supply Chain Management can resume promptly and effectively following a disruption.
Each sub-function’s strategy has been crafted based on its criticality, interdependencies, and contribution to the organisation’s Minimum Business Continuity Objectives (MBCO).
The inclusion of alternative systems, off-site backups, pre-approved vendor arrangements, and remote work capabilities ensures a comprehensive and multi-layered approach to recovery.
Implementing these strategies not only strengthens Bandtree’s preparedness and response capabilities but also upholds its commitment to uninterrupted service delivery in support of national infrastructure initiatives.
With clearly defined recovery procedures and justifications in place, Bandtree is better positioned to minimise risks, maintain operational integrity, and recover swiftly from adverse events affecting its procurement and supply chain operations.
More Information About Business Continuity Management Courses
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].