[BCM] [BT] [E3] [BIA] [DP] [CBF] [6] Information Systems & Records Management

Implementing Business Continuity Management for Bandtree: A Practical Guide

Bann_BCM_BIA_Detailed Business Processes

Detailed Business Processes

CBF-6: Information Systems & Records Management

In today’s digitally driven operational landscape, the role of Information Systems & Records Management is critical to the continuity and resilience of any organisation.

For Bandtree, a government-linked company (GLC) under Darussalam Assets specialising in corporate property management, this function plays a pivotal role in supporting day-to-day business activities and long-term strategic objectives.

Purpose of Chapter

This chapter outlines the detailed business processes (Sub-CBFs) under CBF-6: Information Systems & Records Management, which ensure the effective management of digital platforms, physical records, data integrity, cybersecurity, and compliance with national and corporate standards.

These processes form the backbone of operational continuity, enabling secure, timely access to critical information, facilitating communication across departments, and supporting the infrastructure necessary for property and facilities management throughout Brunei Darussalam.

Each sub-function has been tailored to reflect the real-world operational environment of Bandtree, focusing on its role in managing infrastructure, safeguarding data assets, and maintaining compliance with both internal governance and regulatory mandates.

CBF-6: Information Systems & Records Management

Definition: This function ensures the secure, effective, and compliant management of digital and physical records, ICT infrastructure, and systems that support Bandtree's core operations.

Table 1: [BIA] [DP] Detailed Business Process (Sub-CBF) for CBF 6: Information Systems & Records Management

Sub-CBF Code	Sub-CBF	Description	Examples Specific to Bandtree
6.1	ICT Infrastructure Management	Maintenance and operation of core IT infrastructure, including servers, networks, and endpoints.	- Managing servers at HQ Building (Level 4, Simpang 751) - Maintaining LAN/WAN connectivity across government-linked properties
6.2	Property Systems Application Support	Management and support of key software platforms used for property and facilities management.	- Supporting the FMIS (Facilities Management Information System) - Managing helpdesk support for real estate tracking applications
6.3	Records Retention & Archiving	Managing physical and digital document storage, ensuring proper archival according to legal and internal retention policies.	- Archiving tenancy contracts and building maintenance logs - Ensuring compliance with the Brunei government’s record-keeping requirements
6.4	Data Backup & Recovery	Ensuring the backup of critical data and restoration capability in the event of system failure or data loss.	- Daily backup of property leasing data - Offsite/cloud backups for lease payment systems
6.5	Cybersecurity & Access Control	Protecting IT assets from cyber threats and managing access rights and user authentication.	- Implementing endpoint protection for HQ staff devices - Controlling system access for third-party vendors or consultants
6.6	System Development & Enhancement	Managing upgrades, enhancements, or the implementation of new digital tools aligned with business needs.	- Upgrading property portfolio dashboards for reporting to Darussalam Assets - Developing digital forms for internal workflows
6.7	ICT Vendor Management	Oversight of third-party ICT providers, including hardware, software, and support services.	- Managing contracts with local ICT firms supporting the helpdesk and infrastructure - Evaluating the performance of software vendors for FM platforms
6.8	User Training & Support	Providing user education and helpdesk support on ICT systems and data handling protocols.	- Conducting training for staff on document digitisation workflows - Running workshops on cybersecurity awareness
6.9	Compliance & IT Governance	Ensuring all information systems meet national standards, GLC requirements, and internal policies.	- Aligning with Brunei Digital Economy Masterplan 2025 - Auditing ICT operations for regulatory compliance
6.10	Physical Records Handling	Management of non-digital documents including secure storage, retrieval, and destruction.	- Maintaining physical archives of property deeds - Securely disposing of obsolete tenancy agreements

Detailed Business Processes (Sub-CBF) Under CBF-6: Information Systems & Records Management

Sub-CBF Code	Sub-CBF Name	Description	Examples for Bandtree
6.1	ICT Infrastructure Management	Operation, maintenance, and upgrading of IT hardware and network infrastructure.	Managing servers, switches, and Wi-Fi access at HQ; ensuring uptime for property management platforms.
6.2	Property Systems Application Support	Management and user support of software systems for property and facilities operations.	Supporting the Facilities Management Information System (FMIS) used to monitor and manage real estate.
CBF-6.3	Records Retention & Archiving	Ensuring secure storage, archiving, and proper retention schedules for digital and physical records.	Archiving lease agreements, maintenance records, and government communications.
CBF-6.4	Data Backup & Recovery	Backup of critical operational data and ensuring timely recovery in case of data loss or failure.	Performing daily backups of tenant billing data; cloud disaster recovery for key systems.
CBF-6.5	Cybersecurity & Access Control	Protection of systems and data from unauthorized access and cyber threats.	Implementing firewalls, endpoint security, and secure login protocols for internal systems.
CBF-6.6	System Development & Enhancement	Customisation, enhancement, or development of new digital tools to meet operational needs.	Enhancing internal dashboards for building performance reporting; automating contract tracking.
CBF-6.7	ICT Vendor Management	Oversight and coordination with third-party ICT service and solution providers.	Managing contracts with local software vendors; evaluating service levels of IT support providers.
CBF-6.8	User Training & Support	Providing training and ongoing technical support for internal users.	Training staff on document digitisation; helpdesk support for system access issues.
CBF-6.9	Compliance & IT Governance	Ensuring compliance with internal ICT policies, industry standards, and national regulations.	Aligning practices with Brunei’s Cybersecurity Order and Darussalam Assets’ governance requirements.
CBF-6.10	Physical Records Handling	Secure management, storage, and disposal of physical (paper-based) documents.	Organising storage for archived tenancy files; shredding expired physical contracts.

Summing Up...

The comprehensive breakdown of CBF-6: Information Systems & Records Management illustrates its indispensable role in ensuring business continuity at Bandtree.

From ICT infrastructure management to cybersecurity, data recovery, and physical records handling, each sub-function serves to uphold the reliability, security, and efficiency of the company’s information ecosystem.

By clearly defining and documenting these sub-CBFs, Bandtree strengthens its preparedness against operational disruptions, cyber incidents, and system failures.

Moreover, it reinforces compliance with governance expectations set forth by Darussalam Assets and national digital policy frameworks.

As Bandtree continues to expand and modernise its property management services, the resilience of its information systems will remain a foundational pillar of its success and service continuity.

Implementing Business Continuity Management for Bandtree: A Practical Guide
eBook 3: Starting Your BCM Implementation
MBCO	P&S	RAR T1	RAR T2	RAR T3	BCS T1	CBF

CBF 6: Information Systems & Records Management
DP	BIAQ T1	BIAQ T2	BIAQ T3	BCS T2	BCS T3	PD

More Information About Business Continuity Management Courses

To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].