[BCM] [BT] [E3] [BIA] [T2] [CBF] [2] Infrastructure Operations

Implementing Business Continuity Management for Bandtree: A Practical Guide

[Business Impact Analysis] [Part 3]

BIA Questionnaires

Part 3: Impact Over Time of Business Functions

Notes for BCM Institute's Course Participants: This is the template for completing the "Part 3: Impact Over Time of Business Functions."

Template BIA 4

CBF 2: Infrastructure Operations

Understanding how business functions are affected over time during a disruption is a fundamental aspect of Business Impact Analysis (BIA).

Purpose of Chapter

This chapter outlines the methodology for assessing the impact over time of each Critical Business Function (CBF) within an organisation.

Rather than evaluating disruptions as a static event, this approach recognises that the severity of impact often escalates the longer a function remains inoperative.

The Impact Over Time framework provides a structured view of how critical operations degrade across predefined time intervals, ranging from the initial 4 hours to 60 days.

Using a standardised impact rating scale from 1 (minimal impact) to 5 (catastrophic impact), each business function is assessed in terms of its consequences on operational continuity, financial performance, legal obligations, reputational standing, and health and safety.

This time-based impact assessment enables organisations to:

Prioritise recovery activities and allocate resources appropriately.
Determine accurate Recovery Time Objectives (RTO) and Maximum Tolerable Periods of Disruption (MTPD).
Identify vulnerable periods that could compound the effects of a disruption.

By integrating this analysis into the broader Business Continuity Management (BCM) process, organisations such as Bandtree can better ensure the resilience of operations and infrastructure across various functions and sub-functions.

Here is a detailed table for Critical Business Function: CBF-2 Infrastructure Operations and its associated Sub-CBFs, incorporating the impact over time scale (1 to 5)

Note: The scores are estimated based on typical impact severity for infrastructure operations in a property management GLC context and should be reviewed and validated by stakeholders from Bandtree during BIA workshops.

Table 3: [BIA] [P3] Impact Over Time of Business Functions (Sub-CBF) for CBF-2 Infrastructure Operations

			Impact Over Time
Sub-CBF	Sub-CBF Code	Highest-Impact Area	4 Hour	8 Hour	1 Day	2 Day	3 Day	5 Day	7 Day	10 Day	14 Day	21 Day	30 Day	60 Day	RTO	MTPD	Vulnerable Period
Facility Maintenance and Engineering Services	2.1	Health & Safety, Operations Continuity	3	3	4	4	4	4	5	5	5	5	5	5	8 Hours	5 Days	Weekdays, Office Hours
Building Security and Surveillance	2.2	Physical Security	4	4	4	4	4	5	5	5	5	5	5	5	4 Hours	3 Days	24 by 7
Utilities Management	2.3	Service Delivery, Safety	5	5	5	5	5	5	5	5	5	5	5	5	2 Hours	1 Day	24 by 7
Emergency Response and Incident Management	2.4	Life Safety, Crisis Response	5	5	5	5	5	5	5	5	5	5	5	5	1 Hour	1 Day	24 by 7
Vendor and Contractor Coordination	2.5	Service Continuity	2	2	3	3	3	4	4	4	5	5	5	5	1 Day	14 Days	Business Hours
Asset Condition Monitoring & Lifecycle Management	2.6	Long-term Asset Performance	1	1	2	2	3	3	3	4	4	4	4	5	2 Days	30 Days	Monthly Maintenance
Renovation and Upgrading Projects	2.7	Strategic Project Timelines	1	1	2	2	2	3	3	3	3	4	4	5	3 Days	30 Days	Project Milestones
Space Management and Occupancy Planning	2.8	Workplace Continuity & Efficiency	2	2	2	3	3	4	4	4	4	4	5	5	1 Day	21 Days	Business Resumption
Compliance and Regulatory Management	2.9	Legal/ Regulatory	2	2	3	3	3	3	4	4	4	4	5	5	2 Days	30 Days	Audit or Inspection Period
Sustainability and Environmental Management	2.10	Environmental Compliance & ESG	1	1	1	2	2	2	3	3	4	4	5	5	5 Days	60 Days	Environmental Event

Legend – Impact Scores

1 = Negligible Impact (Very Low)
2 = Minor Impact (Low)
3 = Moderate Impact (Medium)
4 = Major Impact (High)
5 = Critical/Catastrophic Impact (Very High)

Key Notes
RTO (Recovery Time Objective): Indicates the acceptable downtime before severe impact begins.
MTPD (Maximum Tolerable Period of Disruption): Maximum allowable time the sub-function can be disrupted before irrecoverable consequences occur.
Vulnerable Period: Timeframes in which disruption has amplified effects (e.g., audits, contract renewals, public reporting).

Summing Up... Part 3

The Impact Over Time analysis provides a powerful lens for viewing the dynamic effects of business disruptions.

By mapping out how the severity of impact escalates across specific timeframes, organisations are equipped with actionable insights to support continuity planning, resource allocation, and risk mitigation strategies.

This structured assessment helps define realistic recovery priorities and enhances communication across departments and stakeholders.

When paired with clearly defined RTOs and MTPDs, it serves as a cornerstone for resilient and informed decision-making during crises.

Ultimately, understanding the time-sensitive nature of operational impacts empowers organisations like Bandtree to maintain service excellence, meet stakeholder expectations, and fulfil their mandates—even in the face of unforeseen disruptions.

Implementing Business Continuity Management for Bandtree: A Practical Guide

[Business Impact Analysis] [Part 4]

BIA Questionnaires

Part 4: Supporting IT Systems and Applications

Notes for BCM Institute's Course Participants: This is the template for completing the "Part 4: Supporting IT Systems and Applications."

Template BIA 5

CBF 2: Infrastructure Operations

In today’s increasingly digital and interconnected environment, the effectiveness and resilience of critical business functions rely heavily on the seamless operation of supporting IT systems and applications.

For Bandtree, as a key player in Brunei’s government-linked infrastructure and property management sector, these systems form the backbone of its infrastructure operations.

Purpose of Chapter

This chapter outlines the essential IT systems and applications that support each sub-process within the CBF-2 Infrastructure Operations function.

It also provides an overview of their respective Recovery Point Objectives (RPOs), Recovery Time Objectives (RTOs), and any specialised equipment or resources that enable their continuity.

Understanding the interdependence between operational processes and supporting technologies is crucial to ensuring timely recovery, effective service delivery, and compliance with regulatory and governance standards, especially during disruptions.

By mapping these digital enablers to each operational component, the organisation can better prioritise recovery strategies, allocate technical resources, and ensure alignment with its overall business continuity and disaster recovery objectives.

This table is for the Critical Business Function (CBF-2) Infrastructure Operations, formatted to include the required columns. The IT Systems, RPO/RTO, and other specifics can be tailored further based on Bandtree’s actual infrastructure setup.

Table 4: [BIA] [P4] Supporting IT Systems and Applications for CBF-2 Infrastructure Operations

Sub-CBF	Sub-CBF Code	IT Systems and Applications	RPO	System RTO	Supporting Special Equipment or Resources	Remarks
Facility Maintenance and Engineering Services	2.1	CMMS (Computerised Maintenance Management System)	24 hrs	4 hrs	Maintenance tools, spare parts, and skilled technicians	Essential for continuous building operations
Building Security and Surveillance	2.2	CCTV System, Access Control System	1 hr	1 hr	Security personnel, surveillance equipment	Critical for safety and asset protection
Utilities Management	2.3	SCADA, BMS (Building Management System)	4 hrs	2 hrs	Utility meters, backup generators, energy monitoring devices	Supports electricity, water, and HVAC systems
Emergency Response and Incident Management	2.4	Emergency Notification System, Incident Logs	1 hr	1 hr	Fire alarms, emergency kits, trained response teams	Ensures rapid incident containment
Vendor and Contractor Coordination	2.5	Vendor Management Portal, Email Systems	24 hrs	8 hrs	Communication tools, contractor agreements	Ensures third-party service continuity
Asset Condition Monitoring & Lifecycle Management	2.6	EAM (Enterprise Asset Management System)	24 hrs	8 hrs	Condition sensors, asset tagging systems	Maintains asset health and long-term planning
Renovation and Upgrading Projects	2.7	Project Management Tools (e.g., MS Project)	24 hrs	12 hrs	Design software, architectural drawings, and on-site resources	Project-based, but needs continuity during work
Space Management and Occupancy Planning	2.8	CAFM (Computer-Aided Facility Management)	24 hrs	8 hrs	Floor plans, occupancy sensors, and dashboards	Supports space optimisation and compliance
Compliance and Regulatory Management	2.9	Document Management System, Regulatory DBs	4 hrs	4 hrs	Regulatory frameworks, compliance checklists	Ensures adherence to legal standards
Sustainability and Environmental Management	2.10	EMS (Environmental Monitoring Systems)	24 hrs	12 hrs	Air/water sensors, sustainability metrics systems	Aligns with ESG and GLC sustainability targets

Summing Up ... for Part 4

The integration of well-maintained and secure IT systems and applications is vital for the continuity of Bandtree’s infrastructure operations.

As detailed in this chapter, each critical sub-process within CBF-2 relies on a specific set of digital tools and platforms to function efficiently and respond rapidly to incidents or disruptions.

By clearly identifying the RPOs and RTOs for each system and recognising the dependencies on special equipment and resources, Bandtree can build a resilient operational framework that supports its strategic mission and national responsibilities.

Furthermore, this alignment between technology and operations forms the basis for continual improvement, risk mitigation, and sustainable infrastructure management—key pillars in upholding public trust and regulatory compliance within the nation’s property and facilities sector.

Implementing Business Continuity Management for Bandtree: A Practical Guide
eBook 3: Starting Your BCM Implementation
MBCO	P&S	RAR T1	RAR T2	RAR T3	BCS T1	CBF

CBF 1: Asset and Facilities Management
DP	BIAQ T1	BIAQ T2	BIAQ T3	BCS T2	BCS T3	PD

More Information About Business Continuity Management Courses

To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].