Implementing Business Continuity Management for Bandtree: A Practical Guide
[Business Impact Analysis] [Part 3]
BIA Questionnaires
Part 3: Impact Over Time of Business Functions
Notes for BCM Institute's Course Participants: This is the template for completing the "Part 3: Impact Over Time of Business Functions."
CBF 2: Infrastructure Operations
Understanding how business functions are affected over time during a disruption is a fundamental aspect of Business Impact Analysis (BIA).
Purpose of Chapter
This chapter outlines the methodology for assessing the impact over time of each Critical Business Function (CBF) within an organisation.
Rather than evaluating disruptions as a static event, this approach recognises that the severity of impact often escalates the longer a function remains inoperative.
The Impact Over Time framework provides a structured view of how critical operations degrade across predefined time intervals, ranging from the initial 4 hours to 60 days.
Using a standardised impact rating scale from 1 (minimal impact) to 5 (catastrophic impact), each business function is assessed in terms of its consequences on operational continuity, financial performance, legal obligations, reputational standing, and health and safety.
This time-based impact assessment enables organisations to:
- Prioritise recovery activities and allocate resources appropriately.
- Determine accurate Recovery Time Objectives (RTO) and Maximum Tolerable Periods of Disruption (MTPD).
- Identify vulnerable periods that could compound the effects of a disruption.
By integrating this analysis into the broader Business Continuity Management (BCM) process, organisations such as Bandtree can better ensure the resilience of operations and infrastructure across various functions and sub-functions.
Here is a detailed table for Critical Business Function: CBF-2 Infrastructure Operations and its associated Sub-CBFs, incorporating the impact over time scale (1 to 5)
Note: The scores are estimated based on typical impact severity for infrastructure operations in a property management GLC context and should be reviewed and validated by stakeholders from Bandtree during BIA workshops.
Table 3: [BIA] [P3] Impact Over Time of Business Functions (Sub-CBF) for CBF-2 Infrastructure Operations
|
|
|
Impact Over Time |
|
|
|
|||||||||||
Sub-CBF |
Sub-CBF Code |
Highest-Impact Area |
4 Hour |
8 Hour |
1 Day |
2 Day |
3 Day |
5 Day |
7 Day |
10 Day |
14 Day |
21 Day |
30 Day |
60 Day |
RTO |
MTPD |
Vulnerable Period |
Facility Maintenance and Engineering Services |
2.1 |
Health & Safety, Operations Continuity |
3 |
3 |
4 |
4 |
4 |
4 |
5 |
5 |
5 |
5 |
5 |
5 |
8 Hours |
5 Days |
Weekdays, Office Hours |
Building Security and Surveillance |
2.2 |
Physical Security |
4 |
4 |
4 |
4 |
4 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
4 Hours |
3 Days |
24/7 |
Utilities Management |
2.3 |
Service Delivery, Safety |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
2 Hours |
1 Day |
24/7 |
Emergency Response and Incident Management |
2.4 |
Life Safety, Crisis Response |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
1 Hour |
1 Day |
24/7 |
Vendor and Contractor Coordination |
2.5 |
Service Continuity |
2 |
2 |
3 |
3 |
3 |
4 |
4 |
4 |
5 |
5 |
5 |
5 |
1 Day |
14 Days |
Business Hours |
Asset Condition Monitoring & Lifecycle Management |
2.6 |
Long-term Asset Performance |
1 |
1 |
2 |
2 |
3 |
3 |
3 |
4 |
4 |
4 |
4 |
5 |
2 Days |
30 Days |
Monthly Maintenance |
Renovation and Upgrading Projects |
2.7 |
Strategic Project Timelines |
1 |
1 |
2 |
2 |
2 |
3 |
3 |
3 |
3 |
4 |
4 |
5 |
3 Days |
30 Days |
Project Milestones |
Space Management and Occupancy Planning |
2.8 |
Workplace Continuity & Efficiency |
2 |
2 |
2 |
3 |
3 |
4 |
4 |
4 |
4 |
4 |
5 |
5 |
1 Day |
21 Days |
Business Resumption |
Compliance and Regulatory Management |
2.9 |
Legal/ Regulatory |
2 |
2 |
3 |
3 |
3 |
3 |
4 |
4 |
4 |
4 |
5 |
5 |
2 Days |
30 Days |
Audit or Inspection Period |
Sustainability and Environmental Management |
2.10 |
Environmental Compliance & ESG |
1 |
1 |
1 |
2 |
2 |
2 |
3 |
3 |
4 |
4 |
5 |
5 |
5 Days |
60 Days |
Environmental Event |
Legend – Impact Scores
- 1 = Negligible Impact (Very Low)
- 2 = Minor Impact (Low)
- 3 = Moderate Impact (Medium)
- 4 = Major Impact (High)
- 5 = Critical/Catastrophic Impact (Very High)
Key Notes
- RTO (Recovery Time Objective): Indicates the acceptable downtime before severe impact begins.
- MTPD (Maximum Tolerable Period of Disruption): Maximum allowable time the sub-function can be disrupted before irrecoverable consequences occur.
- Vulnerable Period: Timeframes in which disruption has amplified effects (e.g., audits, contract renewals, public reporting).
Summing Up... Part 3
The Impact Over Time analysis provides a powerful lens for viewing the dynamic effects of business disruptions.
By mapping out how the severity of impact escalates across specific timeframes, organisations are equipped with actionable insights to support continuity planning, resource allocation, and risk mitigation strategies.
This structured assessment helps define realistic recovery priorities and enhances communication across departments and stakeholders.
When paired with clearly defined RTOs and MTPDs, it serves as a cornerstone for resilient and informed decision-making during crises.
Ultimately, understanding the time-sensitive nature of operational impacts empowers organisations like Bandtree to maintain service excellence, meet stakeholder expectations, and fulfil their mandates—even in the face of unforeseen disruptions.
Implementing Business Continuity Management for Bandtree: A Practical Guide
[Business Impact Analysis] [Part 4]
BIA Questionnaires
Part 4: Supporting IT Systems and Applications
Notes for BCM Institute's Course Participants: This is the template for completing the "Part 4: Supporting IT Systems and Applications."
CBF 2: Infrastructure Operations
In today’s increasingly digital and interconnected environment, the effectiveness and resilience of critical business functions rely heavily on the seamless operation of supporting IT systems and applications.
For Bandtree, as a key player in Brunei’s government-linked infrastructure and property management sector, these systems form the backbone of its infrastructure operations.
Purpose of Chapter
This chapter outlines the essential IT systems and applications that support each sub-process within the CBF-2 Infrastructure Operations function.
It also provides an overview of their respective Recovery Point Objectives (RPOs), Recovery Time Objectives (RTOs), and any specialised equipment or resources that enable their continuity.
Understanding the interdependence between operational processes and supporting technologies is crucial to ensuring timely recovery, effective service delivery, and compliance with regulatory and governance standards, especially during disruptions.
By mapping these digital enablers to each operational component, the organisation can better prioritise recovery strategies, allocate technical resources, and ensure alignment with its overall business continuity and disaster recovery objectives.
This table is for the Critical Business Function (CBF-2) Infrastructure Operations, formatted to include the required columns. The IT Systems, RPO/RTO, and other specifics can be tailored further based on Bandtree’s actual infrastructure setup.
Table 4: [BIA] [P4] Supporting IT Systems and Applications for CBF-2 Infrastructure Operations
Sub-CBF |
Sub-CBF Code |
IT Systems and Applications |
RPO |
System RTO |
Supporting Special Equipment or Resources |
Remarks |
Facility Maintenance and Engineering Services |
2.1 |
CMMS (Computerised Maintenance Management System) |
24 hrs |
4 hrs |
Maintenance tools, spare parts, and skilled technicians |
Essential for continuous building operations |
Building Security and Surveillance |
2.2 |
CCTV System, Access Control System |
1 hr |
1 hr |
Security personnel, surveillance equipment |
Critical for safety and asset protection |
Utilities Management |
2.3 |
SCADA, BMS (Building Management System) |
4 hrs |
2 hrs |
Utility meters, backup generators, energy monitoring devices |
Supports electricity, water, and HVAC systems |
Emergency Response and Incident Management |
2.4 |
Emergency Notification System, Incident Logs |
1 hr |
1 hr |
Fire alarms, emergency kits, trained response teams |
Ensures rapid incident containment |
Vendor and Contractor Coordination |
2.5 |
Vendor Management Portal, Email Systems |
24 hrs |
8 hrs |
Communication tools, contractor agreements |
Ensures third-party service continuity |
Asset Condition Monitoring & Lifecycle Management |
2.6 |
EAM (Enterprise Asset Management System) |
24 hrs |
8 hrs |
Condition sensors, asset tagging systems |
Maintains asset health and long-term planning |
Renovation and Upgrading Projects |
2.7 |
Project Management Tools (e.g., MS Project) |
24 hrs |
12 hrs |
Design software, architectural drawings, and on-site resources |
Project-based, but needs continuity during work |
Space Management and Occupancy Planning |
2.8 |
CAFM (Computer-Aided Facility Management) |
24 hrs |
8 hrs |
Floor plans, occupancy sensors, and dashboards |
Supports space optimisation and compliance |
Compliance and Regulatory Management |
2.9 |
Document Management System, Regulatory DBs |
4 hrs |
4 hrs |
Regulatory frameworks, compliance checklists |
Ensures adherence to legal standards |
Sustainability and Environmental Management |
2.10 |
EMS (Environmental Monitoring Systems) |
24 hrs |
12 hrs |
Air/water sensors, sustainability metrics systems |
Aligns with ESG and GLC sustainability targets |
Summing Up ... for Part 4
The integration of well-maintained and secure IT systems and applications is vital for the continuity of Bandtree’s infrastructure operations.
As detailed in this chapter, each critical sub-process within CBF-2 relies on a specific set of digital tools and platforms to function efficiently and respond rapidly to incidents or disruptions.
By clearly identifying the RPOs and RTOs for each system and recognising the dependencies on special equipment and resources, Bandtree can build a resilient operational framework that supports its strategic mission and national responsibilities.
Furthermore, this alignment between technology and operations forms the basis for continual improvement, risk mitigation, and sustainable infrastructure management—key pillars in upholding public trust and regulatory compliance within the nation’s property and facilities sector.
More Information About Business Continuity Management Courses
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].