[BCM] [BT] [E3] [BIA] [T2] [CBF] [7] Human Resources & Payroll

BIA Questionnaires 

Part 3: Impact Over Time of Business Functions

Notes for BCM Institute's Course Participants: This is the template for completing the "Part 3: Impact Over Time of Business Functions."

CBF-7: Human Resources & Payroll

This chapter outlines the progressive impact over time resulting from a disruption to the Human Resources & Payroll function (CBF-7) at Bandtree.

As a government-linked company (GLC) under the stewardship of Darussalam Assets, the continuity of HR and payroll operations is crucial for maintaining staff morale, ensuring legal compliance, and ensuring business stability.

The sub-CBFs within CBF-7 range from mission-critical processes, such as payroll disbursement, to longer-term activities, including training and appraisals.

Using a structured time-based impact analysis, each sub-function is evaluated against a standardised scale over various time intervals — from 4 hours to 60 days.

Purpose of Chapter

This approach identifies the escalation of impact severity over time, the associated business risk, and helps define key recovery parameters, including the Recovery Time Objective (RTO), Maximum Tolerable Period of Disruption (MTPD), and vulnerable periods where specific disruptions may result in heightened operational or reputational consequences.

The outcome of this analysis informs prioritisation and resource allocation for recovery planning, ensuring that critical HR services are restored within acceptable timeframes.

Here is the table for CBF-7: Human Resources & Payroll of Bandtree, based on the Impact Over Time analysis methodology from the BCM Institute.

Each sub-CBF is evaluated for its highest-impact area, impact escalation over time (in hours or days), and key recovery parameters, such as RTO, MTPD, and Vulnerable Period.

Table 3-1: [BIA] [P3] Impact Over Time of Business Functions (Sub-CBF) for CBF-7: Human Resources & Payroll

Legend

• Impact Scores (1–5):
  • 1 – Negligible impact
  • 2 – Minor disruption
  • 3 – Moderate impact on operations or compliance
  • 4 – Significant impact; urgent attention required
  • 5 – Critical; organisation-wide disruption, legal/financial exposure
• RTO (Recovery Time Objective): Maximum time within which a process should be recovered.
• MTPD (Maximum Tolerable Period of Disruption): Maximum acceptable downtime before severe consequences occur.
• Vulnerable Period: Specific period during which disruption causes peak impact (e.g., payroll cutoff or appraisal deadlines).

Summing Up ...

The time-based impact assessment of CBF-7: Human Resources & Payroll demonstrates that several sub-functions are highly sensitive to disruption, particularly Payroll Processing & Disbursement, Employee Records Management, and Industrial Relations.

These functions exhibit rapid impact escalation and require short recovery timeframes to prevent operational breakdowns, employee dissatisfaction, legal liabilities, or reputational harm.

Conversely, other sub-functions, such as Training & Development and Performance Appraisals, exhibit a more gradual impact curve and can be deferred temporarily during a crisis, provided they are resumed within their maximum tolerable time frames.

This analysis highlights the varying degrees of urgency across HR functions and underscores the importance of aligning recovery strategies with each function’s criticality and timing.

These insights lay the groundwork for establishing tiered recovery plans and ensuring Bandtree’s human capital infrastructure remains resilient and responsive in the face of disruption.

BIA Questionnaires 

Part 4: Supporting IT Systems and Applications

Notes for BCM Institute's Course Participants: This is the template for completing the "Part 4: Supporting IT Systems and Applications."

CBF-7: Human Resources & Payroll

The efficiency and continuity of Human Resources & Payroll (CBF-7) at Bandtree are heavily reliant on robust, integrated IT systems.

These systems facilitate the automation, accuracy, and security of key HR activities, including staff onboarding, payroll processing, records management, and employee welfare administration.

Given the sensitivity and regulatory requirements associated with HR operations, it is imperative that supporting IT platforms maintain high availability, timely recoverability, and data integrity.

Purpose of Chapter

This section identifies and catalogues the primary IT systems and applications that support each Sub-CBF under Human Resources & Payroll.

For each system, the corresponding Recovery Point Objective (RPO) and System Recovery Time Objective (System RTO) are outlined to ensure that critical data is recoverable within acceptable limits and system functionality is restored within the defined business continuity thresholds.

The section also highlights any special equipment or infrastructure necessary to sustain or restore operations in the event of a disruption.

Here is the table for CBF-7: Human Resources & Payroll of Bandtree Sdn Bhd Brunei, detailing the associated IT systems, RPO/System RTO, and supporting equipment/resources for each Sub-CBF.

Table 4: [BIA] [P4] Supporting IT Systems and Applications for CBF-7: Human Resources & Payroll

Legend

• RPO (Recovery Point Objective): Maximum tolerable data loss (time-based).
• System RTO (Recovery Time Objective): The target duration for recovering IT systems.
• Supporting Special Equipment or Resources: Physical or digital resources needed for recovery or continuity.
• Remarks: Notes on operational impact or urgency.

Summing Up ...

The analysis of supporting IT systems for CBF-7 has confirmed that critical HR functions—particularly Payroll Processing & Disbursement, Employee Records Management, and Industrial Relations—are highly dependent on timely system recovery and minimal data loss.

Applications such as HRMIS, payroll engines, document repositories, and benefits management platforms must be prioritised in the IT disaster recovery plan due to their direct impact on employees, compliance obligations, and organisational stability.

Understanding the dependencies between HR sub-functions and their enabling technologies enables Bandtree Sdn Bhd to develop targeted recovery strategies and allocate resources more effectively.

This alignment between business and IT resilience is essential to ensuring that the Human Resources & Payroll function can continue to support staff, uphold governance, and deliver uninterrupted service during adverse conditions.