[BCM] [BT] [E3] [BIA] [T2] [CBF] [8] Procurement & Supply Chain Management

BIA Questionnaires

Part 3: Impact Over Time of Business Functions

Notes for BCM Institute's Course Participants: This is the template for completing the "Part 3: Impact Over Time of Business Functions."

CBF-8: Procurement & Supply Chain Management

This chapter presents a detailed analysis of how disruptions to Bandtree’s critical business functions (CBFs) affect the organisation over time.

The assessment of “impact over time” is a crucial component of the Business Impact Analysis (BIA), as it reveals the rate at which disruption severity escalates across specific business functions and sub-processes.

By measuring the impact across defined time intervals—from as short as four hours to as long as sixty days—this analysis helps Bandtree identify which functions require urgent restoration (Recovery Time Objective – RTO) and the point beyond which disruption becomes intolerable (Maximum Tolerable Period of Disruption – MTPD).

It also highlights vulnerable periods when business functions are most at risk, such as during project milestones, audit cycles, or emergency operations.

Given Bandtree’s strategic position as a government-linked entity under Darussalam Assets, with responsibilities tied to national infrastructure and property management, ensuring the timely recovery of its critical functions is essential not only for operational continuity but also for national-level service assurance.

Based on your requirements and BCM Institute’s Impact Over Time methodology, here is a comprehensive impact analysis table for CBF-8: Procurement & Supply Chain Management of Bandtree.

This table outlines the sub-functions (Sub-CBFs), their highest-impact area, the severity of disruption over time (rated 1–5), along with the defined Recovery Time Objective (RTO), Maximum Tolerable Period of Disruption (MTPD), and the Vulnerable Period during which the business is at critical risk.

Table 3: [BIA] [P3] Impact Over Time of Business Functions (Sub-CBF) for CBF-8: Procurement & Supply Chain Management

Legend

• Impact Scale (1–5):
  1 = Negligible
  2 = Minor
  3 = Moderate
  4 = Significant
  5 = Severe
• RTO (Recovery Time Objective): The maximum acceptable downtime before recovery must occur to avoid a significant impact.
• MTPD (Maximum Tolerable Period of Disruption): The maximum time a process can be disrupted before causing unacceptable impact.
• Vulnerable Period: Timeframes during which disruptions have heightened risk due to business cycles or operational dependencies.

Summing Up ... for Part 3

The findings in this chapter provide a time-based perspective on the vulnerabilities and criticality of Bandtree’s operations.

The structured evaluation of each business function’s impact over time enables informed prioritisation of recovery efforts and resource planning during disruptions.

Key insights from this chapter—such as which functions must be restored within hours versus days—will inform the development of targeted recovery strategies in the next phase of the Business Continuity Management (BCM) process.

These insights also help ensure alignment with Bandtree’s Minimum Business Continuity Objectives (MBCOs) and support compliance with internal policies and external regulatory requirements.

Ultimately, understanding how impacts evolve strengthens Bandtree’s resilience posture and enhances its capacity to maintain service delivery, uphold stakeholder confidence, and recover effectively from any disruptive event.

.

BIA Questionnaires

Part 4: Supporting IT Systems and Applications

Notes for BCM Institute's Course Participants: This is the template for completing the "Part 4: Supporting IT Systems and Applications."

CBF-8: Procurement & Supply Chain Management

The effective functioning of CBF-8: Procurement & Supply Chain Management at Bandtree Brunei relies heavily on a suite of digital tools and applications that support procurement planning, vendor engagement, inventory tracking, contract governance, and risk mitigation.

Purpose of Chapter

This chapter identifies the critical IT systems and applications that underpin each sub-process of the procurement function, outlining their Recovery Point Objectives (RPO), System Recovery Time Objectives (System RTO), and dependencies on specialised equipment or resources.

Given the time-sensitive and high-value nature of procurement activities—particularly during emergencies or project deadlines—it is imperative to ensure high availability, swift recovery, and data integrity of supporting systems.

These applications enable seamless coordination between departments, vendors, and external regulatory stakeholders, ensuring operational continuity and compliance with organisational and national procurement standards.

Below is the requested table for CBF-8: Procurement & Supply Chain Management of Bandtree Brunei, detailing the IT systems and applications, Recovery Point Objective (RPO), System Recovery Time Objective (RTO), supporting special equipment and resources, and additional remarks for each sub-process.

Table 4: [BIA] [P4] Supporting IT Systems and Applications for CBF-8: Procurement & Supply Chain Management

Legend

• RPO (Recovery Point Objective): Maximum acceptable data loss measured in time.
• System RTO (Recovery Time Objective): Maximum acceptable downtime before system functionality must be restored.
• Special Equipment/Resources: Tools, devices, or infrastructure necessary to support the system's operational continuity.

Summing Up ... for Part 4

The analysis of supporting IT systems and applications confirms that uninterrupted access to digital tools is critical to maintaining the integrity and efficiency of Bandtree’s procurement and supply chain operations.

Downtime or data loss in these systems could cause severe disruptions in inventory management, vendor coordination, compliance reporting, and emergency procurement response.

To mitigate these risks, Bandtree must maintain robust IT disaster recovery capabilities, including system redundancy, cloud backups, and clearly defined Recovery Point Objectives (RPOs) and Recovery Time Objectives (RTOs) for each core system.

This chapter serves as a key input for IT continuity planning, ensuring that procurement sub-CBFs are prioritised appropriately in the event of a disruption and can be recovered within tolerable timeframes to meet business and stakeholder expectations.