BCM BandTree

[BCM] [BT] [E4] [BIA] [P2] Impact Area Of Business Functions for CBF-1 to CBF-8

Written by Dr Goh Moh Heng | Sep 29, 2025 3:18:34 PM
CBF-1

[P2] Impact Area Of Business Functions

 CBF-1 to CBF-8

This section identifies and analyses the impact areas associated with the disruption of key sub-functions under CBF-1 to CBF-8. Each sub-CBF is assessed for its financial, operational, and reputational implications.

The objective is to determine the level of criticality these sub-CBFs bear on the organisation’s Minimum Business Continuity Objective (MBCO) and to quantify potential monetary losses and cascading effects in the event of a disruption.

Through this structured assessment, Bandtree aims to prioritise recovery efforts and implement resilience strategies to safeguard business continuity and long-term value creation.

 

Sub-CBF Code

Impact Area

Financial Impact -Monetary Loss (Estimated)

Financial Impact - Calculation of Monetary Loss (State Formula for Calculations)

Impact on MBCO - Affect MBCO

Impact on MBCO - Impact

Remarks - Description

CBF-1

 

 

 

 

 

 

1.1

Operational Disruption

$50,000–200,000/ month

Cost of reactive repairs + downtime cost (area x rate x duration)

Yes

Interruptions can halt operations, negatively impacting tenant satisfaction and safety.

This function ensures regular maintenance to reduce the risk of equipment failure or facility closure.

1.2

Asset Management / Strategic

$100,000/year

Asset value depreciation x% due to lack of monitoring

Yes

Accelerated asset failure.

Lowers residual asset value.

1.3

Strategic / Operational Efficiency

$30,000–100,000/year

Wasted space cost + operational inefficiency impact

No

Underutilised space, lost rental.

Inefficient space usage.

1.4

Supply Chain / Service Continuity

$20,000–150,000/event

Contract breach penalty + service interruption losses

Yes

Delayed works, partner trust erosion.

Vendors may disengage.

1.5

Regulatory / Safety / Legal

$100,000–500,000/incident

Fines + legal costs + injury claim + reputational damage

Yes

Non-compliance can lead to legal action, injury, and public scrutiny.

Ensures workplace safety and environmental standards.

1.6

Cost Efficiency / Sustainability

$10,000–50,000/month

Excess energy usage x cost per unit

Yes

Site shut-down & occupant safety.

Critical for business continuity.

1.7

Crisis Response / Continuity

$100,000–1,000,000/event

Downtime cost + repair + business disruption

Yes

Increased casualty risk, reputation damage.

Fails to breach regulatory duty.

1.8

Strategic Development / Investment

$250,000–5,000,000/project delay

Project delay penalty + opportunity cost + inflation impact

No

Missed milestones, client dissatisfaction.

Impacts long-term ROI.

1.9

Reputation / Revenue Retention

$50,000–300,000/year

Tenant churn rate x average rent lost per tenant

Yes

Underutilised space, lost rental.

Inefficient space usage.

1.10

Legal / Compliance / Governance

$20,000–100,000/report

Penalty per late/missing report + remediation costs

Yes

Non-compliance breaches legal duty.

Risk of license revocation.

CBF-2

 

 

 

 

 

 

2.1

Assets, Systems, Processes

$35,000

Urgent repair costs (SGD 5k/ day ×7)

Engineering Services

Downtime & SLA breaches

Delays increase asset wear

2.2

People, Reputation, Legal

$21,000

(Salaries SGD 2k/day ×7) + Breach fines SGD 7k

Security & Risk

Risk of unauthorised access

Non-availability raises liability

2.3

Processes, Financial (H), People

$28,000

(Utility cost SGD 3k/day ×7) + Operational loss SGD 7k

Site Ops

Site shut-down & occupant safety

Critical for business continuity

2.4

People, Reputation, Legal

$14,000

Emergency team cost SGD 2k/ day ×7

Safety & Compliance

Increased casualty risk, reputation damage

Fails to breach regulatory duty

2.5

Processes, Financial (S), Reputation

$7,000

SLA penalties SGD 1k/ day ×7

Procurement

Delayed works, partner trust erosion

Vendors may disengage

2.6

Assets, Financial (S), Processes

$21,000

Asset depreciation loss SGD 3k/ day ×7

Asset Mgt

Accelerated asset failure

Lowers residual asset value

2.7

Processes, Financial (S), Reputation

$42,000

Project delay penalties SGD 6k/ day ×7

Project Delivery

Missed milestones, client dissatisfaction

Impacts long-term ROI

2.8

Processes, Financial (S), People

$14,000

Revenue loss SGD 2k/ day ×7

Space Utilisation

Underutilised space, lost rental

Inefficient space usage

2.9

Legal & Regulatory, Reputation

$10,500

Fines SGD 1.5k/ day ×7

Compliance & Risk

Non-compliance breaches legal duty

Risk of license revocation

2.10

Social Responsibility, Reputation, Financial (S)

$7,000

Penalties SGD 1k/day ×7

ESG / CSR

Community & stakeholder damage

Violations of green standards

CBF-3

 

 

 

 

 

 

3.1

Reputation, Revenue

$100,000 per month

(Avg. Monthly Revenue per Client) x (No. of Affected Clients)

Yes

Loss of client trust can lead to service cancellation and long-term revenue loss.

Manages direct interactions with key clients to ensure service satisfaction and retention.

3.2

Compliance, Strategic Risk

$250,000 in penalties/fines

(Estimated Regulatory Penalty) + (Loss of Strategic Partnerships)

Yes

Poor communication may cause compliance breaches or political fallout with government entities.

Ensures alignment with governmental and stakeholder expectations to preserve operational license and reputation.

3.3

Operations, Financial

$75,000 per month

(No. of Service Contracts Disrupted) x (Avg. Monthly Value per Contract)

Yes

Service delivery disruption due to unmanaged vendors may impact operations and breach SLAs.

Coordinates third-party service providers and ensures compliance with SLAs and procurement policies.

3.4

Reputation, Social Trust

$50,000+ (reputation management cost)

(Crisis Communication Cost) + (PR Campaign to Rebuild Trust)

Yes

Negative publicity may damage public perception and investor confidence.

Handles the company’s public image, community outreach, and response to public concerns.

3.5

Human Capital, Governance

$30,000 (delays, inefficiencies)

(Avg. Delay in Decision-Making) x (Cost of Daily Operational Inefficiencies)

Yes

Miscommunication within leadership or staff may result in delayed decisions or disjointed recovery efforts.

Facilitates internal communication among departments, leadership, and board members.

3.6

Legal, Data Privacy

$150,000 (legal and recovery costs)

(Cost of Data Recovery) + (Penalty for Data Breach) + (Cost of Legal Proceedings or Compensation)

Yes

Loss of data can result in legal non-compliance, client dissatisfaction, and potential lawsuits.

Manages and secures all physical and digital records of clients and stakeholders, ensuring compliance with data protection regulations.

CBF-4

 

 

 

 

 

 

4.1

Revenue Loss, Regulatory Penalty, Customer Relationship

$100,000/ month

(Average Monthly Revenue) × (% of Billing Disruption)

Yes

Delay in revenue recognition, customer dissatisfaction, and potential non-compliance penalties

Responsible for generating and issuing invoices to customers. Disruption results in cash flow delays and compliance issues.

4.2

Revenue Loss, Operational Disruption

$80,000/ month

(Total Outstanding Receivables) × (Collection Delay Rate)

Yes

Reduced liquidity and increased operational risk due to uncollected payments

Ensures accurate collection and reconciliation of payments. Disruption affects working capital and financial visibility.

4.3

Vendor Relationship, Financial Penalty, Legal Risk

$50,000/ month

(Avg Monthly Payables) × (Penalty/Interest Rate due to Late Payment)

Indirectly

Delays in vendor payments may lead to service disruption, reputational damage, and late payment penalties.

Manages timely processing of vendor invoices. Disruption can damage vendor relationships and trigger legal or penalty charges.

4.4

Regulatory Non-compliance, Decision-Making, Strategic Planning

$70,000 per incident

(Potential Regulatory Fine) + (Cost of Rework/Restatement)

Yes

Inaccurate or delayed reporting can impact regulatory compliance and misinform executive decisions.

Provides timely and accurate financial reporting for internal and external stakeholders. Critical for transparency and control.

4.5

Procurement Delay, Service Disruption, Legal Risk

$30,000 per onboarding delay

(Cost of Delayed Service Implementation) + (Potential Legal Costs from Contract Non-compliance)

Indirectly

Delay in vendor engagement can impact operational continuity and increase legal risk.

Handles vetting, registration, and contract setup of vendors. Delay may affect project timelines and risk exposure.

4.6

Legal Penalty, Business Continuity, Governance

$150,000 per non-compliance event

(Penalty/Fine Amount) + (Reputational Damage Cost Estimation)

Yes

Non-compliance can trigger regulatory investigations, operational shutdown, and reputational damage.

Ensures adherence to statutory regulations and financial standards. Disruption poses severe legal and financial consequences.

4.7

Asset Protection, Risk Exposure, Financial Loss

$200,000 per uninsured incident

(Potential Loss Value) – (Insurance Claimable Amount)

Yes

Lack of coverage or delay in claims may increase loss severity and business recovery time.

Manages corporate insurance policies and risk-financing strategies. Disruption exposes the company to significant uninsured losses.

CBF-5

 

 

 

 

 

 

5.1

Regulatory & Legal Compliance

$500,000–2,000,000

Penalty cost per breach x no. of violations + legal fees x duration of proceedings

Yes

Disruption may result in the suspension or termination of key operational permits.

Ensures compliance with national laws and sector-specific regulations to maintain legal and operational standing.

5.2

Internal Audit & Risk Oversight

$250,000–1,000,000

Loss from undetected frauds or risks x recovery period

Yes

Delayed detection of internal risks could lead to strategic function disruption and reputational loss.

Manages internal controls, audits, and identifies enterprise risks.

5.3

Corporate Governance Monitoring

$200,000–1,000,000

Investor confidence loss estimate + board non-compliance penalty

Yes

Breaches in governance can impact trust with stakeholders and the parent company, Darussalam Assets.

Ensures effective board governance and compliance with governance frameworks.

5.4

ESG Reporting

$100,000–500,000

Regulatory non-disclosure fine + estimated impacted investment opportunity loss

No

Impacts company image, potential ESG-related investments, and stakeholder trust.

Tracks and reports on sustainability, environmental, and social governance performance.

5.5

Business Continuity Governance

$300,000–1,500,000 per incident

Downtime cost per day x duration of the unprepared event + non-compliance penalty

Yes

Inability to maintain BC program compliance affects the recovery time for all other CBFs.

Governs company-wide business continuity management and disaster recovery planning.

5.6

Strategic & Statutory Reporting

$150,000–$750,000 per month

Cost of missed reporting deadlines + penalties x delay duration

Yes

Failure to report impacts government relations and strategic planning functions.

Oversees the timely submission of reports to stakeholders.

CBF-6

 

 

 

 

 

 

6.1

ICT Infrastructure Management

$80,000 - $300,000

Loss = (Cost of downtime per hour x Hours of outage) + Repair Cost

Yes

System downtime affects user productivity.

Critical for maintaining the uptime of servers, networks, and hardware.

6.2

Property Systems Application Support

$50,000 - $200,000

Loss = (Number of impacted users x Average cost per user x Hours of system downtime)

Yes

Disruption in property management applications. This impacts the access and processing of property-related data and transactions.

Not specified

6.3

Records Retention & Archiving

$30,000 - $150,000

Loss = (Penalty Fees + Cost of Legal Actions)

Yes

Risk of non-compliance fines and legal consequences.

Essential for maintaining legally compliant records and archives.

6.4

Data Backup & Recovery

$100,000 - $600,000

Loss = (Cost to restore data + Loss from data unavailability)

No

Prevents data loss and ensures business continuity.

Critical to restore operations after data loss or system failures.

6.5

Cybersecurity & Access Control

$200,000 - $1,000,000

Loss = (Cost of breach + Regulatory fines + Reputational damage)

Yes

Potential data breaches, loss of trust, and regulatory penalties.

Protects sensitive data from unauthorized access and cyber threats.

6.6

System Development & Enhancement

$20,000 - $100,000

Loss = (Delay in project delivery x Cost per day)

No

Delayed enhancements affecting operational efficiency.

Improves system functionality, but delays may only slow down business improvements.

6.7

ICT Vendor Management

$50,000 - $250,000

Loss = (Impact from vendor failure x Downtime)

Yes

Dependency on vendors affects system availability.

Ensures that third-party services and supplies are reliable.

6.8

User Training & Support

$10,000 - $50,000

 

Loss = (Productivity loss due to lack of skills x Time)

No

Lower user proficiency and increased errors.

Important for minimizing user errors and maximizing system use efficiency.

6.9

Compliance & IT Governance

$50,000 - $300,000

Loss = (Fines + Cost of audits + Remediation costs)

Yes

Non-compliance risks and penalties.

Maintains adherence to IT policies, standards, and regulations.

6.10

Physical Records Handling

$20,000 - $100,000

 

Loss = (Cost of lost/damaged records + Recovery costs)

Yes

Loss or damage to physical records can significantly impact operations.

Safeguards paper records and physical archives.

CBF-7

 

 

 

 

 

 

7.1

Operational, Reputation

$10,000/ month

BND 2,500 x 4 (avg. critical hires delayed per month)

Yes

Delays in onboarding affect staffing for critical operations.

Critical roles may remain vacant during disruptions, which can hinder service delivery.

7.2

Compliance, Legal, Operational

$5,000/ event

BND 5,000 x no. of records not accessible

Yes

Inaccessible records can result in non-compliance with audits or employment disputes.

Legal exposure or operational inefficiencies can occur if employee data is inaccessible.

7.3

Financial, Employee Morale, Legal

$50,000/ pay cycle

Avg. BND 2,500 x 20 staff delayed payments

Yes

Delays in salary payments can cause staff dissatisfaction, resignations, or legal risks.

One of the most time-sensitive and essential HR functions to maintain continuity.

7.4

Staff Well-being, Compliance

$15,000/ month

BND 500 x 30 staff (health/insurance claims blocked)

Yes

Impacts employee welfare and could result in health, safety, or legal issues.

Must maintain minimum support for medical benefits and insurance-related claims.

7.5

Operational, Staff Development

$8,000/ quarter

Avg. BND 400 x 20 staff (promotion delays, morale)

No

Can be deferred in the short term, but prolonged delays can affect morale and retention.

Should resume within 1 month post-disruption for continuity in HR planning.

7.6

Staff Competency, Compliance

$5,000/ month

Avg. BND 250 x 20 staff x month deferred

No

Delay in training impacts compliance and long-term workforce readiness.

Resume when normalcy returns unless training is compliance-mandated.

7.7

Legal, Governance

$10,000/ event

Cost of penalties or fines for non-compliance

Yes

Policy updates ensure regulatory compliance and operational discipline.

Required to maintain alignment with Brunei’s labour laws and GLC governance standards.

7.8

Industrial Relations & Employee Grievances

$20,000/ case

Avg. legal dispute or penalty due to unresolved case

Yes

Unmanaged grievances may escalate to legal cases or industrial action.

Critical function to prevent disruption in workforce stability or public image.

CBF-8

 

 

 

 

 

 

8.1

Operational Disruption

$20,000 – $50,000

(Avg. cost/day of delayed vendor sourcing) × (no. of days delayed)

Yes

May delay procurement of essential goods/services, hindering core functions

Delays in identifying alternate vendors may halt key infrastructure services.

8.2

Legal / Compliance / Service Disruption

$50,000 – $150,000

(Contract value at risk due to breach or lapse)

Yes

May result in legal penalties or loss of services needed for MBCO

Contractual lapses affect vendor obligations, penalties, or service continuity.

8.3

Operational Delay

$10,000 – $40,000

(No. of delayed purchase orders) × (average operational delay cost per PO)

Yes

Delays can stall the procurement of urgent supplies or services

Without approvals, essential services or supplies may not be delivered.

8.4

Reputation / Operational Risk

$30,000 – $60,000

(No. of critical suppliers impacted) × (impact per supplier breakdown)

Yes

Weak communication may disrupt delivery timelines and strategic partnerships

A breakdown in supplier trust may lead to service lapses.

8.5

Service Delivery / Revenue Loss

$100,000 – $250,000

(Estimated revenue loss/day from halted services) × (days of logistics failure)

Yes

Stockouts or delivery failures affect operational continuity

Delays in stock movement affect on-site maintenance and client delivery.

8.6

Regulatory / Compliance Risk

$20,000 – $100,000

(Penalty per compliance breach) + (investigation cost)

Indirectly

Impacts audit trail and transparency, especially during emergency procurement

Non-compliance may delay approvals and increase scrutiny.

8.7

Strategic / Operational Risk

$50,000 – $200,000

(Impact of disrupted supply) + (cost of alternative sourcing)

Yes

Failure to manage risks can lead to major disruptions

Inadequate risk management leaves the supply chain vulnerable to external shocks.

8.8

Operational / Financial Risk

$5,000 – $20,000

(Cost of emergency purchase) + (premium for expedited services)

Yes

Delays in activating emergency procedures can prolong disruptions

Inability to procure critical items fast enough impacts recovery.

8.9

Operational / Reputational Risk

$30,000 – $80,000

(Cost of data restoration) + (cost of manual workaround) + (reputational damage cost)

Yes

Loss of data or system access halts all procurement activities

System failure means no visibility on vendors, orders, or stock.

 

 

 

 

 

 

 
 

Summing Up ...

The identified sub-CBFs — each bearing varying degrees of impact on revenue, operations, legal compliance, and stakeholder confidence — demonstrate the interdependencies that exist across the organisation.

By understanding the potential financial losses, operational delays, and risks associated with disruptions in these processes, Bandtree is better positioned to allocate resources, define recovery priorities, and build effective mitigation and contingency plans.

This strategic clarity enhances the company’s preparedness and responsiveness in the face of crises, ensuring that essential financial and vendor-related functions continue to support the organisation’s mission and public trust.

Ultimately, this evaluation reinforces Bandtree’s commitment to resilience, governance, and service excellence across all facets of its financial operations.

 

Implementing Business Continuity Management for Bandtree: A Practical Guide
eBook 4: Consolidate and Report Your BCM Implementation
[P2] Impact Area Of Business Functions for CBF-1 to CBF-8
 
 

 

More Information About Business Continuity Management Courses

 

To learn more about the course and schedule, click the buttons below for the  BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].

 


Please feel free to send us a note if you have any questions.