Supporting IT Systems and Applications
For Bandtree, as a key player in Brunei’s government-linked infrastructure and property management sector, these systems form the backbone of its infrastructure operations.
This section outlines the essential IT systems and applications that support each sub-process within each CBF.
It also provides an overview of their respective Recovery Point Objectives (RPOs), Recovery Time Objectives (RTOs), and any specialised equipment or resources that enable their continuity.
Understanding the interdependence between operational processes and supporting technologies is crucial to ensuring timely recovery, effective service delivery, and compliance with regulatory and governance standards, especially during disruptions.
By mapping these digital enablers to each operational component, the organization can better prioritize recovery strategies, allocate technical resources, and ensure alignment with its overall business continuity and disaster recovery objectives.
|
CBF |
Sub-CBF |
Sub-CBF Code |
IT Systems and Applications |
RPO |
System RTO |
Supporting Special Equipment or Resources |
Remarks |
|
CBF-1 |
Property and Facility Maintenance Management |
1.1 |
CMMS (Computerised Maintenance Management System) |
24 hrs |
4 hrs |
Maintenance tools, mobile inspection devices |
Essential for daily building and asset upkeep |
|
CBF-1 |
Asset Lifecycle and Condition Monitoring |
1.2 |
Asset Management System, IoT Sensors |
24 hrs |
4 hrs |
Condition monitoring tools, asset tagging devices |
Enables informed decision-making for repairs, replacement, and valuation |
|
CBF-1 |
Space Planning and Allocation |
1.3 |
CAD Software, Space Management Tools |
48 hrs |
24 hrs |
Floor plans, occupancy analytics software |
Supports efficient use of facilities |
|
CBF-1 |
Vendor and Contractor Management |
1.4 |
Vendor Management Portal, Procurement System |
24 hrs |
8 hrs |
Contract databases, procurement tools |
Ensures timely services and maintenance response |
|
CBF-1 |
Health, Safety, Security & Environment (HSSE) Compliance |
1.5 |
HSSE Compliance Tracking System, Incident Report System |
12 hrs |
4 hrs |
PPE, safety monitoring equipment |
Mandatory for legal and operational safety |
|
CBF-1 |
Energy and Utilities Management |
1.6 |
Building Management System (BMS), Energy Monitoring System |
12 hrs |
4 hrs |
Smart meters, HVAC sensors |
Direct impact on cost and sustainability targets |
|
CBF-1 |
Emergency and Incident Response for Facilities |
1.7 |
Incident Response Management System, Alert Notification |
0 hrs |
1 hr |
Emergency kits, PA systems, and fire safety equipment |
Critical for occupant safety and business continuity |
|
CBF-1 |
Capital Projects and Renovation Oversight |
1.8 |
Project Management Tools, Budgeting Software |
48 hrs |
24 hrs |
Site equipment, contractor access systems |
Long-term planning function, less time-sensitive |
|
CBF-1 |
Tenant and Stakeholder Relationship Management |
1.9 |
CRM System, Helpdesk Ticketing System |
24 hrs |
8 hrs |
Communication tools (email, phone, service portal) |
Maintains client satisfaction and operational harmony |
|
CBF-1 |
Regulatory and Compliance Reporting |
1.10 |
Compliance Reporting Tool, Document Management System |
24 hrs |
8 hrs |
Access to legal documentation and government portals |
Legal requirement, especially for GLCs |
|
CBF-2 |
Facility Maintenance and Engineering Services |
2.1 |
CMMS (Computerised Maintenance Management System) |
24 hrs |
4 hrs |
Maintenance tools, spare parts, and skilled technicians |
Essential for continuous building operations |
|
CBF-2 |
Building Security and Surveillance |
2.2 |
CCTV System, Access Control System |
1 hr |
1 hr |
Security personnel, surveillance equipment |
Critical for safety and asset protection |
|
CBF-2 |
Utilities Management |
2.3 |
SCADA, BMS (Building Management System) |
4 hrs |
2 hrs |
Utility meters, backup generators, energy monitoring devices |
Supports electricity, water, and HVAC systems |
|
CBF-2 |
Emergency Response and Incident Management |
2.4 |
Emergency Notification System, Incident Logs |
1 hr |
1 hr |
Fire alarms, emergency kits, trained response teams |
Ensures rapid incident containment |
|
CBF-2 |
Vendor and Contractor Coordination |
2.5 |
Vendor Management Portal, Email Systems |
24 hrs |
8 hrs |
Communication tools, contractor agreements |
Ensures third-party service continuity |
|
CBF-2 |
Asset Condition Monitoring & Lifecycle Management |
2.6 |
EAM (Enterprise Asset Management System) |
24 hrs |
8 hrs |
Condition sensors, asset tagging systems |
Maintains asset health and long-term planning |
|
CBF-2 |
Renovation and Upgrading Projects |
2.7 |
Project Management Tools (e.g., MS Project) |
24 hrs |
12 hrs |
Design software, architectural drawings, and on-site resources |
Project-based, but needs continuity during work |
|
CBF-2 |
Space Management and Occupancy Planning |
2.8 |
CAFM (Computer-Aided Facility Management) |
24 hrs |
8 hrs |
Floor plans, occupancy sensors, and dashboards |
Supports space optimisation and compliance |
|
CBF-2 |
Compliance and Regulatory Management |
2.9 |
Document Management System, Regulatory DBs |
4 hrs |
4 hrs |
Regulatory frameworks, compliance checklists |
Ensures adherence to legal standards |
|
CBF-2 |
Sustainability and Environmental Management |
2.10 |
EMS (Environmental Monitoring Systems) |
24 hrs |
12 hrs |
Air/water sensors, sustainability metrics systems |
Aligns with ESG and GLC sustainability targets |
|
CBF-3 |
Client Relationship Management |
3.1 |
CRM System, Outlook, Client Portal |
4 hrs |
8 hrs |
Company laptops, secure VPN access, and mobile devices |
Key to maintaining trust and continuity of service |
|
CBF-3 |
Stakeholder Engagement & Government Liaison |
3.2 |
Email, Shared Drive, MS Teams |
4 hrs |
24 hrs |
Secure communications tools, government liaison kits |
Sensitive information handling requires timely communication |
|
CBF-3 |
Service Provider & Contractor Management |
3.3 |
Vendor Management System, Email, SharePoint |
8 hrs |
24 hrs |
Internet-enabled devices, contract repository |
Essential to ensure business continuity with outsourced services |
|
CBF-3 |
Public and Community Engagement |
3.4 |
Corporate Website CMS, Social Media Platforms |
24 hrs |
48 hrs |
Internet access, media kits, event tools |
May be deferred short-term, but vital for brand and reputation management |
|
CBF-3 |
Internal Stakeholder Communication (Staff & Board) |
3.5 |
MS Teams, Email, HR System, SharePoint |
4 hrs |
8 hrs |
Video conferencing hardware, secure internal portal |
Supports morale and decision-making during disruptions |
|
CBF-3 |
Client and Stakeholder Records Management |
3.6 |
Document Management System (DMS), SharePoint |
4 hrs |
8 hrs |
Backup storage, secure cloud archive, encryption tools |
Critical for compliance, audits, and ongoing relationships |
|
CBF-4 |
Customer Billing & Invoicing |
4.1 |
Billing System, ERP (e.g., SAP) |
4 hours |
8 hours |
Secure printing facilities, ERP terminals |
High dependency on system uptime |
|
CBF-4 |
Payment Collection & Reconciliation |
4.2 |
Payment Gateway, Bank Portals |
2 hours |
4 hours |
Secure network access, payment devices |
Real-time reconciliation critical |
|
CBF-4 |
Accounts Payable (AP) Processing |
4.3 |
ERP System, Financial Software |
8 hours |
1 business day |
Finance workstations, scanning tools |
Delays impact vendor relationships |
|
CBF-4 |
Financial Reporting & Budgeting |
4.4 |
Budgeting Tools, Excel, ERP System |
24 hours |
2 business days |
Financial modelling tools, secure storage |
Time-sensitive during the month-end |
|
CBF-4 |
Vendor Onboarding & Contract Mgmt |
4.5 |
Contract Management System, ERP |
24 hours |
2 business days |
Document archiving tools |
May delay project starts |
|
CBF-4 |
Regulatory & Compliance Management |
4.6 |
Compliance Software, ERP |
4 hours |
1 business day |
Regulatory filing tools |
Critical for audit and governance |
|
CBF-4 |
Insurance & Risk Financing Admin |
4.7 |
Risk Mgmt Platform, Insurance Portals |
24 hours |
2 business days |
Insurance databases, comms tools |
Important for financial continuity |
|
CBF-5 |
Regulatory & Legal Compliance |
5.1 |
Document Management System (DMS), Email |
24 hrs |
8 hrs |
Legal reference databases, compliance registers |
Essential for avoiding legal breaches |
|
CBF-5 |
Internal Audit & Risk Oversight |
5.2 |
Audit Software, Risk Register Platform |
24 hrs |
12 hrs |
Secure access to audit trails, risk reports |
Supports internal controls and transparency |
|
CBF-5 |
Corporate Governance Monitoring |
5.3 |
Governance Dashboard, MS SharePoint |
48 hrs |
12 hrs |
Board reporting tools, governance checklists |
Required for executive-level oversight |
|
CBF-5 |
ESG Reporting |
5.4 |
ESG Reporting Software, Data Analytics Tool |
72 hrs |
24 hrs |
|
|
|
CBF-5 |
Business Continuity Governance |
5.5 |
BCP Management Platform, Email |
24 hrs |
8 hrs |
BIA & BCP documentation repository |
Ensures BC planning and coordination |
|
CBF-5 |
Strategic & Statutory Reporting |
5.6 |
Financial Reporting System, Excel |
24 hrs |
12 hrs |
Regulatory filing templates, secure archives |
For compliance with regulatory deadlines |
|
CBF-6 |
ICT Infrastructure Management |
6.1 |
Network management tools, server OS |
< 4 hours |
4 hours |
Network switches, firewalls, and servers |
Critical to maintain connectivity and system availability |
|
CBF-6 |
Property Systems Application Support |
6.2 |
Property management software |
< 8 hours |
8 hours |
Application servers, database servers |
Supports core property management business operations |
|
CBF-6 |
Records Retention & Archiving |
6.3 |
Document management systems |
< 24 hours |
24 hours |
Secure digital archives and physical storage facilities |
Ensures regulatory compliance and records preservation |
|
CBF-6 |
Data Backup & Recovery |
6.4 |
Backup software and cloud storage |
< 1 hour |
2 hours |
Backup servers, cloud backup platforms |
Essential for data protection and restoration |
|
CBF-6 |
Cybersecurity & Access Control |
6.5 |
Security monitoring tools, IAM systems |
Immediate |
Immediate |
Firewalls, intrusion detection systems, and multi-factor authentication devices |
Protects against cyber threats and unauthorised access |
|
CBF-6 |
System Development & Enhancement |
6.6 |
Development platforms, version control systems |
N/A |
N/A |
Dev environments, testing servers |
Ongoing improvements to systems to meet business needs |
|
CBF-6 |
ICT Vendor Management |
6.7 |
Vendor management platforms |
N/A |
N/A |
Communication tools, contract databases |
Coordinates with external IT service providers |
|
CBF-6 |
User Training & Support |
6.8 |
Helpdesk software, e-learning platforms |
N/A |
N/A |
Training rooms, support tools |
Ensures users can effectively use ICT systems |
|
CBF-6 |
Compliance & IT Governance |
6.9 |
Compliance tracking and audit software |
N/A |
N/A |
Reporting tools, documentation systems |
Maintains adherence to IT policies and regulations |
|
CBF-6 |
Physical Records Handling |
6.10 |
Physical storage management systems |
N/A |
N/A |
Secure filing cabinets, access controls |
Manages physical document security and access |
|
CBF-7 |
Staff Recruitment & Onboarding |
7.1 |
HRMIS, Email System, Online Job Portals |
24 hours |
2 Days |
Internet access, scanners, and onboarding kits |
Delay affects staffing timelines and project execution |
|
CBF-7 |
Employee Records Management |
7.2 |
HRMIS, SharePoint, Document Management |
12 hours |
1 Day |
Secure file storage, digital archive system |
Essential for audits, compliance, and internal HR processes |
|
CBF-7 |
Payroll Processing & Disbursement |
7.3 |
Payroll System, Financial ERP, HRMIS |
4 hours |
1 Day |
Payroll servers, secure banking interfaces |
High priority; delayed payroll can cause significant dissatisfaction |
|
CBF-7 |
Employee Benefits & Welfare Admin |
7.4 |
HRMIS, Benefits Management Portal |
24 hours |
2 Days |
Benefits vendor access, claim forms |
Critical during medical, insurance or emergency claims |
|
CBF-7 |
Performance Management & Appraisals |
7.5 |
HRMIS, Appraisal & KPI System |
48 hours |
5 Days |
Dashboard system, performance data tools |
Delays impact promotions and strategic workforce decisions |
|
CBF-7 |
Training & Development |
7.6 |
LMS (Learning Mgmt System), HRMIS |
48 hours |
7 Days |
e-Learning platforms, projectors, training rooms |
Can be delayed temporarily; necessary for certification and skills renewal |
|
CBF-7 |
HR Policy Development & Compliance |
7.7 |
Document Repository, Policy Mgmt System |
48 hours |
5 Days |
Legal databases, compliance tracking tools |
Required to meet evolving legal and policy compliance |
|
CBF-7 |
Industrial Relations & Employee Grievances |
7.8 |
HRMIS, Case Management System |
12 hours |
2 Days |
Meeting facilities, grievance tracking tools |
Delays may escalate internal disputes and legal risk |
|
CBF-8 |
Vendor Selection & Prequalification |
8.1 |
e-Procurement Portal |
2 hrs |
8 hrs |
Access terminals, approval tokens |
Delay affects the procurement cycle and inventory ordering |
|
CBF-8 |
Supplier Relationship Management |
8.4 |
Supplier Portal, CRM |
24 hrs |
48 hrs |
Communication devices, contact database |
Long-term service quality and response tracking depend on system access |
|
CBF-8 |
Inventory & Logistics Coordination |
8.5 |
Inventory Management System (IMS) |
4 hrs |
12 hrs |
Barcode scanners, warehouse terminals |
Physical asset visibility and dispatch coordination depend on real-time data |
|
CBF-8 |
Compliance & Procurement Governance |
8.6 |
Compliance Monitoring Tools |
12 hrs |
24 hrs |
Audit support tools, policy reference systems |
Necessary to meet audit and regulatory deadlines |
|
CBF-8 |
Risk Management in Supply Chain |
8.7 |
Risk Monitoring Dashboard, BI Tools |
24 hrs |
48 hrs |
Risk tracking sheets, analytics infrastructure |
Enables proactive vendor disruption mitigation |
|
CBF-8 |
Emergency Procurement |
8.8 |
ERP Emergency Module, Mobile Access |
2 hrs |
4 hrs |
Mobile procurement devices, rapid approval access |
Requires rapid activation for urgent needs (e.g. facility outages) |
|
CBF-8 |
Procurement System & Data Management |
8.9 |
Central Procurement System (e.g., SAP SRM) |
1 hr |
4 hrs |
Cloud backup, DR-enabled servers |
The core system for all procurement activities must be regularly backed up |
The integration of well-maintained and secure IT systems and applications is vital for the continuity of Bandtree’s infrastructure operations.
As detailed in this section, each critical sub-process within each CBF relies on a specific set of digital tools and platforms to function efficiently and respond rapidly to incidents or disruptions.
By clearly identifying the RPOs and RTOs for each system and recognising the dependencies on special equipment and resources, Bandtree can build a resilient operational framework that supports its strategic mission and national responsibilities.
Furthermore, this alignment between technology and operations forms the basis for continual improvement, risk mitigation, and sustainable infrastructure management—key pillars in upholding public trust and regulatory compliance within the nation’s property and facilities sector.
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].
|
Please feel free to send us a note if you have any questions. |
||