Supporting IT Systems and Applications
This section outlines the essential IT systems and applications that support each sub-process within each CBF.
It also provides an overview of their respective Recovery Point Objectives (RPOs), Recovery Time Objectives (RTOs), and any specialised equipment or resources that enable their continuity.
Understanding the interdependence between operational processes and supporting technologies is crucial to ensuring timely recovery, effective service delivery, and compliance with regulatory and governance standards, especially during disruptions.
By mapping these digital enablers to each operational component, the organisation can better prioritise recovery strategies, allocate technical resources, and ensure alignment with its overall business continuity and disaster recovery objectives.
|
CBF |
Sub-CBF |
Sub-CBF code |
RTO |
IT Systems and Applications |
RPO |
System RTO |
Supporting Special Equipment or Resources |
Remarks |
|
CBF-1 |
Property and Facility Maintenance Management |
1.1 |
8-Hour |
CMMS (Computerised Maintenance Management System) |
24 hrs |
4 hrs |
Maintenance tools, mobile inspection devices |
Essential for daily building and asset upkeep |
|
CBF-1 |
Health, Safety, Security & Environment (HSSE) Compliance |
1.5 |
4-Hour |
HSSE Compliance Tracking System, Incident Report System |
12 hrs |
4 hrs |
PPE, safety monitoring equipment |
Mandatory for legal and operational safety |
|
CBF-1 |
Energy and Utilities Management |
1.6 |
4-Hour |
Building Management System (BMS), Energy Monitoring System |
12 hrs |
4 hrs |
Smart meters, HVAC sensors |
Direct impact on cost and sustainability targets |
|
CBF-1 |
Emergency and Incident Response for Facilities |
1.7 |
4-Hour |
Incident Response Management System, Alert Notification |
0 hrs |
1 hr |
Emergency kits, PA systems, and fire safety equipment |
Critical for occupant safety and business continuity |
|
CBF-2 |
Facility Maintenance and Engineering Services |
2.1 |
8-Hour |
CMMS (Computerised Maintenance Management System) |
24 hrs |
4 hrs |
Maintenance tools, spare parts, and skilled technicians |
Essential for continuous building operations |
|
CBF-2 |
Building Security and Surveillance |
2.2 |
4-Hour |
CCTV System, Access Control System |
1 hr |
1 hr |
Security personnel, surveillance equipment |
Critical for safety and asset protection |
|
CBF-2 |
Utilities Management |
2.3 |
2-Hour |
SCADA, BMS (Building Management System) |
4 hrs |
2 hrs |
Utility meters, backup generators, energy monitoring devices |
Supports electricity, water, and HVAC systems |
|
CBF-2 |
Emergency Response and Incident Management |
2.4 |
1-Hour |
Emergency Notification System, Incident Logs |
1 hr |
1 hr |
Fire alarms, emergency kits, trained response teams |
Ensures rapid incident containment |
|
CBF-6 |
ICT Infrastructure Maintenance |
6.1 |
8-Hour |
Network Monitoring Tools, Service Desk Software |
4 hours |
8 hours |
Hardware inventory, diagnostic tools |
Supports all digital operations |
|
CBF-6 |
Application Support & Patch Management |
6.2 |
4-Hour |
Patch Management System, IT Service Mgmt |
4 hours |
4 hours |
Testing environments, vendor support access |
Ensures system reliability and security |
|
CBF-6 |
Data Backup & Recovery |
6.4 |
4-Hour |
Backup software and cloud storage |
< 1 hour |
2 hours |
Backup servers, cloud backup platforms |
Essential for data protection and restoration |
|
CBF-6 |
Cybersecurity & Access Control |
6.5 |
4-Hour |
Security monitoring tools, IAM systems |
Immediate |
Immediate |
Firewalls, intrusion detection systems, and multi-factor authentication devices |
Protects against cyber threats and unauthorised access |
|
CBF-8 |
Emergency Procurement |
8.8 |
4-Hour |
ERP Emergency Module, Mobile Access |
2 hrs |
4 hrs |
Mobile procurement devices, rapid approval access |
Requires rapid activation for urgent needs (e.g. facility outages) |
The integration of well-maintained and secure IT systems and applications is vital for the continuity of Bandtree’s infrastructure operations.
As detailed in this section, each critical sub-process within each CBF relies on a specific set of digital tools and platforms to function efficiently and respond rapidly to incidents or disruptions.
By clearly identifying the RPOs and RTOs for each system and recognising the dependencies on special equipment and resources, Bandtree can build a resilient operational framework that supports its strategic mission and national responsibilities.
Furthermore, this alignment between technology and operations forms the basis for continual improvement, risk mitigation, and sustainable infrastructure management—key pillars in upholding public trust and regulatory compliance within the nation’s property and facilities sector.
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].
|
Please feel free to send us a note if you have any questions. |
||