[BCM] [ALPS] [E1] [C10] Identifying Critical Business Functions

 

 

Introduction

Business Continuity Management (BCM) at ALPS Healthcare should begin with a clear understanding of the business functions most critical to sustaining Singapore's public healthcare supply chain during disruptions.

As a national integrated supply chain management agency supporting the public healthcare sector, ALPS performs activities spanning strategic procurement, sourcing, contracting, inventory management, warehousing, logistics, and supply chain technology.

ALPS states that it purchases drugs, medical and non-medical supplies, equipment and services for Singapore's three public healthcare clusters and their Public Healthcare Institutions (PHIs).

For BCM purposes, not every activity should automatically receive the same recovery priority.

The objective is to determine which functions, if disrupted, could most seriously affect the availability of essential healthcare supplies and services, patient safety, contractual and regulatory obligations, public healthcare operations, financial commitments or ALPS's ability to coordinate the national healthcare supply chain.

Identifying Critical Business Functions (CBFs) therefore provides the foundation for the subsequent Business Impact Analysis (BIA).

Once the CBFs have been established, ALPS can progressively determine their supporting processes, dependencies, recovery priorities, Minimum Business Continuity Objectives (MBCOs), Recovery Time Objectives (RTOs), resource requirements and appropriate continuity strategies.

The CBF catalogue proposed in this chapter should consequently be treated as a starting hypothesis for the BCM implementation, rather than as a final BIA determination. Each proposed CBF should subsequently be validated with the relevant business owners and senior management through the BIA process.

 

What is a Critical Business Function (CBF)?

For this implementation guide, the concept of a Critical Business Function follows the BCM Institute's BCMpedia definition.

BCMpedia describes CBFs as business activities and processes that need to be restored following disruption so that the organisation can protect its assets, meet organisational needs and satisfy regulatory requirements.

It further associates CBFs with activities that, if disrupted, could prevent the organisation from achieving its Minimum Business Continuity Objective (MBCO).

Applied to ALPS, a CBF is therefore not simply an important department, organisational unit or routine activity.

It represents a function or collection of processes whose prolonged disruption would create an unacceptable impact on ALPS, the public healthcare institutions it supports, its suppliers and other stakeholders, or ultimately the availability of healthcare products and services.

This distinction is important. A BCM programme should avoid declaring every organisational activity "critical".

Doing so makes prioritisation ineffective because resources cannot be directed simultaneously toward the recovery of everything.

Instead, ALPS should assess functions according to the consequences of their disruption over time.

A function may qualify as critical where its disruption could, for example:

• interrupt the availability of essential pharmaceuticals, medical supplies or equipment;
• affect patient safety or healthcare delivery;
• prevent PHIs from obtaining required products and services;
• disrupt procurement, sourcing or contracting of strategically important supplies;
• interrupt warehouse, inventory or distribution operations;
• compromise cold-chain or other controlled-storage requirements;
• cause significant contractual, financial or compliance consequences;
• prevent ALPS from managing suppliers or responding to supply shortages;
• disable technology platforms supporting procurement and supply-chain operations; or
• prevent management from coordinating an effective response to a major supply-chain disruption.

The identification of CBFs is therefore an impact-based exercise, not simply an organisational-chart exercise.

 

Key Considerations for Identifying CBFs at ALPS Healthcare

ALPS occupies an important position between suppliers and Singapore's public healthcare institutions. Its BCM priorities should therefore reflect not only the impact of disruption on ALPS itself but also the potential downstream consequences for healthcare delivery.

ALPS describes itself as a national integrated supply-chain management agency supporting public healthcare.

Its activities include purchasing drugs, medical and non-medical supplies, equipment, and services, as well as establishing group- and national-level contracts.

Its expanding national logistics capability also increases the importance of continuity across warehousing, inventory and distribution.

ALPS's Central Warehouse One (CWH1), for example, supports centralised inventory management for PHIs, accommodates products ranging from cold-chain items to ambient medical supplies, and uses inventory control systems for real-time tracking, demand forecasting, and management of supply chain adverse events.

Accordingly, ALPS should consider the following dimensions when determining whether a business function is critical.

Patient and Healthcare Service Impact

Although ALPS does not primarily deliver frontline clinical care, an interruption of its supply chain could indirectly affect clinical services.

A shortage or delayed distribution of medicines, medical consumables, or equipment can disrupt healthcare services.

This means that downstream impacts on patients and healthcare should be considered during the BIA, rather than assessing only the immediate operational impact on ALPS.

Supply Availability

The ability to source, procure, hold and distribute essential supplies is fundamental. ALPS should identify product categories and associated functions where prolonged interruption could cause shortages across PHIs.

Time Criticality

Different functions may tolerate different interruption periods.

Strategic sourcing activity may sometimes tolerate a longer disruption than an urgent logistics operation involving critical medicines.

The BIA should therefore establish how impacts escalate over time rather than relying on a binary "critical/non-critical" classification.

Product Integrity and Patient Safety

Continuity involves more than maintaining product movement.

Pharmaceutical products, cold-chain supplies and other controlled products may require defined storage and transportation conditions.

ALPS's Supplier Code of Conduct emphasises patient safety, applicable regulatory requirements, product quality, Good Distribution Practices and product traceability.

Concentration and Common Dependencies

Centralisation can improve efficiency while simultaneously creating concentration dependencies.

ALPS should therefore identify the facilities, technology platforms, specialist personnel, suppliers, logistics providers, and infrastructure that multiple CBFs depend on.

Supplier and Third-Party Dependency

Healthcare supply chains extend beyond organisational boundaries.

Manufacturers, distributors, freight providers, technology providers and other third parties may become critical dependencies.

Consequently, the BCM programme should examine end-to-end continuity, not only ALPS's internal operational resilience.

Technology Dependency

Modern procurement and logistics are heavily dependent on technology. ALPS uses SAP Business Network for national sourcing activities, while CWH1 incorporates centralised inventory-control technology.

The unavailability of these systems, interfaces, connectivity or data may therefore affect multiple business functions simultaneously.

 

Proposed Critical Business Functions of ALPS Healthcare

Given ALPS's role in Singapore's public healthcare supply chain, the following catalogue provides a practical starting point for implementing BCM.

The catalogue intentionally identifies business capabilities rather than individual departments or detailed processes.

Each CBF can subsequently be decomposed into Sub-CBFs or business processes during detailed BIA workshops.

 

CBF Code	Critical Business Function	BCM Context and Rationale
CBF-1	Strategic Procurement and Sourcing	Manages sourcing and procurement of pharmaceuticals, medical supplies, equipment, non-medical supplies and essential services required by public healthcare institutions. Disruption could delay access to strategically important healthcare products.
CBF-2	Pharmaceutical Procurement and Supply Management	Supports sourcing and continuity of pharmaceutical products. Its criticality is heightened where disruption could contribute to shortages of medicines required for patient treatment.
CBF-3	Medical Supplies and Equipment Procurement	Supports procurement of medical consumables, devices, equipment and related products required by PHIs. Extended disruption may affect clinical and operational capabilities.
CBF-4	Supplier and Vendor Management	Maintains the supplier ecosystem supporting ALPS and PHIs, including supplier coordination, performance management, issue escalation and continuity-related engagement.
CBF-5	Contract and Purchase Order Management	Supports contractual commitments, purchase orders, commercial arrangements and associated procurement obligations required to maintain continuity of supply.
CBF-6	Demand Planning and Supply Planning	Translates healthcare demand into procurement, inventory and replenishment requirements. Failure may result in inadequate inventory, excess stock or inability to anticipate shortages.
CBF-7	Inventory Management and Replenishment	Maintains visibility and control of healthcare inventory and supports timely replenishment of PHI requirements. Criticality increases for essential and fast-moving medical products.
CBF-8	Warehouse and Storage Operations	Maintains receipt, storage, picking and handling of healthcare inventory, including products requiring controlled environmental conditions. Disruption could prevent physical fulfilment of PHI requirements.
CBF-9	Cold-Chain and Controlled-Environment Logistics	Protects temperature-sensitive and other controlled healthcare products throughout applicable storage and handling activities. Failure may compromise product integrity and potentially patient safety.
CBF-10	Healthcare Distribution and Delivery Operations	Coordinates timely movement and delivery of pharmaceuticals, medical supplies and other products to public healthcare institutions. Logistical disruptions may have direct downstream consequences for healthcare operations.
CBF-11	Supply Shortage and Supply Disruption Management	Detects, assesses, escalates, and coordinates responses to shortages, supplier failures, and other supply chain disruptions, including prioritisation and, where appropriate, alternative sourcing.
CBF-12	Procurement and Supply Chain Information Systems	Maintains technology platforms, applications, interfaces and data supporting procurement, sourcing, inventory visibility, warehousing and supply-chain operations. Extended technology outages could disrupt multiple CBFs concurrently.
CBF-13	Supply Chain Data, Analytics and Reporting	Provides operational information to support demand forecasting, inventory visibility, supply planning, management decision-making, and stakeholder reporting.
CBF-14	Quality Assurance and Product Traceability	Supports appropriate product quality, supply-chain integrity, traceability, recall readiness and handling requirements. Particularly important where product defects or safety issues require rapid identification and withdrawal.
CBF-15	Financial Operations and Supplier Payments	Supports payment obligations, financial processing and financial controls associated with procurement and supply-chain operations. An extended interruption could affect supplier relationships and the continuity of supply.
CBF-16	Regulatory, Governance and Compliance Management	Supports compliance with applicable laws, policies, contractual requirements, procurement governance and public healthcare obligations.
CBF-17	Information Security and Cyber Resilience	Protects systems, information, and digital supply chain operations against cyber disruption, unauthorised access, data compromise, and technology-related threats.
CBF-18	Business Continuity and Crisis Management	Coordinates organisational preparedness, incident escalation, continuity response, crisis management and recovery during significant operational or supply-chain disruptions.
CBF-19	Public Healthcare Institution Coordination and Stakeholder Management	Maintains operational coordination with healthcare clusters, PHIs and relevant stakeholders, particularly when shortages, service interruptions or emergency supply priorities must be communicated and managed.
CBF-20	Corporate Management and Decision Support	Provides executive direction, prioritisation, governance, and decision-making during significant operational disruption, including decisions affecting scarce resources and national healthcare supply chain priorities.

 

Interpreting the Proposed CBF Catalogue

The 20 CBFs should not yet be interpreted as confirmed critical functions. Their inclusion establishes the scope for structured validation.

During the BIA, ALPS should challenge each proposed CBF by asking:

What happens if this function becomes unavailable now, and how does the impact change after several hours, one day, several days and beyond?

This question helps distinguish a genuinely time-critical function from one that is important but can tolerate a longer interruption.

For example, both strategic sourcing and physical healthcare distribution are important.

However, a short interruption to a future sourcing exercise may have relatively limited immediate consequences, whereas an interruption to distribution of an urgently required pharmaceutical product may create much faster downstream healthcare impacts.

This temporal dimension will ultimately determine recovery priorities.

 

From CBFs to Sub-CBFs

Once the proposed catalogue has been endorsed, the next level of BCM analysis should decompose each CBF into its underlying Sub-Critical Business Functions (Sub-CBFs).

For example:

CBF-8 Warehouse and Storage Operations could subsequently be decomposed into activities such as inbound receiving, goods inspection, put-away, inventory storage, picking, packing, dispatch preparation, and controlled storage management.

Similarly:

CBF-10 Healthcare Distribution and Delivery Operations could be decomposed into order fulfilment, delivery planning, transport scheduling, dispatch, proof of delivery, urgent delivery coordination and logistics exception management.

This decomposition is important because continuity requirements frequently differ within the same CBF. The detailed BIA should therefore be conducted at a sufficiently granular level to establish realistic recovery requirements.

 

Regulatory Alignment for ALPS Healthcare

ALPS operates within Singapore's public healthcare ecosystem.

Its BCM programme should therefore consider applicable Singapore healthcare requirements alongside recognised business continuity and risk-management practices.

The Singapore Ministry of Health regulates healthcare services through the Healthcare Services Act (HCSA) framework.

However, the precise applicability of individual healthcare licensing requirements to ALPS's specific activities should be determined through ALPS's legal and compliance assessment, rather than assumed solely based on its participation in the healthcare ecosystem.

ALPS's BCM framework should also align with ISO 22301, particularly the requirement to undertake business impact analysis and risk assessment as the basis for establishing business continuity priorities and solutions.

From a practical implementation perspective, regulatory alignment should ensure that ALPS can demonstrate that it has:

• identified activities supporting important healthcare supply-chain outcomes;
• analysed the consequences of their disruption;
• established justified recovery priorities;
• identified critical dependencies and resources;
• developed continuity strategies and solutions;
• established response and recovery arrangements; and
• exercises, reviews and continually improves those arrangements.

The regulatory objective should therefore extend beyond documentary compliance.

The BCM programme should demonstrate that ALPS can maintain or restore the supply chain capabilities required to support public healthcare during significant disruptions.

 

Connecting the CBF Catalogue to the Business Impact Analysis

The identification of CBFs is the beginning, not the end, of the criticality assessment.

The next stage of the BCM planning methodology should use the catalogue as the input to a formal Business Impact Analysis (BIA).

Each CBF and its Sub-CBFs should be assessed against agreed impact criteria.

These may include:

Patient/Healthcare Impact → Operational Impact → Financial Impact → Regulatory/Compliance Impact → Contractual Impact → Reputational Impact → Supply-Chain Impact

The BIA should then determine when the impact becomes unacceptable.

From this analysis, ALPS can establish:

CBF → Sub-CBF → Impact Over Time → MBCO → Recovery Priority → RTO → Resource Requirements → Dependencies → Continuity Strategy

This traceability is particularly important for ALP because the criticality of a supply chain activity may not always stem from its direct financial contribution.

A relatively small operational process could become highly critical if its failure creates a bottleneck preventing essential products from reaching healthcare institutions.

The BIA must therefore consider the end-to-end consequence of disruption, rather than assessing each function only within its organisational boundary.

 

Identifying Critical Business Functions provides ALPS Healthcare with the foundation for a structured and defensible Business Continuity Management programme.

For an organisation supporting Singapore's public healthcare supply chain, criticality must be considered from a broader perspective than just the operational impact on ALPS.

The analysis should consider how disruption could propagate through suppliers, procurement activities, inventory, warehouses, logistics networks and technology platforms and ultimately affect Public Healthcare Institutions and healthcare delivery.

The proposed catalogue of 20 Critical Business Functions establishes an initial enterprise view covering procurement, pharmaceutical and medical supply management, supplier management, demand and inventory planning, warehousing, cold-chain operations, distribution, supply-disruption management, technology, quality and traceability, finance, compliance, cyber resilience, crisis management and stakeholder coordination.

It is deliberately structured as a starting point for validation rather than a predetermined conclusion about criticality.

The next step is to subject these proposed CBFs to a formal Business Impact Analysis.

Through engagement with business owners and relevant stakeholders, ALPS should decompose each CBF into Sub-CBFs, analyse the impact of disruption over time, establish MBCOs and recovery requirements, identify critical resources and dependencies, and prioritise functions according to their actual continuity needs.

This transforms the CBF catalogue from a conceptual inventory into a practical foundation for continuity strategies, Business Continuity Plans, exercising and enterprise resilience.

Ultimately, the effectiveness of BCM at ALPS should be measured not simply by whether individual internal processes can recover, but by whether ALPS can continue to support the availability, integrity,  and timely movement of essential healthcare supplies through Singapore's public healthcare supply chain during significant disruption.