Business processes supporting Strategic Procurement and Sourcing are highly dependent on information technology.
Modern procurement operations rely on integrated enterprise applications to manage sourcing activities, supplier information, tender administration, contract management, approvals, analytics, and governance.
Within ALPS Healthcare, these systems enable procurement professionals to coordinate procurement activities across multiple public healthcare institutions while ensuring transparency, regulatory compliance, auditability, and operational efficiency.
During a Business Impact Analysis (BIA), identifying these technology dependencies is essential because the unavailability of critical systems may have a greater impact than the loss of individual personnel or physical facilities.
Business Continuity Planning (BCP) and IT Disaster Recovery (ITDR) are closely related disciplines. Business Continuity Planning identifies the business processes that must continue during a disruption, while IT Disaster Recovery focuses on restoring the supporting technology infrastructure required for those processes.
Effective recovery can only be achieved when business recovery priorities are aligned with system recovery priorities. Consequently, each Sub-Critical Business Function should be mapped to its supporting IT systems so that disaster recovery objectives reflect actual business needs.
Two important recovery metrics are established during this assessment. The Recovery Point Objective (RPO) defines the maximum acceptable amount of data loss following a disruption, while the System Recovery Time Objective (System RTO) specifies the target time within which supporting IT systems should be restored.
These values provide essential guidance for backup strategies, system replication, disaster recovery architecture, and recovery procedures.
In addition to software applications, specialised equipment such as secure network infrastructure, authentication services, cloud platforms, digital signature capabilities, and disaster recovery facilities should be identified, as they are often critical enablers of procurement operations.
Table P4: Supporting IT Systems and Applications for CBF-1
|
Sub-CBF Code |
Sub-Critical Business Function |
Supporting IT Systems and Applications |
Recovery Point Objective (RPO) |
System Recovery Time Objective (System RTO) |
Supporting Special Equipment / Resources |
Remarks |
|
CBF-1.1 |
Procurement Strategy Development |
Enterprise Resource Planning (ERP), Procurement Planning System, Business Intelligence (BI) Platform |
24 Hours |
24 Hours |
Executive workstations, secure network, cloud analytics platform |
Strategy information changes infrequently; daily backups are generally sufficient. |
|
CBF-1.2 |
Category Management |
eProcurement System, Spend Analytics Platform, Supplier Database |
4 Hours |
8 Hours |
Analytics servers, secure storage, reporting workstations |
Spend analysis should be restored promptly to support sourcing decisions. |
|
CBF-1.3 |
Demand Consolidation and Forecast Review |
Demand Planning System, Inventory Management System, ERP |
1 Hour |
4 Hours |
Database cluster, secure connectivity, forecasting servers |
Supports procurement planning for essential healthcare supplies. |
|
CBF-1.4 |
Market Research and Supplier Intelligence |
Supplier Relationship Management (SRM), Market Intelligence Platform, Internet Research Tools |
4 Hours |
8 Hours |
Secure internet access, subscription databases |
Alternative supplier identification depends on timely access to market information. |
|
CBF-1.5 |
Procurement Planning and Sourcing Schedule |
Project Portfolio Management System, eProcurement Platform, Workflow Management System |
1 Hour |
4 Hours |
Workflow servers, shared document repository |
Scheduling activities require rapid restoration to avoid procurement delays. |
|
CBF-1.6 |
Procurement Risk Assessment |
Enterprise Risk Management (ERM) System, Risk Register, Analytics Dashboard |
4 Hours |
8 Hours |
Risk analytics platform, secure reporting environment |
Supports assessment of supplier and procurement risks during disruptions. |
|
CBF-1.7 |
Specification Development |
Document Management System (DMS), Engineering Document Repository, Collaboration Platform |
4 Hours |
8 Hours |
High-resolution monitors, document repository, secure file storage |
Access to specifications is essential before tender preparation. |
|
CBF-1.8 |
Tender Preparation and Documentation |
eTendering System, Document Management System, Workflow Platform |
1 Hour |
4 Hours |
Secure document servers, digital signature capability |
Tender preparation should resume quickly to meet procurement timelines. |
|
CBF-1.9 |
Tender Management |
eTender Portal, Supplier Portal, Workflow System |
Real-time |
2 Hours |
Secure internet gateway, load-balanced application servers, authentication services |
Mission-critical system supporting active procurement exercises with external suppliers. |
|
CBF-1.10 |
Supplier Evaluation and Selection |
Evaluation Management System, Supplier Database, Collaboration Platform |
1 Hour |
4 Hours |
Secure evaluation workstations, encrypted storage |
Supports procurement committees in evaluating supplier submissions. |
|
CBF-1.11 |
Due Diligence and Compliance Assessment |
Compliance Management System, Vendor Due Diligence Platform, Identity Management System |
1 Hour |
4 Hours |
Identity and Access Management (IAM), secure compliance repository |
Compliance records require minimal data loss and timely restoration. |
|
CBF-1.12 |
Contract Negotiation |
Contract Lifecycle Management (CLM) System, Document Management System |
4 Hours |
8 Hours |
Digital signature platform, secure document vault |
Contract negotiations can continue manually for short periods if required. |
|
CBF-1.13 |
Contract Award and Approval |
Contract Management System, ERP, Electronic Approval Workflow |
1 Hour |
4 Hours |
Digital approval infrastructure, secure authentication tokens |
Approval workflows are critical for awarding contracts on schedule. |
|
CBF-1.14 |
Supplier Onboarding |
Supplier Management System, Vendor Master Database, ERP |
4 Hours |
8 Hours |
Secure connectivity, document scanners, onboarding portal |
Required for activation of new or replacement suppliers. |
|
CBF-1.15 |
Procurement Governance and Compliance Monitoring |
Governance, Risk and Compliance (GRC) Platform, Audit Management System |
4 Hours |
8 Hours |
Audit servers, secure reporting environment |
Supports audit trails and regulatory compliance monitoring. |
|
CBF-1.16 |
Strategic Supplier Relationship Management |
Supplier Relationship Management (SRM) System, CRM Platform, Video Conferencing System |
4 Hours |
8 Hours |
Video conferencing facilities, secure mobile devices |
Enables communication with strategic suppliers during disruptions. |
|
CBF-1.17 |
Supplier Performance Management |
Supplier Performance Dashboard, KPI Monitoring System, Analytics Platform |
4 Hours |
8 Hours |
Dashboard servers, reporting infrastructure |
Performance monitoring supports supplier risk management and service quality. |
|
CBF-1.18 |
Procurement Data Analytics and Reporting |
Business Intelligence Platform, Data Warehouse, Reporting System |
4 Hours |
8 Hours |
Data warehouse infrastructure, reporting servers |
Management reporting should resume within one business day. |
|
CBF-1.19 |
Procurement Continuity and Contingency Planning |
Business Continuity Management System, Emergency Procurement Portal, Incident Management System |
Real-time |
2 Hours |
Disaster Recovery Site, cloud infrastructure, secure remote access, backup communications |
Highest recovery priority to support emergency sourcing and continuity operations. |
|
CBF-1.20 |
Continuous Improvement and Procurement Optimisation |
Quality Management System, Lessons Learned Repository, Performance Analytics Platform |
24 Hours |
24 Hours |
Knowledge repository, collaboration platform |
Longer recovery period acceptable as operational continuity is not immediately affected. |
Supporting IT systems form the technological backbone of Strategic Procurement and Sourcing by enabling procurement planning, supplier engagement, tender management, contract administration, governance, analytics, and continuity management.
Identifying these technology dependencies during the Business Impact Analysis ensures that every Sub-Critical Business Function is supported by appropriate information systems, enabling ALPS Healthcare to understand how technology disruptions may affect the continuity of procurement operations and, ultimately, healthcare service delivery.
The identification of Recovery Point Objectives (RPOs) and System Recovery Time Objectives (System RTOs) provides critical input to IT Disaster Recovery planning. RPOs establish the acceptable amount of data loss for each supporting application, influencing backup frequency, replication mechanisms, and data protection strategies.
System RTOs define the required restoration timeframe for each application and infrastructure component, ensuring that IT recovery activities are aligned with the business Recovery Time Objectives (RTOs) identified during the Business Impact Analysis.
This alignment enables technology recovery priorities to directly support operational recovery requirements.
In addition to software applications, specialised equipment and supporting infrastructure—including secure network connectivity, digital approval and signature services, cloud platforms, authentication services, disaster recovery facilities, collaboration technologies, and resilient data storage—are essential enablers of procurement operations.
Their inclusion within Business Continuity Plans ensures that recovery strategies address the complete operating environment rather than focusing solely on business applications.
Overall, understanding technology dependencies strengthens organisational resilience by enabling coordinated Business Continuity Planning and IT Disaster Recovery.
Through the identification of critical systems, appropriate recovery objectives, and supporting technology resources, ALPS Healthcare can improve recovery preparedness, reduce technology-related disruption risks, and ensure that procurement capabilities supporting Singapore's public healthcare system can be restored efficiently during disruptive events.
| eBook 3: Starting Your BCM Implementation |
||||||
| MBCO [x] | P&S [x] | RAR T1 [x] | RAR T2 [x] | RAR T3 [x] | BCS T1 [x] | CBF |
| CBF-1 Strategic Procurement and Sourcing | ||||||
| DP | BIAQ P1 | BIAQ P2 | BIAQ P3 | BIAQ P4 | BIAQ P5 | BIAQ P6 |
| BCS T2 | BCS T3 | PD | ||||
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].
|
Please feel free to send us a note if you have any questions. |
||