Vital records are the information assets that an organisation must protect to ensure that critical business functions can continue during and after a disruptive event.
Within ALPS Healthcare, Strategic Procurement and Sourcing depends upon accurate, complete, and readily accessible procurement records to support sourcing decisions, supplier management, contract administration, governance, and regulatory compliance.
If these records become unavailable, damaged, or compromised, procurement operations may be delayed, contractual obligations may not be fulfilled, and the continuity of healthcare supply chains may be adversely affected.
As part of the Business Impact Analysis (BIA), identifying vital records enables ALPS Healthcare to determine which information assets are essential for maintaining minimum operational capability.
This process supports the development of Business Continuity Plans (BCPs) by ensuring that critical procurement information can be recovered within the required Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).
It also assists Records and Information Management teams in establishing appropriate protection, backup, archival, and recovery arrangements for information that is indispensable to business operations.
Effective Business Continuity Management is closely linked with sound records management and information governance. International standards such as ISO 22301 and ISO 15489 emphasise that organisations should protect both physical and electronic records throughout their lifecycle.
Procurement records frequently exist in multiple forms, including electronic databases, enterprise document repositories, scanned contract files, and physical documents with legal significance.
Identifying the media type, storage location, and responsible custodian for each vital record ensures that appropriate security controls, backup arrangements, and recovery procedures are established before a disruption occurs.
Table P6: Vital Records for CBF-1
|
Sub-CBF Code |
Sub-Critical Business Function |
Description of Vital Records |
Media Type |
Location |
In Whose Care |
|
CBF-1.1 |
Procurement Strategy Development |
Approved procurement strategies, annual sourcing plans, strategic procurement policies |
Hybrid (Electronic and Paper) |
Enterprise Document Management System (EDMS) and Corporate Records Repository |
Strategic Procurement Department |
|
CBF-1.2 |
Category Management |
Category strategies, spend analysis reports, category performance records |
Electronic |
Business Intelligence Platform and EDMS |
Category Management Team |
|
CBF-1.3 |
Demand Consolidation and Forecast Review |
Demand forecasts, procurement plans, inventory projections, consumption reports |
Database Record |
ERP System and Demand Planning Database |
Procurement Planning Unit |
|
CBF-1.4 |
Market Research and Supplier Intelligence |
Supplier market analysis, benchmarking reports, supplier intelligence records |
Electronic |
Supplier Relationship Management (SRM) System and Shared Repository |
Strategic Sourcing Team |
|
CBF-1.5 |
Procurement Planning and Sourcing Schedule |
Procurement schedules, sourcing calendars, procurement project plans |
Electronic |
Project Management System and EDMS |
Procurement Planning Unit |
|
CBF-1.6 |
Procurement Risk Assessment |
Procurement risk registers, supplier risk assessments, mitigation plans |
Electronic |
Enterprise Risk Management (ERM) System |
Enterprise Risk Management and Procurement Risk Team |
|
CBF-1.7 |
Specification Development |
Product specifications, technical requirements, clinical evaluation documents |
Hybrid (Electronic and Paper) |
EDMS and Technical Documentation Repository |
Clinical Procurement Team |
|
CBF-1.8 |
Tender Preparation and Documentation |
Tender documents, invitation to tender (ITT), evaluation criteria, procurement specifications |
Electronic |
eTendering System and EDMS |
Procurement Operations Department |
|
CBF-1.9 |
Tender Management |
Tender submissions, clarification responses, bid opening records, evaluation audit trails |
Database Record |
eTender Portal and Procurement Database |
Procurement Operations Department |
|
CBF-1.10 |
Supplier Evaluation and Selection |
Supplier evaluation reports, scoring sheets, recommendation papers |
Hybrid (Electronic and Paper) |
Evaluation Management System and EDMS |
Evaluation Committee Secretariat |
|
CBF-1.11 |
Due Diligence and Compliance Assessment |
Supplier due diligence reports, compliance certificates, regulatory verification records |
Electronic |
Compliance Management System |
Procurement Compliance Team |
|
CBF-1.12 |
Contract Negotiation |
Draft contracts, negotiation records, legal opinions, contract amendments |
Hybrid (Electronic and Paper) |
Contract Lifecycle Management (CLM) System and Legal Repository |
Legal Department and Procurement Contracts Team |
|
CBF-1.13 |
Contract Award and Approval |
Approved contracts, approval records, contract award notices |
Hybrid (Electronic and Paper) |
Contract Management System and Corporate Records Repository |
Procurement Governance Unit |
|
CBF-1.14 |
Supplier Onboarding |
Supplier registration forms, vendor master records, banking details, onboarding documents |
Electronic |
Vendor Management System and ERP |
Supplier Management Team |
|
CBF-1.15 |
Procurement Governance and Compliance Monitoring |
Audit reports, procurement compliance reviews, governance registers, corrective action records |
Electronic |
Governance, Risk and Compliance (GRC) Platform |
Procurement Governance and Internal Audit |
|
CBF-1.16 |
Strategic Supplier Relationship Management |
Supplier meeting minutes, performance review reports, business continuity commitments, strategic partnership agreements |
Electronic |
SRM Platform and EDMS |
Supplier Relationship Management Team |
|
CBF-1.17 |
Supplier Performance Management |
Supplier KPI reports, service level reports, quality performance records, corrective action logs |
Database Record |
Supplier Performance Management System |
Contract and Supplier Performance Team |
|
CBF-1.18 |
Procurement Data Analytics and Reporting |
Procurement dashboards, expenditure reports, management reports, performance analytics |
Electronic |
Data Warehouse and Business Intelligence Platform |
Procurement Analytics Team |
|
CBF-1.19 |
Procurement Continuity and Contingency Planning |
Emergency procurement procedures, alternative supplier lists, contingency sourcing plans, crisis procurement playbooks |
Hybrid (Electronic and Paper) |
Business Continuity Management System, EDMS, and Off-site Secure Storage |
Business Continuity Manager and Procurement Management |
|
CBF-1.20 |
Continuous Improvement and Procurement Optimisation |
Lessons learned reports, improvement registers, audit recommendations, process review documentation |
Electronic |
Quality Management System and Knowledge Repository |
Quality and Continuous Improvement Team |
Identifying vital records is an essential activity within the Business Impact Analysis because it ensures that the information required to sustain Strategic Procurement and Sourcing remains available throughout a disruption.
By mapping each Sub-Critical Business Function to its critical records, ALPS Healthcare can determine which information assets require enhanced protection, prioritised recovery, and appropriate backup arrangements to support the continued delivery of procurement services for Singapore's public healthcare sector.
Protecting vital records is equally important for regulatory compliance and operational continuity. Procurement activities depend upon the integrity and availability of sourcing plans, tender documentation, supplier evaluations, contracts, compliance records, audit evidence, and contingency plans.
The loss or corruption of these records could delay procurement decisions, compromise governance and audit requirements, weaken supplier management, and disrupt the supply of essential healthcare products and services.
Appropriate controls—including secure electronic repositories, resilient backup infrastructure, off-site storage, access management, and document version control—help ensure that these records remain accessible and trustworthy during recovery operations.
Effective records management also contributes directly to successful recovery by ensuring that every vital record has a clearly defined custodian, an authorised storage location, and an appropriate level of protection throughout its lifecycle.
Assigning responsibility to specific business units strengthens accountability for maintaining record accuracy, security, retention, and recoverability, while reducing the risk of information loss during disruptive events.
Ultimately, robust vital records management strengthens organisational resilience by integrating information governance with Business Continuity Management.
Through systematic identification, protection, and stewardship of procurement records, ALPS Healthcare can improve recovery readiness, support regulatory and audit obligations, safeguard institutional knowledge, and ensure that critical procurement operations can resume efficiently during and after major disruptions.
| eBook 3: Starting Your BCM Implementation |
||||||
| MBCO [x] | P&S [x] | RAR T1 [x] | RAR T2 [x] | RAR T3 [x] | BCS T1 [x] | CBF |
| CBF-1 Strategic Procurement and Sourcing | ||||||
| DP | BIAQ P1 | BIAQ P2 | BIAQ P3 | BIAQ P4 | BIAQ P5 | BIAQ P6 |
| BCS T2 | BCS T3 | PD | ||||
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].
|
Please feel free to send us a note if you have any questions. |
||