[BCM] [ALPS] [E3] [PD] [CBF] [1] Strategic Procurement and Sourcing

CBF-1 Strategic Procurement and Sourcing

Introduction

 

Business Continuity Recovery Procedures provide the operational instructions required to restore critical business functions following a disruptive event.

While the Business Continuity Plan (BCP) establishes the overall recovery framework, the recovery procedures translate that framework into detailed, chronological actions that recovery teams can execute under stressful and time-sensitive conditions.

These procedures enable personnel to respond consistently, minimise uncertainty, and restore essential procurement capabilities within the Recovery Time Objectives (RTOs) established during the Business Impact Analysis (BIA).

Effective recovery is a continuous process that spans four interconnected stages: preparedness, response, recovery, and restoration. Preparedness activities establish governance, resources, competencies, and recovery capabilities before an incident occurs. Response activities focus on protecting people, assessing the situation, and activating continuity arrangements.

Recovery activities restore the Minimum Business Continuity Objective (MBCO) using alternate resources and predefined recovery strategies. Restoration activities progressively return the organisation to normal operations while incorporating lessons learned to strengthen future resilience.

Successful execution depends upon clearly assigning recovery responsibilities before a disruption occurs. Recovery teams, business unit managers, ICT personnel, suppliers, and senior management should understand their respective roles, decision-making authority, communication responsibilities, and escalation procedures.

Clearly documented recovery procedures enable ALPS Healthcare to sustain Strategic Procurement and Sourcing, maintain healthcare supply continuity, and support Singapore's public healthcare institutions during disruptive events.

Critical Business Function

Strategic Procurement and Sourcing is responsible for planning, sourcing, evaluating, contracting, and managing suppliers that provide pharmaceuticals, medical devices, consumables, equipment, and support services required by Singapore's public healthcare institutions.

Business Purpose

The function ensures that healthcare organisations have reliable access to quality products and services through effective procurement planning, supplier management, contract governance, and supply continuity.

Why It Is Critical

Failure of procurement activities may result in:

• interruption to healthcare service delivery
• shortages of critical medical supplies
• inability to award urgent contracts
• disruption to emergency procurement
• increased operational and financial risk
• regulatory and audit non-compliance

Major Operational Outcomes

• Strategic sourcing completed
• Procurement plans maintained
• Tenders administered
• Suppliers evaluated and contracted
• Emergency procurement activated when required
• Supplier performance monitored
• Procurement governance maintained

Key Stakeholders

• Public healthcare institutions
• Clinical departments
• Executive Management
• Finance
• Legal Services
• ICT
• Enterprise Risk Management
• Strategic suppliers
• Logistics providers
• Government agencies where applicable

Regulatory Responsibilities

Recovery activities should continue to support:

• procurement governance requirements
• audit trail preservation
• contractual obligations
• financial accountability
• information security requirements
• records retention obligations
• healthcare supply continuity

Objective

Establish the governance, people, technology, suppliers, facilities, and operational readiness necessary to recover Strategic Procurement and Sourcing efficiently while achieving the defined MBCO and Recovery Time Objectives.

HOW

Establish Recovery Governance

• Appoint the Procurement Recovery Team Leader.
• Assign deputies for all critical procurement management roles.
• Define decision-making authority for emergency procurement.
• Maintain an escalation matrix for executive approval.

Applicable Sub-CBFs:

• CBF-1.1
• CBF-1.5
• CBF-1.15
• CBF-1.19

Assign Recovery Team Responsibilities

Assign recovery owners for:

• Procurement Strategy
• Category Management
• Tender Management
• Supplier Management
• Contract Administration
• Procurement Governance
• Procurement Analytics
• Business Continuity Coordination

Ensure responsibilities are documented and reviewed annually.

Succession Planning

Identify:

• alternate procurement managers
• cross-trained buyers
• alternate contract approvers
• deputy supplier relationship managers
• alternate BCM coordinators

Ensure at least two trained personnel are available for every critical role.

Training and Awareness

Conduct periodic training covering:

• emergency procurement
• manual tender administration
• supplier communication
• alternate approval processes
• procurement continuity procedures
• cyber incident response

Conduct refresher training annually.

Resource Readiness

Verify availability of:

• laptops
• VPN tokens
• mobile phones
• digital signatures
• procurement software licences
• supplier directories
• emergency procurement forms

Alternate Workplace Readiness

Prepare:

• alternate office
• remote working arrangements
• disaster recovery workplace
• cloud collaboration platform

Validate access quarterly.

ICT Preparedness

Ensure readiness of:

• ERP
• eProcurement System
• SRM platform
• Contract Management System
• Document Management System
• Business Intelligence platform

Verify backups and disaster recovery procedures.

Disaster Recovery Readiness

Coordinate with ICT to verify:

• DR site availability
• replicated procurement databases
• authentication services
• communication platforms
• cloud recovery capability

Supplier Preparedness

Maintain:

• alternative suppliers
• emergency purchasing agreements
• supplier continuity commitments
• logistics contingency arrangements
• supplier contact lists

Applicable Sub-CBFs:

• CBF-1.16
• CBF-1.17
• CBF-1.19

Communication Readiness

Maintain current contact lists for:

• recovery team
• executives
• suppliers
• logistics providers
• healthcare institutions
• ICT support
• Legal
• Finance

Maintain multiple communication channels.

Vital Records Readiness

Verify protection of:

• contracts
• tenders
• supplier records
• procurement plans
• approval records
• emergency sourcing procedures

Ensure off-site backup exists.

Dependency Verification

Review dependencies involving:

• ICT
• Finance
• Legal
• Risk Management
• suppliers
• logistics providers
• cloud providers

Confirm continuity arrangements annually.

Testing and Exercising

Conduct exercises covering:

• procurement system outage
• supplier failure
• cyber attack
• logistics disruption
• pandemic staffing shortage
• emergency procurement activation

Update procedures after each exercise.

Preventive Controls

Implement:

• supplier diversification
• multi-factor authentication
• backup communications
• alternate approval workflows
• procurement monitoring dashboards

Readiness Checklist

Confirm:

• recovery team available
• systems tested
• suppliers verified
• alternate site operational
• contact lists updated
• emergency procedures accessible

Objective

Protect personnel, activate recovery arrangements, restore priority procurement activities, and achieve the Minimum Business Continuity Objective within the required Recovery Time Objectives.

HOW

Step 1 — Detect and Notify

• Detect disruption.
• Notify Procurement Recovery Team Leader.
• Inform Crisis Management Team.
• Record incident details.

Step 2 — Activate Business Continuity Plan

• Declare recovery activation.
• Activate Procurement Recovery Team.
• Activate relevant recovery procedures.

Step 3 — Ensure Personnel Safety

• Account for personnel.
• Confirm workplace safety.
• Relocate staff where required.

Step 4 — Conduct Initial Damage Assessment

Assess:

• facilities
• ICT
• procurement systems
• supplier availability
• staffing
• communications

Determine expected recovery duration.

Step 5 — Activate Recovery Location

Move essential staff to:

• Alternate Office
• Disaster Recovery Site
• Remote Working environment

Verify connectivity.

Step 6 — Restore ICT Services

Recover in priority order:

1. Identity services
2. Network connectivity
3. ERP
4. eProcurement platform
5. SRM
6. Contract Management
7. Document Management
8. Reporting platforms

Coordinate continuously with ICT.

Step 7 — Prioritise Sub-Critical Business Functions

Restore first:

• CBF-1.19 Procurement Continuity and Contingency Planning
• CBF-1.9 Tender Management
• CBF-1.13 Contract Award and Approval
• CBF-1.10 Supplier Evaluation
• CBF-1.11 Due Diligence
• CBF-1.14 Supplier Onboarding

Follow with remaining procurement activities.

Step 8 — Implement Manual Workarounds

If systems remain unavailable:

• use emergency procurement forms
• conduct manual approvals
• communicate by telephone
• maintain manual procurement logs
• capture all recovery decisions

Step 9 — Coordinate Suppliers

Contact:

• strategic suppliers
• logistics providers
• alternate suppliers
• outsourced service providers

Confirm:

• inventory
• deliveries
• production capacity
• transportation status

Step 10 — Communicate with Stakeholders

Provide updates to:

• Executive Management
• healthcare institutions
• Finance
• Legal
• ICT
• suppliers

Maintain scheduled situation reports.

Step 11 — Regulatory Notifications

Where required:

• notify relevant authorities
• document disruption
• retain communication records

Step 12 — Monitor Recovery Progress

Track:

• RTO achievement
• resource utilisation
• procurement backlog
• supplier availability
• outstanding approvals

Escalate issues promptly.

Step 13 — Document All Actions

Record:

• decisions
• approvals
• manual transactions
• supplier communications
• recovery milestones

Maintain a complete audit trail.

Objective

Restore normal procurement operations, reconcile interim activities, validate recovery outcomes, and strengthen organisational resilience through continuous improvement.

HOW

Restore Full Procurement Services

Resume:

• procurement planning
• sourcing
• tendering
• supplier management
• reporting
• governance activities

Return to Primary Workplace

Confirm:

• facilities operational
• ICT stable
• communications restored

Coordinate phased return.

Recover Remaining ICT Services

Restore:

• analytics
• dashboards
• reporting
• archive services
• integration interfaces

Reconcile Manual Transactions

Transfer:

• manual approvals
• procurement records
• emergency purchases
• supplier communications

into production systems.

Validate Data Integrity

Verify:

• contracts
• supplier records
• procurement transactions
• approval histories
• audit trails

Correct discrepancies.

Restore Vital Records

Confirm availability of:

• procurement plans
• tender files
• contracts
• supplier documentation
• compliance records

Reinstate Normal Staffing

Return staff gradually.

Address:

• fatigue
• leave arrangements
• wellbeing
• workforce capacity

Normalise Supplier Operations

Confirm:

• delivery schedules
• contract performance
• logistics
• inventory replenishment

Deactivate emergency arrangements where appropriate.

Financial Reconciliation

Complete:

• emergency procurement reconciliation
• expenditure validation
• invoice processing
• financial approvals

1Stakeholder Communication

Advise stakeholders that:

• procurement operations have stabilised
• emergency measures have ceased
• normal procurement processes have resumed

1Regulatory Reporting

Complete:

• incident reports
• governance reporting
• audit documentation
• compliance records

1Performance Monitoring

Measure:

• RTO achievement
• supplier performance
• procurement backlog clearance
• recovery effectiveness

Conduct Lessons Learned Review

Evaluate:

• what worked well
• identified weaknesses
• supplier performance
• communication effectiveness
• technology performance

Implement Corrective Actions

Update:

• procurement procedures
• supplier agreements
• continuity arrangements
• disaster recovery procedures

Assign owners and completion dates.

Update Business Continuity Documentation

Review and revise:

• Business Impact Analysis
• Recovery Strategies
• Business Continuity Plan
• Contact lists
• Recovery procedures
• Recovery resource inventories

Improve Training and Exercises

Incorporate lessons learned into:

• awareness programmes
• tabletop exercises
• simulation exercises
• supplier recovery exercises

This Business Continuity Recovery Procedure provides ALPS Healthcare with a structured and executable framework for maintaining and restoring Strategic Procurement and Sourcing during disruptive events.

By integrating preparedness, response, recovery, and restoration activities into a single operational procedure, the organisation can achieve its Minimum Business Continuity Objectives while protecting healthcare supply continuity, governance, and stakeholder confidence.

Preparation before an incident is essential to ensure that recovery teams, technology, suppliers, facilities, and critical records are ready for activation.

During a disruption, disciplined execution of predefined procedures, timely decision-making, effective communication, and coordinated recovery activities enable priority procurement functions to be restored within established Recovery Time Objectives.

Following restoration, structured reviews, corrective actions, and continual improvement ensure that recovery capabilities evolve in response to changing business, technology, and risk environments.

Documented recovery procedures strengthen organisational resilience by providing clear operational guidance, reducing uncertainty during crises, supporting regulatory compliance, and enabling consistent execution across recovery teams.

When regularly reviewed, exercised, and improved, these procedures become a critical component of ALPS Healthcare's Business Continuity Management System and its broader Operational Resilience programme.

Successful recovery depends on thorough preparation, effective coordination, timely communication, disciplined execution, and a commitment to continual improvement.