[BCM] [ALPS] [E3] [PD] [CBF] [2] Pharmaceutical Procurement and Supply Management

CBF-2 Pharmaceutical Procurement and Supply Management

Introduction

 

Business Continuity Recovery Procedures provide the operational instructions required to restore a Critical Business Function following a disruptive event.

While the Business Continuity Plan (BCP) establishes the overall recovery framework, the recovery procedure translates strategy into practical actions that recovery teams can execute during an actual incident.

These procedures ensure that recovery activities are coordinated, prioritised, and aligned with the Recovery Time Objectives (RTOs) established during the Business Impact Analysis (BIA).

Recovery is not a single event but a structured process comprising preparedness, response, recovery, and restoration. Preparedness activities establish the governance, resources, technology, and competencies necessary before a disruption occurs.

During the incident, the focus shifts to protecting personnel, activating continuity arrangements, restoring priority business functions, and maintaining essential pharmaceutical procurement operations.

Following stabilisation, restoration activities return the organisation to normal operating conditions while incorporating lessons learned to improve future resilience.

Clearly assigning responsibilities before, during, and after a disruption ensures that recovery activities are performed consistently, efficiently, and safely.

For ALPS Healthcare, where uninterrupted pharmaceutical procurement directly supports patient care across Singapore's public healthcare system, structured recovery procedures are essential for maintaining medicine availability, regulatory compliance, supplier coordination, and operational resilience.

Description

Pharmaceutical Procurement and Supply Management encompasses the planning, sourcing, procurement, receipt, storage coordination, replenishment, supplier management, regulatory compliance, and governance activities necessary to ensure a continuous supply of medicines, vaccines, biological products, and pharmaceutical consumables across Singapore's public healthcare system.

Business Purpose

The purpose of this Critical Business Function is to ensure that healthcare institutions consistently receive safe, effective, and regulatory-compliant pharmaceutical products in the right quantity, quality, and timeframe to support uninterrupted patient care.

Why It Is Critical

This function is critical because any prolonged disruption may result in:

• Shortages of life-saving medicines.
• Delays in clinical treatment.
• Compromised patient safety.
• Failure to meet contractual commitments.
• Regulatory non-compliance.
• Increased procurement costs through emergency sourcing.
• Supply chain instability across multiple healthcare institutions.

Major Operational Outcomes

• Continuous availability of essential medicines.
• Reliable pharmaceutical supply chain operations.
• Regulatory-compliant procurement activities.
• Effective supplier and logistics coordination.
• Secure inventory replenishment.
• Timely response to medicine shortages and recalls.
• Accurate procurement reporting and governance.

Key Stakeholders Supported

• Public hospitals.
• National healthcare clusters.
• Clinical services.
• Hospital pharmacies.
• Ministry of Health (MOH).
• Pharmaceutical manufacturers.
• Logistics providers.
• Regulatory authorities.
• Patients.

Regulatory Obligations

Recovery activities should continue to comply with:

• Singapore healthcare procurement governance.
• Good Distribution Practice (GDP) principles where applicable.
• Applicable product registration and pharmaceutical regulatory requirements.
• Internal procurement governance.
• Information security and data protection policies.
• Business Continuity Management requirements aligned with ISO 22301.

Objective

The objective of preparedness is to establish the organisational capability, resources, governance arrangements, supplier resilience, and technology necessary to recover pharmaceutical procurement operations rapidly while maintaining the Minimum Business Continuity Objective (MBCO).

HOW

Governance

• Establish a Pharmaceutical Procurement Recovery Team.
• Assign a Recovery Team Leader and deputy.
• Define recovery authority and escalation thresholds.
• Review governance annually.

Recovery Team Responsibilities

Assign functional leaders for:

• Demand Forecasting (CBF-2.1)
• Requirements Planning (CBF-2.2)
• Supplier Management (CBF-2.4 & 2.14)
• Purchase Order Processing (CBF-2.7)
• Inventory Replenishment (CBF-2.12)
• Recall Coordination (CBF-2.15)
• Procurement Risk Monitoring (CBF-2.16)

Succession Planning

• Identify at least two trained alternates for every critical procurement role.
• Maintain delegation of authority for emergency purchasing approvals.

Training and Awareness

Conduct regular training covering:

• Emergency procurement procedures.
• Manual purchase order processing.
• Supplier contingency activation.
• Recall management.
• ERP recovery procedures.

Resource Readiness

Verify availability of:

• Emergency procurement templates.
• Secure laptops.
• Authentication tokens.
• Communication devices.
• Emergency purchasing authority.
• Inventory reports.

Alternate Workplace Arrangements

Prepare:

• Alternate office facilities.
• Remote working capability.
• Secure VPN access.
• Shared recovery workstations.

ICT Preparedness

Validate readiness of:

• ERP procurement modules.
• Warehouse Management System.
• Supplier Relationship Management System.
• Contract Management System.
• Recall Management System.
• Cold-chain monitoring platform.

Disaster Recovery Readiness

Confirm:

• System backups.
• Replicated databases.
• Disaster Recovery Site availability.
• Recovery testing schedules.

Supplier Preparedness

Maintain:

• Alternate supplier lists.
• Emergency sourcing agreements.
• Logistics contingency contracts.
• Supplier contact directories.
• Escalation procedures.

Special attention should be given to:

• CBF-2.4
• CBF-2.5
• CBF-2.13
• CBF-2.14

Communication Readiness

Maintain updated contact information for:

• Healthcare institutions.
• Pharmaceutical manufacturers.
• Logistics providers.
• ICT support.
• Executive Management.
• Crisis Management Team.

Emergency Contact Lists

Store securely both electronically and offline.

Document Management

Protect:

• Procurement contracts.
• Supplier qualification records.
• Purchase order templates.
• Tender documentation.
• Regulatory approvals.

Vital Records

Verify recoverability of:

• Inventory records.
• Procurement databases.
• Contract repositories.
• Product recall records.
• Supplier performance reports.

Dependency Verification

Review dependencies involving:

• ERP systems.
• ICT.
• Finance.
• Warehouse Operations.
• Third-party logistics.
• Pharmaceutical suppliers.

Testing and Exercising

Conduct exercises covering:

• Procurement system outage.
• Major supplier failure.
• Cold-chain disruption.
• Pharmaceutical recall.
• Global medicine shortage.

Preventive Controls

Implement:

• Supplier diversification.
• Inventory safety stock.
• Cybersecurity controls.
• Cold-chain monitoring.
• Automated backup schedules.

Readiness Checklist

Quarterly verify:

• Recovery team availability.
• ICT readiness.
• Supplier readiness.
• Alternate workplace readiness.
• Emergency procurement authority.
• Communication systems.

Objective

Restore priority pharmaceutical procurement capabilities rapidly to ensure continuous medicine availability while protecting patient safety and regulatory compliance.

HOW

Step 1 — Incident Notification

• Receive disruption notification.
• Inform Procurement Management.
• Notify Business Continuity Coordinator.

Step 2 — Activate the Business Continuity Plan

• Declare recovery activation.
• Activate Pharmaceutical Procurement Recovery Team.
• Confirm recovery objectives.

Step 3 — Activate Crisis Management Team (if required)

Escalate where disruption affects:

• National medicine supply.
• Multiple hospitals.
• Major suppliers.
• Cold-chain integrity.
• Patient safety.

Step 4 — Personnel Safety Assessment

Confirm:

• Staff safety.
• Facility accessibility.
• Security conditions.

Step 5 — Initial Damage Assessment

Determine impacts to:

• Procurement systems.
• Warehouse operations.
• Suppliers.
• Logistics.
• Cold-chain facilities.

Step 6 — Mobilise Recovery Resources

Deploy:

• Recovery personnel.
• Alternate workplace.
• ICT support.
• Disaster Recovery systems.

Step 7 — Stakeholder Communications

Notify:

• Executive Management.
• Healthcare institutions.
• ICT.
• Suppliers.
• Logistics providers.

Step 8 — Activate Recovery Locations

Move personnel to:

• Alternate Office.
• Disaster Recovery Site.
• Remote Working locations.

Step 9 — ICT Recovery

Restore priority systems:

1. ERP Procurement
2. Warehouse Management
3. Cold-chain Monitoring
4. Inventory Management
5. Recall Management
6. Supplier Portal

Step 10 — Restore Priority Sub-Critical Business Functions

Recovery sequence:

1. CBF-2.11 Cold Chain Coordination
2. CBF-2.15 Recall Coordination
3. CBF-2.7 Purchase Order Processing
4. CBF-2.12 Inventory Replenishment
5. CBF-2.8 Regulatory Verification
6. CBF-2.13 Drug Shortage Monitoring
7. CBF-2.9 Supply Scheduling
8. Remaining procurement functions

Step 11 — Implement Manual Workarounds

Where ICT remains unavailable:

• Manual purchase orders.
• Paper receiving records.
• Manual inventory reconciliation.
• Telephone supplier coordination.

Step 12 — Prioritise Recovery Activities

Prioritise:

• Life-saving medicines.
• Critical hospital orders.
• Vaccines.
• Emergency pharmaceuticals.
• National shortage items.

Step 13 — Coordinate Suppliers

Confirm:

• Production.
• Deliveries.
• Alternate sourcing.
• Emergency shipments.

Step 14 — Regulatory Notifications

Notify relevant authorities where required by:

• Product safety incidents.
• Major supply disruptions.
• Pharmaceutical recalls.

Step 15 — Recovery Progress Reporting

Provide regular situation reports covering:

• System recovery.
• Medicine availability.
• Supplier status.
• Outstanding issues.

Step 16 — Escalation

Escalate unresolved issues to:

• Crisis Management Team.
• Executive Management.
• ICT Incident Manager.

Step 17 — Documentation

Maintain records of:

• Decisions.
• Actions.
• Communications.
• Resource deployment.
• Recovery timelines.

Objective

Restore normal pharmaceutical procurement operations while validating recovery effectiveness, reconciling emergency activities, and strengthening organisational resilience.

HOW

Step 1 — Restore Full Procurement Services

Gradually resume:

• Standard procurement cycles.
• Routine supplier evaluations.
• Governance reporting.
• Normal approval workflows.

Step 2 — Return to Primary Workplace

Relocate recovery teams once:

• Facilities are operational.
• ICT systems are stable.
• Communications are restored.

Step 3 — Return from Alternate Sites

Coordinate orderly transition while maintaining continuity.

Step 4 — Reconcile Manual Transactions

Validate:

• Manual purchase orders.
• Emergency deliveries.
• Inventory adjustments.
• Supplier invoices.

Step 5 — Validate Data Integrity

Verify:

• ERP data.
• Inventory balances.
• Contract records.
• Supplier information.

Step 6 — Restore ICT Services

Confirm:

• Production systems.
• Interfaces.
• Reporting.
• Security controls.

Step 7 — Restore Records

Ensure all emergency documentation is entered into official systems.

Step 8 — Reinstate Normal Staffing

Return personnel to standard roles and conclude temporary cross-functional assignments.

Step 9 — Supplier Normalisation

Review:

• Supplier performance.
• Emergency contracts.
• Temporary sourcing arrangements.
• Outstanding deliveries.

Step 10 — Financial Reconciliation

Review:

• Emergency procurement costs.
• Overtime.
• Logistics expenses.
• Recovery expenditure.

Step 11 — Stakeholder Communications

Advise stakeholders that:

• Procurement operations are stabilised.
• Normal service has resumed.
• Temporary measures have concluded.

Step 12 — Regulatory Reporting

Submit required incident and recovery reports where applicable.

Step 13 — Operational Performance Review

Measure:

• RTO achievement.
• Procurement backlog.
• Medicine availability.
• Supplier performance.

Step 14 — Lessons Learned

Conduct structured debrief sessions involving:

• Procurement.
• ICT.
• Warehouse.
• Logistics.
• Crisis Management Team.

Step 15 — Corrective Actions

Implement improvements relating to:

• Recovery procedures.
• Supplier resilience.
• ICT resilience.
• Inventory policies.
• Communication protocols.

Step 16 — Update the Business Continuity Plan

Revise:

• Contact lists.
• Recovery priorities.
• Resource requirements.
• Recovery procedures.
• Supplier dependencies.

Step 17 — Training and Continuous Improvement

Update training materials, conduct refresher exercises, and incorporate lessons learned into future tabletop and simulation exercises.

This Business Continuity Recovery Procedure provides ALPS Healthcare with a structured and practical framework for recovering Pharmaceutical Procurement and Supply Management following a disruption.

By linking preparedness activities, immediate response actions, phased recovery, and full restoration into a single chronological process, the procedure supports the effective execution of the Business Continuity Plan and helps ensure that essential pharmaceutical procurement capabilities remain available when they are needed most.

Successful recovery begins long before an incident occurs. Thorough preparation—including governance, resource readiness, supplier resilience, technology recovery arrangements, and regular exercising—enables recovery teams to respond confidently and efficiently.

During a disruption, disciplined execution of predefined procedures, clear communication, and timely decision-making are essential to achieving Recovery Time Objectives and maintaining the continuous supply of critical medicines.

After services have been restored, structured reviews, corrective actions, and continual improvement strengthen future resilience and ensure that recovery capabilities evolve alongside changing operational risks.

By documenting recovery procedures in a clear, actionable, and implementation-focused manner, ALPS Healthcare enhances its operational resilience, supports regulatory expectations, and improves its ability to protect patient care during disruptive events.

Successful recovery depends upon preparation, coordination, communication, disciplined execution, and continual improvement.