[BCM] [GRA] [E1] [C10] Identifying Critical Business Functions

CBF Code

Critical Business Function

Description

Importance to GRA

Potential Impact if Disrupted

CBF-1

Gambling Licensing and Approval

Assessment, approval, renewal, suspension, and revocation of gambling licences and permits.

Ensures only authorised operators conduct regulated gambling activities.

Delays in licensing decisions, regulatory non-compliance, and operational disruption for regulated entities.

CBF-2

Regulatory Oversight and Supervision

Ongoing supervision and monitoring of licensed gambling operators and activities.

Maintains the integrity of the gambling ecosystem and regulatory compliance.

Reduced oversight capability, increased regulatory risk, and loss of public confidence.

CBF-3

Compliance Monitoring and Inspection

Conducting inspections, audits, reviews, and compliance assessments.

Detects and addresses regulatory breaches and misconduct.

Undetected violations, increased exposure to illegal activities and regulatory failures.

CBF-4

Enforcement and Investigation

Investigation of suspected offences and enforcement of gambling legislation.

Supports law enforcement and regulatory accountability.

Delayed investigations and inability to take timely enforcement actions.

CBF-5

Responsible Gambling and Harm Prevention

Programmes, policies, and initiatives to minimise gambling-related harm.

Protects vulnerable individuals and supports public policy objectives.

Increased social harm, reputational damage, and public criticism.

CBF-6

Regulatory Intelligence and Risk Assessment

Collection and analysis of regulatory intelligence, emerging threats, and industry risks.

Enables proactive regulatory decision-making.

Failure to identify emerging threats and vulnerabilities.

CBF-7

Incident and Crisis Management

Management of regulatory incidents, major breaches, cyber events, and public crises.

Ensures effective response during disruptions affecting GRA or regulated entities.

Escalation of incidents, ineffective crisis response, stakeholder dissatisfaction.

CBF-8

Stakeholder Communication and Public Affairs

Communication with government agencies, operators, media, and the public.

Maintains transparency and stakeholder confidence.

Misinformation, reputational damage, and reduced stakeholder trust.

CBF-9

Legal and Regulatory Advisory

Interpretation of legislation, regulatory requirements, and legal matters.

Supports lawful and defensible regulatory decisions.

Increased legal risk and delayed decision-making.

CBF-10

Policy Development and Regulatory Framework Management

Development and maintenance of gambling regulations, policies, and guidelines.

Ensures regulatory framework remains current and effective.

Regulatory gaps, delayed policy implementation.

CBF-11

Information and Case Management Systems

Management of licensing, compliance, investigation, and regulatory records.

Supports daily regulatory operations and decision-making.

Loss of access to critical information and operational delays.

CBF-12

Cybersecurity and Information Protection

Protection of sensitive regulatory information and digital assets.

Safeguards the confidentiality, integrity, and availability of information.

Data breaches, cyber-attacks, loss of public confidence.

CBF-13

ICT Infrastructure and Technology Services

Operation of networks, applications, databases, cloud services, and end-user systems.

Enables all digital regulatory processes and communications.

Significant disruption to organisational operations.

CBF-14

Human Resource Management

Workforce planning, staffing, employee welfare, and personnel administration.

Ensures adequate staffing during normal and disruptive conditions.

Resource shortages and inability to sustain operations.

CBF-15

Finance, Procurement, and Vendor Management

Budgeting, procurement, contract administration, and financial management.

Supports operational sustainability and resource availability.

Delayed payments, supplier issues, and inability to procure critical resources.

CBF-16

Third-Party and Service Provider Oversight

Oversight of outsourced services, vendors, and technology providers.

Ensures continuity of external dependencies supporting GRA operations.

Third-party failures affecting regulatory functions.

CBF-17

Records and Information Management

Management of physical and electronic records, evidence, and documentation.

Supports regulatory accountability and legal obligations.

Loss of records, reduced operational effectiveness, and compliance issues.

CBF-18

Business Continuity and Organisational Resilience Management

Development, maintenance, exercising, and improvement of BCM capabilities.

Enables preparedness and recovery from disruptions.

Reduced organisational resilience and prolonged recovery periods.

CBF-19

Inter-Agency Coordination and Government Liaison

Collaboration with ministries, regulators, law enforcement agencies, and government bodies.

Supports coordinated regulatory and national responses.

Reduced coordination effectiveness during incidents and emergencies.

CBF-20

Executive Leadership and Governance

Strategic decision-making, governance, and organisational oversight.

Provides leadership and direction during normal and crisis conditions.

Delayed decisions, ineffective incident management, and governance failures.