Business Continuity Management (BCM) planning requires organisations to establish a set of planning assumptions that define the conditions under which continuity strategies, recovery procedures, and response arrangements will operate.
These assumptions provide a realistic planning foundation and help ensure that BCM plans are practical, achievable, and aligned with the organisation's operating environment.
Under ISO 22301, organisations are expected to understand their context, identify dependencies, assess risks, and establish continuity arrangements based on credible disruption scenarios.
For the Gambling Regulatory Authority (GRA), BCM assumptions are particularly important because the organisation operates in a highly regulated environment that involves licensing, compliance monitoring, enforcement, stakeholder engagement, regulatory intelligence, and inter-agency coordination.
The assumptions developed for GRA must reflect its operational realities, regulatory obligations, technology dependencies, and stakeholder expectations.
This chapter identifies the key business continuity assumptions to consider when designing, implementing, and maintaining GRA's BCM programme.
Business continuity assumptions serve several important purposes:
Without documented assumptions, continuity plans may be based on unrealistic expectations that are difficult to execute during actual disruptions.
Business continuity assumptions are conditions believed to be true for planning purposes and are used when designing recovery arrangements.
Examples include assumptions regarding:
These assumptions should be periodically reviewed to ensure they remain valid.
Senior management will provide the timely direction, authority, and resources required to activate BCM and recovery arrangements.
Recovery activities can proceed without significant delays caused by governance uncertainty.
Clearly defined authority levels should be documented within BCM and Crisis Management plans.
GRA's critical regulatory services cannot be suspended indefinitely and must continue at an acceptable level during disruptions.
Alternative operating arrangements must be available for critical functions.
Not all employees will be available during a disruption.
Cross-training and succession planning are necessary.
Certain disruption scenarios may prevent access to normal office facilities.
Remote working capabilities must be maintained.
A disruption may affect the availability of key technology systems.
Disaster recovery arrangements must be available.
Critical information and records must be available during disruptions.
Data backup and recovery arrangements must be maintained.
Primary communication methods may become unavailable.
Multiple communication channels must be maintained.
External suppliers may experience disruptions that affect GRA operations.
Supplier continuity risks must be managed.
Key government agencies will maintain essential functions during disruptions.
Inter-agency coordination arrangements can continue.
Legal and regulatory responsibilities remain applicable even during emergencies.
Recovery priorities must consider statutory obligations.
Stakeholders expect continuity of regulatory oversight during disruptions.
Communication and transparency must remain priorities.
Threat actors may exploit disruptions to launch cyberattacks.
Cybersecurity controls must remain operational throughout recovery.
Operational incidents may develop into organisational crises.
Integration between BCM and Crisis Management is necessary.
Plans cannot remain effective without ongoing validation.
Exercises and reviews must be conducted regularly.
Threats, technologies, regulations, and organisational structures will evolve over time.
The BCM programme must be regularly reviewed and updated.
The Singapore Government BCM Policy emphasises continuity of essential public services and resilience across public sector agencies.
Accordingly, GRA's BCM assumptions should support:
|
Government BCM Expectation |
Related GRA BCM Assumption |
|
Continuity of Essential Services |
Critical functions must continue |
|
Whole-of-Government Coordination |
Government agencies continue to operate |
|
Public Confidence |
Public confidence must be maintained |
|
Information Protection |
Vital records remain accessible |
|
ICT Resilience |
Critical systems may become unavailable |
|
Workforce Continuity |
Staff availability may be reduced |
|
Continuous Improvement |
BCM plans will be tested and maintained |
The assumptions identified in this chapter should be used during:
To identify vulnerabilities and risks.
To determine critical functions and dependencies.
To develop realistic recovery solutions.
To establish response and recovery procedures.
To validate assumptions through exercises.
To review and update assumptions as circumstances change.
Business continuity assumptions form the foundation of the Gambling Regulatory Authority's BCM programme.
They establish realistic planning conditions, support the development of continuity strategies, and help ensure that recovery arrangements remain practical and achievable during disruptions.
The assumptions outlined in this chapter reflect GRA's regulatory responsibilities, operational environment, technology dependencies, stakeholder expectations, and obligations under the Singapore Government BCM Policy.
By documenting and periodically reviewing these assumptions, GRA strengthens its ability to anticipate disruptions, plan effectively, and maintain continuity of critical regulatory services.
Ultimately, well-defined BCM assumptions support organisational resilience, improve preparedness, and enable GRA to continue fulfilling its mission of safeguarding the integrity of Singapore's gambling regulatory framework under both normal and disrupted operating conditions.
| eBook 1: Understanding Your Organisation | |||||
| C1 | C2 | C3 | C4 | C5 | C6 |
| C7 | C8 | C9 | C10 | C11 | C12 |
To learn more about the course and schedule, click the buttons below for BCM-300 Business Continuity Management Implementer [BCM-3] and BCM-5000 Business Continuity Management Expert Implementer [BCM-5].
|
Please feel free to send us a note if you have any questions. |
||