[BCM] [JCUS] [E3] [BIA] Corporate and BU MBCO

 

Introduction

James Cook University Singapore (JCUS) can continue delivering education during a disruption not only by recovering operations quickly but also by keeping a minimum level of institutional services available while recovery is underway.

A university may experience significant operational constraints following a major disruption. Teaching facilities may become inaccessible, academic platforms may fail, essential personnel may be unavailable, or student administration systems may be compromised.

Under these circumstances, restoring every activity to normal operating capacity immediately may be neither practical nor necessary.

Instead, JCUS must determine which services must continue, the minimum acceptable level at which they should operate, and the resources necessary to sustain that level until normal operations can be restored.

This requirement is addressed by establishing the Minimum Business Continuity Objective (MBCO).

For this implementation guide, the MBCO is developed at two complementary levels:

• Corporate MBCO: Defines the minimum institutional products, services and operational capabilities that JCUS must maintain during a significant disruption.
• Business Unit MBCO: Defines the minimum acceptable operational capability for each identified Critical Business Function (CBF).

The Corporate MBCO sets the enterprise-wide continuity outcome, while the Business Unit MBCOs translate it into measurable operational requirements.

Together, they provide a practical basis for determining recovery priorities, developing business continuity strategies, allocating minimum resources and validating continuity arrangements through exercises.

The chapter applies this approach to the 14 Critical Business Functions previously identified for JCUS.

Implementation note: The numerical thresholds, minimum capacities and operating assumptions presented in this chapter are illustrative planning proposals.

They do not represent JCUS's existing approved recovery arrangements. They must be validated through BIA workshops and approved by the appropriate university management authority.

 

Understanding the Minimum Business Continuity Objective

Purpose of the MBCO

The MBCO establishes the minimum acceptable level of products, services or operational capability that an organisation intends to maintain or resume during a disruption.

For JCUS, it provides an answer to a practical management question:

If the University cannot operate normally, what is the minimum level of education delivery, student protection and institutional capability that must be sustained?

For example, following a prolonged campus closure, JCUS may be unable to deliver all lectures, laboratory sessions and student activities according to the original timetable.

However, it may still maintain priority teaching through digital platforms, alternative facilities, revised schedules, and other continuity arrangements.

The MBCO determines the minimum acceptable outcome of these arrangements.

 

Distinguishing MBCO, RTO and MTPD

The MBCO must not be confused with the Recovery Time Objective (RTO) or Maximum Tolerable Period of Disruption (MTPD).

 

BCM Parameter	Definition	JCUS Example
Corporate MBCO	Minimum acceptable institutional capability during a disruption.	Maintain priority academic delivery, essential student protection and critical institutional administration.
Business Unit MBCO	Minimum acceptable capability for an individual CBF.	Continue priority scheduled teaching through approved alternative delivery arrangements.
RTO	Target time within which an activity should be resumed following disruption.	Resume priority teaching within an approved recovery timeframe.
MTPD	Maximum duration of disruption before the resulting impacts become unacceptable.	The maximum tolerable interruption to priority teaching before academic consequences become unacceptable.

 

This distinction matters because each parameter addresses a different aspect of continuity planning.

• The MBCO establishes how much service must be delivered.

• The RTO establishes when the activity should resume.

• The MTPD sets how long the disruption can continue before its consequences become unacceptable.

The RTO should be established within the MTPD, allowing an appropriate margin for uncertainty and escalation.

Alignment with ISO 22301 and ISO 22313

The approach adopted in this chapter supports the business impact analysis and business continuity strategy principles of ISO 22301 and the associated implementation guidance in ISO 22313.

ISO 22301 does not prescribe a particular Corporate MBCO template or require every organisation to adopt the two-level presentation used in this guide.

Rather, the Corporate and Business Unit MBCO structure is a practical management mechanism for translating JCUS's continuity requirements into measurable institutional and functional outcomes.

 

Establishing the Corporate MBCO for JCUS

Purpose of the Corporate MBCO

The Corporate MBCO defines the minimum level of university-wide operations that JCUS intends to sustain following a major disruption.

It should reflect the University's essential obligations to students, employees, regulators and other stakeholders.

For JCUS, the Corporate MBCO should address six principal continuity outcomes:

1. Protection of students, employees and visitors.
2. Continuation of priority teaching and learning.
3. Maintenance of time-critical academic assessment and progression.
4. Availability and integrity of essential academic information.
5. Continuation of essential student administration and support.
6. Maintenance of critical regulatory, financial and institutional obligations.

The Corporate MBCO should remain outcome-oriented rather than prescribing the exact recovery arrangements used by individual business units.

 

Proposed JCUS Corporate MBCO Statement

Corporate Minimum Business Continuity Objective

James Cook University Singapore

During a significant disruption, JCUS shall maintain or restore, within approved recovery timeframes, the minimum institutional capability necessary to safeguard students, employees and visitors; continue priority teaching, learning and academic assessment; preserve essential academic records and information integrity; maintain critical student administration and welfare services; and fulfil time-sensitive regulatory, financial and institutional obligations.

Where normal operations are unavailable, JCUS shall implement approved alternative arrangements to deliver priority services at predefined minimum acceptable levels until normal operations can be safely and systematically restored.

This proposed statement provides the overarching continuity outcome against which the Business Unit MBCOs should be aligned.

 

Corporate MBCO — Minimum Service Commitments

Table 1: Proposed Corporate Minimum Service Commitments

 

Corporate Continuity Outcome	Proposed Minimum Service Commitment
People and safety	Maintain immediate life-safety response, emergency coordination and critical welfare arrangements for affected persons.
Academic delivery	Maintain an approved minimum timetable for priority teaching activities through physical, digital or alternative arrangements.
Academic assessment	Preserve assessment integrity and maintain time-critical examinations, submissions and academic decisions, or activate approved alternatives.
Student administration	Maintain access to essential student information and priority enrolment and progression activities.
ICT and information	Maintain or recover the essential technologies and information required to support priority CBFs.
Student support	Maintain essential welfare, emergency assistance and critical student communications.
Regulatory obligations	Continue time-sensitive statutory, regulatory and quality-assurance activities.
Financial obligations	Maintain essential student fee administration, financial controls and payment obligations.
Institutional coordination	Maintain management decision-making, crisis coordination and communication with affected stakeholders.

 

Senior management should review these commitments collectively.

They establish what the University must preserve even when the organisation is operating under constrained conditions.

 

Establishing Measurable Corporate MBCO Requirements

A Corporate MBCO statement provides strategic direction.

However, JCUS must also establish measurable criteria that allow management to determine whether it has achieved the required minimum operating capability.

Develop these measures from validated BIA findings rather than selecting them solely for convenience or based on existing resource availability.

 

Proposed Corporate MBCO Performance Measures

Table 2: Illustrative Corporate MBCO Measures for JCUS

 

Service Area	Proposed Minimum Acceptable Level	Measurement
Safety and emergency response	Maintain emergency coordination and response capability for all reported life-safety incidents.	100% of reported critical incidents assessed and escalated under approved procedures.
Priority teaching	Deliver at least 70% of approved priority teaching sessions through normal or alternative arrangements during the initial continuity period.	Percentage of priority sessions delivered against the approved continuity timetable.
Examinations and assessment	Maintain arrangements for 100% of time-critical examinations and assessments, through delivery or formally approved alternatives.	Percentage of affected priority assessments with an authorised continuity disposition.
Student records	Maintain access to a verified minimum dataset supporting critical student and academic decisions.	Availability and integrity of the approved essential student-record dataset.
Student support	Maintain emergency student welfare and critical assistance arrangements.	Availability of the designated welfare contact and escalation channels.
Critical ICT	Maintain or recover approved minimum technology services supporting priority CBFs.	Percentage of designated critical services meeting their recovery requirements.
Regulatory obligations	Maintain a controlled process for all time-sensitive regulatory commitments.	Percentage of obligations addressed within their applicable deadlines or through formally accepted arrangements.
Crisis communications	Maintain at least one verified communication channel for affected stakeholder groups.	Channel availability and evidence of communication delivery.
Financial administration	Maintain the minimum capability required for critical student fee and institutional financial obligations.	Completion of approved priority transactions and reconciliations.

 

The proposed 70% teaching threshold is an example for management consideration, not an established JCUS requirement.

A suitable threshold must reflect the academic calendar, programme requirements, teaching modalities, available alternatives and the University's tolerance for deferred academic activities.

Furthermore, a percentage-based target should not override activities that cannot be safely deferred, such as essential welfare support or critical assessment-integrity decisions.

 

Defining the Minimum Operating Period

JCUS should specify the period for which its Corporate MBCO must remain sustainable.

For implementation planning, the following disruption periods may be considered:

 

Disruption Period	Corporate Continuity Emphasis
Initial 0–4 hours	Life safety, incident assessment, escalation and critical communications.
4–24 hours	Activate continuity arrangements and protect time-sensitive activities.
1–3 days	Stabilisation of priority academic and administrative services.
4–7 days	Sustain minimum operating capability and manage deferred activities.
Beyond 7 days	Extended continuity arrangements, resource replenishment and progressive restoration.

These periods are planning bands, not universal RTOs. The approved BIA may require individual functions to recover earlier or permit longer interruption where justified.

 

Developing Business Unit MBCOs for JCUS

Purpose of Business Unit MBCOs

Business Unit MBCOs translate the Corporate MBCO into specific continuity requirements for individual Critical Business Functions.

For example, the Corporate MBCO may require JCUS to maintain priority academic delivery.

However, this requirement alone does not specify:

• Which classes must continue.
• What minimum teaching capacity is acceptable.
• Which delivery methods may be used.
• Which academic staff are required.
• What learning technologies must be available.
• Which teaching activities can be deferred.
• What evidence demonstrates successful continuity

Address these requirements through the MBCO for CBF-1 Teaching and Learning Delivery.

 

Recommended Business Unit MBCO Structure

Each JCUS Business Unit MBCO should contain the following elements.

 

Element	Description
CBF Reference	Approved Critical Business Function identifier.
Function Owner	Person or position accountable for the function.
Minimum Service	Essential activity or service that must continue.
Minimum Capacity	Quantified or otherwise objectively verifiable operating level.
Minimum Quality	Acceptable standards for delivering the service.
Recovery Time Objective	Target timeframe for resuming the activity.
Minimum Resources	People, technology, information, facilities and suppliers required.
Alternative Arrangement	Approved method of maintaining the minimum service.
Performance Indicator	Evidence used to determine whether the MBCO has been achieved.
Approval Authority	Management position responsible for approving the MBCO.

 

Proposed Business Unit MBCOs for the 14 JCUS Critical Business Functions

The following table establishes an illustrative minimum operating capability for every CBF identified in the JCUS enterprise catalogue.

These proposals should form the starting point for the detailed Business Unit BIA workshops.

Table 3: JCUS Business Unit Minimum Business Continuity Objectives

 

CBF	Critical Business Function	Proposed Business Unit MBCO	Illustrative Minimum Performance Measure
CBF-1	Teaching and Learning Delivery	Continue priority scheduled teaching through approved physical, remote or alternative delivery arrangements.	Deliver at least 70% of designated priority teaching sessions during the approved continuity period.
CBF-2	Examinations and Academic Assessment	Maintain time-critical examinations, assessment submission, marking and academic integrity through normal or approved alternative procedures.	Provide an authorised continuity arrangement for 100% of affected priority examinations and assessments.
CBF-3	Student Enrolment, Registration and Academic Progression	Maintain essential student registration, enrolment changes and academic progression decisions.	Process 100% of designated urgent cases and maintain a controlled queue for deferred transactions.
CBF-4	Student Records and Academic Results Management	Preserve and provide controlled access to verified essential student records, grades and progression information.	Maintain an accessible and integrity-verified minimum student-record dataset for authorised critical decisions.
CBF-5	Critical Digital Learning and Academic Platforms	Maintain access to essential teaching materials, learning communications and priority assessment-related information.	Provide a functioning primary or approved alternative delivery mechanism for all designated priority academic activities.
CBF-6	Critical ICT Infrastructure, Identity and Connectivity	Maintain or restore essential ICT capabilities required by priority academic and administrative functions.	Restore all designated Tier-1 supporting ICT services within their approved RTOs, at agreed minimum capacity.
CBF-7	Student Safety, Welfare and Critical Support	Maintain emergency student assistance, critical welfare support and appropriate referral or escalation capability.	Maintain a continuously accessible emergency escalation arrangement and address 100% of reported critical welfare cases.
CBF-8	Campus Safety, Security and Essential Facilities	Maintain safe control of affected premises and provide minimum facilities required for priority activities where physical operation is permitted.	Maintain emergency coordination, essential security coverage and approved alternative facilities for designated on-site activities.
CBF-9	Admissions and Critical Student Onboarding	Continue time-sensitive admission decisions, acceptance processing and essential onboarding activities.	Process 100% of intake-critical cases requiring action before approved academic or contractual deadlines.
CBF-10	Student Fee Administration and Protection	Maintain essential student fee processing, reconciliation and applicable fee-protection administration.	Complete all designated deadline-critical financial transactions and maintain a controlled record of deferred processing.
CBF-11	Regulatory Compliance and Education Quality Assurance	Maintain essential regulatory reporting, statutory compliance and time-sensitive quality-assurance activities.	Address 100% of applicable critical obligations within required deadlines or obtain formally accepted alternative arrangements.
CBF-12	Critical University Communications and Crisis Information	Maintain authoritative communication with students, employees, regulators and other affected stakeholders.	Maintain at least one verified communication mechanism for each designated critical stakeholder group.
CBF-13	Library and Essential Academic Information Resources	Maintain access to essential learning, reference and academic information resources supporting priority teaching and assessment.	Provide approved access or alternatives for 100% of designated essential academic resource categories.
CBF-14	Critical Research and Specialist Laboratory Operations	Protect time-sensitive research activities, essential laboratory assets, critical specimens and irreplaceable research information.	Maintain 100% of approved critical preservation controls and activate continuity arrangements for time-sensitive research activities.

Interpretation: A 100% measure in this table generally refers to complete coverage of the designated critical subset, not full restoration of all normal university activities.

For example, CBF-3 does not require JCUS to process every routine administrative request during a major disruption.

It requires the University to identify and process all cases classified as urgent under its approved continuity criteria.

 

Detailed Business Unit MBCO Implementation Examples

The following examples illustrate how the proposed Business Unit MBCOs can be translated into practical continuity requirements.

CBF-1: Teaching and Learning Delivery

Business Unit MBCO Statement

JCUS shall maintain priority teaching and learning activities at an approved minimum capacity through physical, digital or alternative delivery arrangements, ensuring that disruption does not result in unacceptable consequences for student learning and academic progression.

 

Table 4: Illustrative MBCO for Teaching and Learning Delivery

MBCO Component	Proposed Requirement
Minimum service	Delivery of priority lectures, tutorials and other designated academic activities.
Minimum operating capacity	At least 70% of approved priority teaching sessions during the initial continuity period.
Minimum quality	Delivery by authorised academic personnel using approved teaching materials and methods.
People	Designated academic staff, programme coordinators and essential administrative support.
Technology	Learning platform, authentication, connectivity and alternative communication channels.
Information	Timetables, class lists, teaching materials and essential student information.
Facilities	Safe teaching locations or approved remote teaching arrangements.
Alternative arrangements	Online delivery, temporary teaching locations, revised schedules and prioritisation of essential classes.
Performance evidence	Teaching attendance records, continuity timetables and confirmation of completed sessions.

 

Illustrative disruption scenario

A major electrical incident makes the Sims Drive campus inaccessible for five working days.

JCUS activates alternative teaching arrangements, prioritises academic activities that cannot be deferred and distributes revised teaching schedules.

The CBF owner monitors whether the approved minimum teaching capacity is achieved.

Where practical sessions cannot be delivered remotely, the University implements approved alternative scheduling arrangements while protecting the programme's academic requirements.

 

CBF-2: Examinations and Academic Assessment

Business Unit MBCO Statement

JCUS shall maintain the integrity and continuity of time-critical examinations and academic assessment through approved alternative arrangements where normal examination facilities or assessment systems are unavailable.

 

MBCO Component	Proposed Requirement
Minimum service	Administration of priority examinations and assessment activities.
Minimum capacity	All designated time-critical assessments must have an approved delivery, rescheduling or alternative assessment arrangement.
Minimum quality	Maintain academic integrity, confidentiality and authorised assessment procedures.
People	Academic assessors, examination coordinators and authorised academic decision-makers.
Technology	Assessment platforms, secure information repositories and communication systems.
Alternative arrangements	Approved alternative venues, revised examination schedules or authorised assessment methods.
Performance evidence	Examination continuity records, authorised decisions and assessment completion reports.

 

Illustrative Disruption Scenario

An assessment platform becomes unavailable during a scheduled examination period.

The continuity objective is not necessarily to restore the affected application immediately.

Instead, JCUS should preserve assessment integrity and ensure that affected students receive authorised arrangements within the required timeframe.

 

CBF-7: Student Safety, Welfare and Critical Support

Business Unit MBCO Statement

JCUS shall maintain the minimum capability required to provide emergency student assistance, essential welfare coordination and critical support throughout a significant disruption.

 

MBCO Component	Proposed Requirement
Minimum service	Emergency student assistance and critical welfare support.
Minimum capacity	Assess and escalate all reported critical welfare cases through an available authorised arrangement.
People	Designated student-support personnel and emergency coordinators.
Information	Essential emergency contacts and approved student-support records.
Communications	Accessible emergency contact and escalation mechanisms.
Alternative arrangements	Remote support, designated emergency contacts and approved external referral arrangements.
Performance evidence	Incident records, referral logs and welfare coordination reports.

Unlike certain academic or administrative activities, immediate life-safety needs should not be reduced to a percentage-based service target.

Where safety is concerned, the continuity objective should emphasise effective response to every reported critical incident.

 

Linking the Corporate MBCO to Business Unit MBCOs

Corporate and Business Unit MBCOs must be mutually consistent.

The Corporate MBCO establishes the institutional continuity commitment. Individual Business Unit MBCOs determine how that commitment will be achieved.

Table 5: Corporate-to-Business Unit MBCO Alignment

 

Corporate Continuity Commitment	Supporting JCUS CBFs
Maintain priority academic delivery	CBF-1, CBF-5, CBF-6, CBF-13
Maintain assessment and academic progression	CBF-2, CBF-3, CBF-4, CBF-5
Protect students and employees	CBF-7, CBF-8, CBF-12
Maintain essential student administration	CBF-3, CBF-4, CBF-9, CBF-10
Maintain essential institutional technologies	CBF-5, CBF-6
Maintain regulatory and financial obligations	CBF-10, CBF-11
Maintain institutional coordination and communication	CBF-7, CBF-8, CBF-12
Protect critical academic and research resources	CBF-13, CBF-14

This alignment allows JCUS management to determine whether the combined Business Unit MBCOs are sufficient to achieve the Corporate MBCO.

For example, the Corporate MBCO may require continuing priority teaching.

However, the CBF-1 MBCO cannot be achieved independently if the minimum digital learning, ICT connectivity and academic information requirements established for CBF-5, CBF-6 and CBF-13 are not also met.

The BCM programme must therefore identify and resolve inconsistencies between the recovery requirements of interdependent CBFs.

 

Incorporating Academic Calendar Criticality into MBCO Planning

JCUS operates within an academic calendar where disruption consequences vary throughout the year.

Consequently, minimum operating requirements should not always be treated as fixed values.

Table 6: Academic Calendar Considerations for MBCO

 

Academic Period	Functions Requiring Particular Attention	MBCO Consideration
Student intake	CBF-3, CBF-9, CBF-10	Maintain deadline-critical admissions, enrolment and fee administration.
Start of trimester	CBF-1, CBF-3, CBF-5, CBF-6	Maintain priority class commencement and student access.
Normal teaching weeks	CBF-1, CBF-5, CBF-6, CBF-7, CBF-13	Maintain minimum teaching and learning capability.
Assessment submission period	CBF-2, CBF-4, CBF-5, CBF-6	Preserve assessment submissions, records and integrity.
Examination period	CBF-2, CBF-4, CBF-6, CBF-8, CBF-12	Maintain critical examinations and approved alternative arrangements.
Results processing	CBF-2, CBF-3, CBF-4	Maintain accurate results processing and progression decisions.
Research-critical periods	CBF-6, CBF-8, CBF-14	Preserve time-sensitive research assets and specialist operations.

 

Example: Examination Period

During a normal teaching week, temporary unavailability of an assessment application may have limited immediate consequences if no time-critical examinations are scheduled.

During an examination period, the same outage could affect examination integrity, student progression and the release of results.

JCUS should therefore consider whether the MBCO, RTO and supporting resources need to be adjusted for peak academic periods.

Any adjustments must be supported by BIA findings and formally approved.

 

Determining Minimum Resources to Achieve the MBCO

Establishing an MBCO without identifying the resources needed to deliver it produces an incomplete continuity requirement.

Each CBF owner should determine the minimum resources necessary to maintain the approved operating level.

Table 7: Minimum Resource Requirements

 

Resource Category	JCUS Examples	Planning Consideration
People	Academic staff, examination coordinators, student-support personnel	Minimum staffing, competencies, deputies and alternative personnel.
Technology	LearnJCU, academic applications, authentication and connectivity	Minimum system availability, capacity and recovery requirements.
Information	Student records, assessment information, timetables and academic materials	Minimum datasets, integrity, accessibility and protection.
Facilities	Teaching spaces, laboratories, offices and alternative venues	Minimum safe operating space and alternative location requirements.
Equipment	Computers, specialist teaching equipment and laboratory assets	Essential equipment and replacement arrangements.
Communications	Email, messaging, emergency contact channels	Minimum communication coverage and alternatives.
Suppliers	Technology providers, facilities contractors and specialist service providers	Minimum service commitments and dependency arrangements.
Financial resources	Emergency procurement and critical payments	Available funding and delegated approval arrangements.

 

Quantify minimum resources wherever practical.

For example, the CBF-1 BIA should not simply record that academic staff are required.

It should establish the minimum number of appropriately qualified personnel needed to deliver the approved continuity timetable.

Similarly, ICT requirements should identify the actual services and minimum capacity required to support priority university operations.

 

Validating the Corporate and Business Unit MBCOs

JCUS should establish a structured validation process before approving the proposed MBCOs.

Step 1 — Review Corporate Continuity Commitments

Senior management should confirm which institutional services must remain available during a major disruption.

Step 2 — Conduct Business Unit BIA Workshops

Each CBF owner should assess the function's minimum acceptable operating capability, considering the consequences of disruption over time.

Step 3 — Establish Measurable Requirements

Convert general continuity expectations into objectively verifiable requirements.

For example:

 

General Statement	Measurable MBCO Requirement
Continue teaching	Deliver an approved minimum percentage of designated priority teaching sessions.
Maintain student support	Maintain an accessible critical welfare and emergency escalation arrangement.
Protect student records	Maintain controlled access to an integrity-verified essential student-record dataset.
Continue examinations	Establish an authorised continuity arrangement for every affected priority examination.
Maintain communications	Provide at least one verified communication mechanism for each critical stakeholder group.

Step 4 — Validate Resource Feasibility

Determine whether the proposed minimum operating levels can be achieved using available continuity resources.

Do not automatically lower a proposed MBCO because current resources are inadequate.

Instead, document the resource shortfall and consider it when developing the continuity strategy.

Step 5 — Validate Interdependencies

Confirm that the minimum requirements of supporting CBFs are sufficient to sustain the Corporate MBCO.

Step 6 — Obtain Management Approval

Submit the proposed Corporate and Business Unit MBCOs for approval through the appropriate JCUS BCM governance structure.

Step 7 — Exercise and Review

Validate the approved MBCOs through exercises and tests.

The results should demonstrate whether JCUS can achieve the minimum required service levels under realistic disruption conditions.

 

Governance and Approval of MBCOs

Appropriate senior management should establish and approve the Corporate MBCO.

The respective CBF owners should propose Business Unit MBCOs, the BCM function should review them, and the University's designated governance arrangements should approve them.

Table 8: Recommended MBCO Governance Responsibilities

 

Role	Responsibility
Senior Management	Approve the Corporate MBCO and resolve significant institutional resource constraints.
BCM Steering Committee	Review alignment between Corporate and Business Unit MBCOs.
BCM Programme Lead	Coordinate MBCO development, documentation and periodic review.
CBF Owners	Define, substantiate and maintain individual Business Unit MBCOs.
ICT / Facilities / Support Functions	Validate the feasibility of supporting resource requirements.
Risk and Quality Representatives	Review relevant risk, regulatory and quality-assurance considerations.
Internal Audit / Independent Reviewer	Evaluate whether approved MBCOs are supported by adequate evidence and controls.

 

Regulatory Considerations for JCUS

The Corporate MBCO should also reflect applicable regulatory obligations.

JCUS operates within Singapore's Private Education Act and EduTrust framework.

Its published regulatory information confirms that SWDA assumed the relevant Private Education Act functions and powers from 1 July 2026.

Accordingly, the MBCO validation process should consider whether proposed minimum operating levels are sufficient to maintain applicable student-protection, academic administration, quality-assurance and reporting obligations.

An internal MBCO cannot, by itself, reduce or override a statutory or regulatory obligation.

Where an exceptional disruption prevents normal compliance, the relevant authorised personnel should assess the applicable requirements and determine whether alternative arrangements or regulatory engagement are necessary.

 

Recommended MBCO Documentation Template

JCUS should maintain a standard MBCO record for each CBF.

Table 9: Business Unit MBCO Record

 

Field	Information to be Completed
Organisation	James Cook University Singapore
CBF Code	CBF-XX
Critical Business Function	Approved CBF name
Business Function Owner	Designated accountable position
Key Product / Service	Essential output delivered by the function
Business Unit MBCO	Minimum acceptable service statement
Minimum Operating Capacity	Quantified minimum service level
Minimum Quality Requirement	Applicable service, safety or integrity standard
MTPD	Maximum tolerable disruption duration
RTO	Target timeframe for resumption
Minimum People	Number and competencies required
Minimum Technology	Essential systems and infrastructure
Minimum Information	Required datasets and records
Minimum Facilities	Required operating locations
Critical Suppliers	Essential external dependencies
Alternative Arrangements	Approved continuity options
Measurement Method	How MBCO achievement will be verified
BIA Validation Date	Date of assessment
Approval Authority	Designated management approver
Next Review Date	Scheduled review

The completed record should form part of the JCUS BIA documentation and provide a direct input to business continuity strategy development.

 

Expected Deliverables

At the completion of this MBCO exercise, JCUS should have the following documented outputs:

Deliverable	Expected Output
Corporate MBCO Statement	Approved institutional minimum continuity commitment.
Corporate MBCO Measures	Measurable minimum service requirements.
Business Unit MBCO Catalogue	Approved minimum operating requirements for all 14 CBFs.
Minimum Resource Requirements	Resources required to sustain each approved MBCO.
Interdependency Assessment	Confirmation of relationships between supporting and dependent CBFs.
Academic Calendar Considerations	Identification of periods requiring different continuity requirements.
MBCO Approval Record	Evidence of review and management approval.
MBCO Validation Plan	Planned exercises and tests to demonstrate achievable minimum operating capability.

These deliverables bridge the Business Impact Analysis and the development of Business Continuity Strategies.

 

Establishing the Corporate and Business Unit Minimum Business Continuity Objectives enables James Cook University Singapore to translate its institutional continuity commitments into measurable operational requirements.

The Corporate MBCO defines the minimum university-wide capability that JCUS intends to sustain during a significant disruption.

The Business Unit MBCOs establish the minimum acceptable operating levels for the University's 14 identified Critical Business Functions.

Together, they help management determine which services must continue, the level at which those services must operate and the resources necessary to sustain them.

For JCUS, pay particular attention to maintaining priority teaching and learning, protecting examination integrity, safeguarding students, preserving academic records, sustaining critical ICT capabilities, and meeting applicable regulatory obligations.

The MBCO must also be interpreted alongside the RTO and MTPD.

These parameters are complementary but serve different purposes: the MBCO establishes the required minimum service level, the RTO defines the target time for resumption, and the MTPD identifies the maximum tolerable disruption duration.

Once validated and approved, the Corporate and Business Unit MBCOs should become key inputs to the subsequent Business Continuity Strategy phase.

The ultimate objective is to ensure that JCUS can continue delivering its most important educational and institutional services at an acceptable predefined level, even when normal operating conditions cannot be maintained.

 

Reference Material

The following sources provide methodological and regulatory context for this chapter. The proposed JCUS objectives, measures and implementation examples are original illustrative applications.

1. ISO 22301:2019 — Security and resilience — Business continuity management systems — Requirements.
2. ISO 22313:2020 — Security and resilience — Business continuity management systems — Guidance on the use of ISO 22301.
3. BCMpedia —
   Part 1: MBCO & Key Products and Services
   
4. James Cook University Singapore —
   Private Education Act and Regulatory Framework