.

Resilient Communities: Implementing Business Continuity Management at Jamiyah Singapore
BCM BB__v2_1

[BCM] [JS] [E1] [C2] Understanding Your Organisation

Resilient Communities: Implementing Business Continuity Management at Jamiyah Singapore

Understanding the organisation is essential to establishing an effective Business Continuity Management System (BCMS).

Before developing business continuity strategies, recovery procedures or emergency response arrangements, an organisation must understand its purpose, operating environment, responsibilities, stakeholders, services and dependencies.

For Jamiyah Singapore (JS), this understanding is particularly important because the organisation operates within the social and community services sector, where service disruption may directly affect the safety, welfare and well-being of vulnerable individuals and families.

Unlike organisations whose continuity priorities are driven primarily by commercial and financial considerations, JS must also evaluate the consequences of disruptions to essential care, residential services, educational support, welfare assistance, and community programmes.

For example, a temporary administrative system failure may be manageable through manual procedures.

However, interruptions to resident supervision, essential healthcare support, or emergency welfare assistance may require immediate continuity arrangements to protect beneficiaries.

This chapter establishes the organisational context required to implement BCM at JS. It examines the organisation's purpose, operating environment, internal and external issues, interested parties, governance obligations, critical services and organisational dependencies.

The chapter also explains how these considerations support identifying Critical Business Functions (CBFs), establishing Minimum Business Continuity Objectives (MBCOs), and subsequently developing Business Continuity Strategies.

The methodology aligns with Clause 4 of ISO 22301:2019, particularly the requirements for understanding the organisation and its context, understanding interested-party requirements, determining the scope of the BCMS, and establishing the management system.

New call-to-action

Moh Heng Goh
Business Continuity Management Certified Planner-Specialist-Expert

[BCM] [JS] Legal Disclaimer Banner

eBook 1: Chapter 2

New call-to-action

Understanding Your Organisation: Jamiyah Singapore

 

Introduction

[BCM] [JS] [E1] [C2] Understanding Your OrganisationUnderstanding the organisation is essential to establishing an effective Business Continuity Management System (BCMS).

Before developing business continuity strategies, recovery procedures or emergency response arrangements, an organisation must understand its purpose, operating environment, responsibilities, stakeholders, services and dependencies.

For Jamiyah Singapore (JS), this understanding is particularly important because the organisation operates within the social and community services sector, where service disruption may directly affect the safety, welfare and well-being of vulnerable individuals and families.

Unlike organisations whose continuity priorities are driven primarily by commercial and financial considerations, JS must also evaluate the consequences of disruptions to essential care, residential services, educational support, welfare assistance, and community programmes.

For example, a temporary administrative system failure may be manageable through manual procedures.

However, interruptions to resident supervision, essential healthcare support, or emergency welfare assistance may require immediate continuity arrangements to protect beneficiaries.

This chapter establishes the organisational context required to implement BCM at JS. It examines the organisation's purpose, operating environment, internal and external issues, interested parties, governance obligations, critical services and organisational dependencies.

The chapter also explains how these considerations support identifying Critical Business Functions (CBFs), establishing Minimum Business Continuity Objectives (MBCOs), and subsequently developing Business Continuity Strategies.

The methodology aligns with Clause 4 of ISO 22301:2019, particularly the requirements for understanding the organisation and its context, understanding interested-party requirements, determining the scope of the BCMS, and establishing the management system.

 

Understanding Jamiyah Singapore

Organisational Background

Jamiyah Singapore is a charitable and community-oriented organisation operating in Singapore. Its activities include social welfare, community development, education, and support for individuals and families requiring assistance.

For BCM planning purposes, JS may be considered a multi-service charitable organisation whose continuity requirements extend across residential facilities, care-related services, educational programmes, welfare assistance, beneficiary management and supporting administrative operations.

Its operating environment may involve direct service delivery, interaction with vulnerable beneficiaries, collaboration with government agencies, reliance on employees and volunteers, and dependence on external suppliers and service providers.

The BCM programme must therefore address both organisational sustainability and the continued delivery of essential services to beneficiaries.

Table 2.1: Organisational Profile of Jamiyah Singapore

Organisational Element

Description and BCM Relevance

Organisation Name

Jamiyah Singapore

Organisation Acronym

JS

Country of Operation

Singapore

Organisation Type

Charitable and community service organisation

Primary Purpose

Community welfare, social support, education and related charitable services

Principal Stakeholders

Beneficiaries, residents, children, families, employees, volunteers, donors, government agencies, regulators and service providers

Operating Environment

Community service facilities, residential settings, educational environments, administrative offices and external service locations

Governance Authority

Commissioner of Charities, Singapore

Sector Oversight

Relevant authorities, including MSF, MOH and ECDA, where applicable to specific services

Primary BCM Standard

ISO 22301:2019 with Amendment 1:2024

BCM Guidance

ISO 22313:2020

Key BCM Consideration

Protection of beneficiaries and continuation of essential community services

Principal Continuity Dependencies

Personnel, premises, utilities, information, ICT systems, communications, suppliers, transportation and financial resources

Organisational Purpose and Continuity Responsibilities

The purpose of BCM at JS is to ensure that essential services remain available at an acceptable minimum level during incidents, emergencies and disasters.

The programme should support the organisation's ability to:

  1. Protect the life, safety and welfare of beneficiaries, residents, children, employees and volunteers.
  2. Maintain essential residential care and healthcare-related support.
  3. Continue critical educational and student care services where safe and practicable.
  4. Deliver emergency welfare and food assistance to vulnerable individuals and families.
  5. Maintain beneficiary communications, safeguarding and urgent case management.
  6. Protect confidential information and vital records.
  7. Maintain financial, procurement and administrative capabilities required to sustain essential services.
  8. Restore normal operations in a controlled and accountable manner.

Translate these responsibilities into measurable continuity objectives and support them with approved recovery strategies.

 

Understanding the External Operating Environment

External issues are conditions outside JS's direct control that may influence its ability to deliver services or achieve BCM objectives.

For a charitable organisation operating in Singapore, these include regulatory requirements, economic conditions, public health threats, environmental conditions, demographic developments, technological changes and third-party dependencies.

Table 2.2: External Issues Affecting BCM at Jamiyah Singapore

External Issue

Organisational Context

BCM Implications

Illustrative Example

Legal and Regulatory Environment

JS operates within Singapore's charity governance framework and may be subject to service-specific requirements.

Continuity arrangements must preserve applicable legal, safeguarding, reporting and accountability obligations.

A disruption to residential care must not compromise mandatory safety and care responsibilities.

Public Health Environment

Infectious disease outbreaks may affect staff, residents, children and beneficiaries.

JS requires arrangements for workforce shortages, infection-related restrictions, and continuity of essential care.

An outbreak reduces the number of residential care staff available.

Economic Conditions

Inflation and changing operating costs may affect service delivery and procurement.

BCM strategies must consider the affordability and availability of emergency resources.

Increased food and transportation costs affect welfare distribution activities.

Funding and Donations

Charitable programmes may depend on donations, grants and other funding sources.

Financial continuity is necessary to maintain essential programmes and emergency expenditure.

A prolonged interruption to donation processing creates cash-flow pressure.

Demographic and Social Conditions

Changes in community needs may increase demand for welfare and care services.

Continuity arrangements should accommodate surges in demand during emergencies.

More vulnerable households require emergency assistance following a major disruption.

Technology Environment

Digital systems support administration, beneficiary information and communications.

JS must protect information availability, integrity and confidentiality.

A ransomware incident prevents access to beneficiary records.

Cybersecurity Threats

Cybercriminal activity and social engineering may affect charitable organisations.

Integrate cyber incident response and IT disaster recovery with BCM.

Compromised credentials interrupt access to essential applications.

Climate and Environmental Conditions

Singapore experiences heavy rainfall, thunderstorms, heat and periodic transboundary haze.

Facilities and essential care arrangements should address environmental disruption.

Extreme heat affects residents when cooling systems fail.

Supplier and Service Provider Environment

JS may rely on suppliers for food, healthcare products, ICT, maintenance and transport.

Third-party dependencies require continuity arrangements and alternative sourcing.

A food supplier cannot deliver meals to a residential facility.

Transportation Infrastructure

Staff, volunteers, beneficiaries and suppliers depend on public and private transportation.

Transport disruptions may delay personnel and essential deliveries.

Road closures prevent essential personnel from reaching a care facility.

Community Expectations

Beneficiaries and families expect safe, reliable and accountable services.

Effective communications and service continuity are important to public confidence.

Families require timely updates during an emergency relocation.

Government and Emergency Services

Emergency response may require coordination with public authorities and specialist agencies.

Escalation and communication procedures must support timely coordination.

A facility evacuation requires emergency services and alternative accommodation.

Implications for Business Continuity Management

Do not treat external issues as isolated environmental observations.

Translate each relevant issue into specific BCM considerations, such as identifying credible disruption scenarios, assessing dependencies, developing recovery strategies, and determining emergency communication requirements.

For example, increasing dependence on cloud-based applications may require JS to consider whether critical beneficiary information can remain accessible when the primary service provider becomes unavailable.

Similarly, changes in community demand may require JS to review whether its minimum staffing and resource arrangements remain sufficient during emergencies.

 

Understanding the Internal Operating Environment

Internal issues are organisational characteristics and conditions that influence the ability to maintain essential services.

These include governance arrangements, organisational structure, workforce capability, facilities, technology, financial resources, operational processes and organisational culture.

Table 2.3: Internal Issues Affecting BCM at Jamiyah Singapore

Internal Issue

Description

BCM Implications

Governance and Leadership

Oversight by the governing body and management,  supported by delegated responsibilities.

BCM accountability, policy approval, resource allocation and management review must be established.

Organisational Structure

Multiple service units may operate across different facilities and programmes.

Service units must coordinate responsibilities and escalation arrangements.

Workforce Availability

Essential services may depend on qualified care personnel, administrative staff and volunteers.

Cross-training, relief staffing and succession arrangements may be required.

Specialist Competencies

Certain care and educational activities require appropriately qualified personnel.

Recovery strategies must account for competency and safeguarding requirements.

Residential Facilities

Residential services depend on safe accommodation, supervision, utilities and essential supplies.

Alternate accommodation and continuous essential care arrangements may be necessary.

ICT Infrastructure

Applications and digital records support operational and administrative functions.

Evaluate backup, restoration, alternate access, and secure manual procedures.

Information Management

JS may maintain sensitive personal, beneficiary and care-related information.

Vital records must remain protected and accessible during disruption.

Financial Resources

Service delivery requires funding for staffing, facilities, supplies and emergency expenditure.

Consider emergency purchasing and payment authorisation arrangements.

Procurement and Suppliers

Essential services may depend on third-party products and services.

Identify critical suppliers and alternative sourcing arrangements.

Internal Communications

Service units require reliable communication during incidents.

Emergency contact lists, escalation procedures and alternate communication channels are necessary.

Organisational Culture

Employees and volunteers may have different levels of BCM awareness.

Training, exercises and awareness activities should reinforce continuity responsibilities.

Existing Emergency Arrangements

Individual facilities may have evacuation, safety or emergency response procedures.

Integrate existing arrangements into a coordinated enterprise BCM framework.

Example: Residential Care Operations

Consider a hypothetical incident in which a JS residential facility experiences an extended electricity outage.

The disruption may affect lighting, ventilation, cooling, refrigeration, electronic records, communications and essential equipment.

The internal organisational assessment should determine:

  • Which residents require continuous supervision or specialist support.
  • Whether essential care can continue safely at the affected premises.
  • Which personnel must remain on duty.
  • What emergency supplies and alternative equipment are required.
  • Whether vital records can be accessed securely.
  • When an alternative facility or resident relocation becomes necessary.

This example shows why BCM planning must consider the relationships among people, premises, processes, information, technology, and suppliers.

 

Understanding Interested Parties and Their Requirements

ISO 22301 requires an organisation to determine interested parties relevant to its BCMS and identify their applicable requirements.

For JS, interested parties include beneficiaries, families, employees, volunteers, governing bodies, regulators, suppliers, donors and community partners.

Different interested parties may have different expectations concerning service availability, safety, information protection, communication and accountability.

Table 2.4: Interested Parties and BCM Requirements

Interested Party

Principal Needs and Expectations

BCM Requirements for JS

Residents and Beneficiaries

Safe, reliable and timely essential services.

Maintain critical care, safeguarding and welfare support during disruption.

Children and Students

Safe supervision and continuity of essential care or educational support.

Establish emergency accountability, safe handover and alternative arrangements.

Families and Caregivers

Assurance regarding safety and welfare.

Provide timely, accurate and authorised communications.

Governing Board

Ensure effective governance, accountability, and protection of organisational objectives.

Approve BCM policy, risk appetite, objectives and appropriate resources.

Senior Management

Continue delivering priority services and manage incidents effectively.

Establish activation, escalation and recovery decision-making arrangements.

Employees

Safe working conditions, clear responsibilities and reliable communication.

Provide emergency instructions, safety procedures and workforce continuity arrangements.

Volunteers

Clear roles, supervision and safe participation.

Maintain emergency contact, deployment and volunteer coordination arrangements.

Commissioner of Charities

Ensure appropriate governance, accountability, and compliance with applicable charity obligations.

Maintain records, oversight, reporting and governance continuity.

MSF, MOH and ECDA, Where Applicable

Compliance with relevant service-specific obligations.

Maintain required service standards, safety arrangements and applicable notifications.

Donors and Funding Partners

Accountability, transparency and responsible use of funds.

Maintain essential financial records and communications.

Suppliers and Contractors

Clear service requirements and communication.

Define continuity obligations and emergency coordination arrangements.

Community Partners

Coordinated delivery of social assistance and referrals.

Establish alternative coordination and communication procedures.

Emergency Services

Accurate information and timely escalation.

Maintain emergency response interfaces and facility information.

Banks and Financial Institutions

Authorised and accurate financial transactions.

Maintain essential payment and banking continuity arrangements.

Legal, Regulatory and Governance Considerations

JS should maintain a documented register of legal, regulatory, contractual and governance requirements relevant to its BCM programme.

The register should distinguish between requirements that apply to the organisation generally and those that apply only to particular licensed or regulated activities.

Relevant considerations may include the Charities Act and associated governance requirements, applicable personal data protection obligations, workplace safety, fire safety, employment requirements and sector-specific service standards.

The Code of Governance for Charities and IPCs (2023) provides governance expectations, while ISO 22301 and ISO 22313 provide BCM requirements and guidance. Neither ISO standard is itself a Singapore law or regulator.

For services subject to MSF, MOH, or ECDA oversight, identify the applicable legislation, licence conditions, and service standards individually rather than assuming every requirement applies to all JS activities.

 

Understanding the Products and Services of Jamiyah Singapore

Identifying products and services is necessary to determine which organisational outcomes must be protected during disruption.

For BCM purposes, a product or service represents an outcome delivered to beneficiaries, stakeholders or internal users.

The supporting Critical Business Functions are the activities required to deliver those outcomes.

Table 2.5: Illustrative Key Products and Services

Product or Service

Principal Beneficiaries

Continuity Considerations

Residential Care and Safe Accommodation

Residents and families

Continuous supervision, accommodation, safeguarding, meals and essential daily care.

Nursing and Essential Healthcare Support

Residents requiring healthcare assistance

Time-critical healthcare support, medication arrangements and emergency escalation.

Early Childhood Care and Education

Children and parents

Child safety, accountability, supervision and authorised handover.

Student Care and Educational Support

Students and families

Safe supervision, essential student support and family communication.

Emergency Welfare and Financial Assistance

Vulnerable individuals and households

Urgent case assessment, approved assistance and alternative disbursement arrangements.

Food Assistance and Essential Distribution

Individuals and families requiring support

Availability of essential food, supplies and distribution arrangements.

Critical Beneficiary Case Management

Beneficiaries requiring urgent intervention

Safeguarding, urgent referrals, case information and coordination.

Beneficiary and Family Communications

Beneficiaries, residents, families and caregivers

Timely emergency information and reliable communication channels.

Critical Information and Digital Services

Service units and authorised personnel

Access to essential records, applications and communications.

Essential Finance and Procurement Support

Internal service units and suppliers

Emergency expenditure, essential payments and procurement continuity.

These service descriptions are illustrative and should be reconciled with JS's approved service catalogue.

Identifying Critical Business Functions

Critical Business Functions are organisational activities whose disruption could result in unacceptable consequences within a defined period.

For JS, assess criticality not only through financial and operational criteria but also through consequences for beneficiary safety, safeguarding, social responsibility, and legal obligations.

The following CBF catalogue provides a proposed basis for subsequent Business Impact Analysis.

Table 2.6: Critical Business Functions for Jamiyah Singapore

CBF Code

Critical Business Function

Principal Continuity Requirement

CBF-1

Residential Care and Resident Safety

Maintain safe accommodation, supervision, safeguarding and essential daily care.

CBF-2

Nursing and Essential Healthcare Support

Maintain time-critical healthcare assistance and essential clinical coordination.

CBF-3

Early Childhood Care and Education

Protect children and maintain essential supervision and safe handover arrangements.

CBF-4

Student Care and Educational Support

Maintain student safeguarding, accountability and essential care support.

CBF-5

Emergency Welfare and Financial Assistance

Continue urgent welfare assessment and approved emergency assistance.

CBF-6

Food Assistance and Essential Distribution

Maintain essential food and supply distribution to priority beneficiaries.

CBF-7

Critical Beneficiary Case Management and Referral

Maintain urgent case intervention, safeguarding and referrals.

CBF-8

Beneficiary, Family and Emergency Communications

Maintain critical communications with beneficiaries, families and stakeholders.

CBF-9

Critical ICT Systems and Information Management

Maintain or recover essential information, applications and communications.

CBF-10

Essential Finance, Procurement and Resource Support

Maintain essential payments, procurement and resource mobilisation.

Relationship Between Products, Services and CBFs

A single product or service may depend on several CBFs.

For example, residential care depends primarily on CBF-1 but also requires CBF-2 for essential healthcare support, CBF-8 for family and emergency communications, CBF-9 for information access and CBF-10 for supplies and financial support.

Document this relationship during the BIA to ensure recovery strategies address the full service-delivery chain, not individual functions in isolation.

 

Understanding Organisational Dependencies

Critical services depend on a combination of internal resources and external providers.

JS must identify these dependencies before it can determine whether its recovery strategies are realistic and achievable.

Table 2.7: Principal BCM Dependencies

Dependency Category

Illustrative Resources

Potential Continuity Consequences

People

Care personnel, healthcare support staff, educators, social workers, administrators and volunteers

Staff shortages may prevent maintaining minimum service levels.

Premises

Residential facilities, care centres, educational facilities, offices and distribution points

Denial of access may require alternative accommodation or service locations.

Utilities

Electricity, water, sanitation, cooling and telecommunications

Failure may make premises unsuitable for essential care or service delivery.

ICT Systems

Beneficiary systems, financial applications, document management and communications

Outages may prevent access to records and delay operational decisions.

Information

Resident care records, emergency contacts, beneficiary files and financial records

Loss of information may compromise safety, coordination and accountability.

Suppliers

Food providers, medical suppliers, maintenance contractors and ICT vendors

Supplier failure may interrupt essential resources.

Transportation

Staff transport, beneficiary transport, delivery services and emergency vehicles

Disruption may delay relocation, staffing and essential deliveries.

Financial Services

Banking platforms, payment systems and funding channels

Financial disruption may delay emergency assistance and procurement.

Community Partners

Social service agencies, healthcare providers and referral partners

Partner unavailability may interrupt urgent support and referral arrangements.

Governance and Decision-Making

Governing Board, management, delegated authorities and emergency coordinators

Unclear authority may delay activation, expenditure or recovery decisions.

Example: Food Assistance and Essential Distribution

Consider a disruption affecting JS's principal food supplier.

The organisation may still have sufficient employees and operational premises, but the loss of essential supplies could compromise its ability to deliver food assistance.

The BIA should therefore identify the required food items, priority beneficiaries, minimum distribution capability, alternate suppliers, transportation arrangements, procurement authority and acceptable recovery time.

This illustrates why continuity planning must address external dependencies as well as internal operational capability.

 

Understanding Organisational Risks and Opportunities

ISO 22301 requires the organisation to address risks and opportunities relevant to the BCMS and its intended outcomes.

At this stage, the purpose is to identify issues that may affect the establishment and effectiveness of the BCM programme.

Conduct detailed threat analysis and likelihood and impact scoring using the Risk Analysis and Review methodology.

Table 2.8: BCM Risks and Improvement Opportunities

Organisational Issue

Potential BCM Risk

Improvement Opportunity

Multiple Service Locations

Inconsistent continuity arrangements across facilities.

Establish a common BCM policy and standardised planning methodology.

Reliance on Specialist Personnel

Essential services may be interrupted when qualified staff are unavailable.

Develop competency mapping, relief staffing and cross-training arrangements.

Dependency on Critical Suppliers

A single supplier failure may affect multiple services.

Establish supplier dependency mapping and alternative sourcing arrangements.

Reliance on Digital Records

ICT outages may prevent access to vital information.

Develop protected access to records and tested restoration arrangements.

Increasing Cyber Threats

Cyber incidents may interrupt essential systems and compromise information.

Integrate cybersecurity response with BCM and IT disaster recovery.

Dependence on Volunteers

Volunteer shortages may reduce programme delivery capacity.

Establish volunteer mobilisation and alternate staffing procedures.

Emergency Communication Complexity

Delayed or inconsistent messages may affect families and beneficiaries.

Develop an integrated crisis communication framework.

Limited Recovery Resources

Simultaneous disruptions may exceed available contingency capacity.

Prioritise minimum service requirements and shared recovery resources.

Changing Beneficiary Needs

Existing continuity arrangements may no longer meet essential service demand.

Review MBCOs and resource requirements periodically.

Fragmented Emergency Procedures

Different service units may respond inconsistently.

Integrate emergency response, crisis management and business continuity plans.

 

Determining the Scope of the Business Continuity Management System

The BCMS scope defines the organisational boundaries, activities, products, services, and locations the management system covers.

JS should determine its BCMS scope by considering its organisational context, interested-party requirements, legal and regulatory obligations, critical services and relevant dependencies.

Proposed BCMS Scope for Jamiyah Singapore

A proposed scope statement is:

The Business Continuity Management System of Jamiyah Singapore encompasses the governance, planning, coordination, and continuity arrangements required to maintain and recover its identified critical community, residential care, healthcare support, educational, welfare, and enabling services during incidents, emergencies, and disasters.

The scope includes the personnel, premises, processes, information, technology, suppliers, and external dependencies needed to meet approved minimum continuity requirements.

This statement should be reviewed and formally approved by JS management.

Table 2.9: Proposed BCMS Scope Boundaries

Scope Element

Proposed Inclusion

Organisational Units

Service units responsible for identified critical products and services, together with essential supporting functions.

Critical Services

The services supported by CBF-1 through CBF-10.

Physical Locations

Facilities and premises supporting in-scope critical services.

Personnel

Employees, volunteers, contractors and authorised external personnel supporting essential activities.

ICT Systems

Applications, infrastructure, communication platforms and information required for essential services.

Third Parties

Critical suppliers and service providers whose disruption may affect continuity objectives.

Governance Activities

BCM policy, planning, approval, management review, audit and continual improvement.

Emergency and Recovery Activities

Incident escalation, crisis management interfaces, continuity activation, recovery and return to normal operations.

Any exclusions should be documented and justified.

Do not exclude an activity solely because it is outsourced or managed by another department if its disruption could compromise an in-scope critical service.

 

Establishing Organisational BCM Objectives

Once JS has established the organisational context and scope, it should define BCM objectives that support its mission and essential service obligations.

Where practicable, the objectives should be measurable and consistent with the organisation's approved risk appetite and continuity requirements.

Table 2.10: Proposed BCM Objectives

BCM Objective

Intended Outcome

Illustrative Performance Measure

Protect Life and Safety

Maintain beneficiary, resident, child and workforce safety.

Safety-critical activities remain continuously supported during disruption.

Maintain Essential Services

Sustain approved minimum service levels for critical functions.

CBFs achieve their approved MBCOs and RTOs during exercises or incidents.

Strengthen Workforce Resilience

Maintain access to competent personnel.

Document and test relief staffing and delegation arrangements.

Protect Vital Records

Maintain access to essential information.

Recovery tests demonstrate that approved information recovery requirements can be achieved.

Strengthen Supplier Continuity

Reduce dependence on unavailable critical suppliers.

Critical suppliers have documented continuity arrangements or approved alternatives.

Improve Crisis Coordination

Support timely activation and management decisions.

Exercise and evaluate escalation and activation arrangements.

Improve BCM Competency

Ensure personnel understand their continuity responsibilities.

Relevant personnel complete scheduled BCM training and exercises.

Maintain BCM Effectiveness

Ensure plans and strategies remain suitable.

BCM reviews, exercises, corrective actions and management reviews are completed as scheduled.

Approve actual targets following the BIA and an assessment of available recovery capabilities.

 

Governance and Accountability for BCM

Effective BCM requires clearly defined authority, accountability and responsibility.

For JS, governance arrangements should ensure that continuity planning is not treated solely as an administrative or ICT activity.

Table 2.11: Proposed BCM Governance Responsibilities

Role

Principal BCM Responsibilities

Governing Board

Provide oversight, approve strategic BCM direction where appropriate and ensure adequate governance arrangements.

Senior Management

Approve BCMS scope, objectives, recovery priorities, resource allocation and major continuity decisions.

BCM Steering Committee

Coordinate BCM implementation, review progress, resolve cross-functional issues and recommend improvements.

BCM Coordinator

Maintain the BCM methodology, coordinate assessments, consolidate plans and oversee exercises.

Critical Business Function Owners

Identify critical activities, assess impacts, determine recovery requirements and maintain continuity procedures.

Facilities and Safety Personnel

Maintain emergency response, evacuation, facility safety and alternative premises arrangements.

Human Resources

Coordinate workforce continuity, relief staffing, staff welfare and emergency communications.

ICT and Information Security

Maintain ICT continuity, cyber response, backup, restoration and IT disaster recovery arrangements.

Finance and Procurement

Maintain emergency expenditure, payments, critical supplies and supplier continuity arrangements.

Communications Personnel

Coordinate approved messages to beneficiaries, families, employees, donors and other stakeholders.

Internal Audit or Independent Reviewer

Provide independent assurance regarding the adequacy and effectiveness of the BCMS.

 

Practical Implementation Approach

JS should undertake the organisational context assessment as a structured exercise involving management, service owners and supporting departments.

Required Documentation

The following documents should be produced or updated during this exercise.

Table 2.12: Organisational Context Assessment Deliverables

Deliverable

Purpose

Proposed Owner

Organisational Profile

Establish the mission, structure, operating environment and principal services.

Senior Management / BCM Coordinator

Internal and External Issues Register

Record issues relevant to BCM planning and performance.

BCM Coordinator / Risk Management

Interested Parties Register

Identify relevant stakeholders and continuity requirements.

Governance / Service Owners

Legal and Regulatory Requirements Register

Identify applicable compliance and service obligations.

Governance / Compliance

Products and Services Catalogue

Document services and outcomes requiring continuity consideration.

Service Owners

Critical Business Functions Register

Identify the activities necessary to deliver priority services.

CBF Owners

Dependency Register

Document people, premises, technology, information and supplier dependencies.

CBF Owners / Supporting Functions

BCMS Scope Statement

Establish the boundaries and applicability of the BCMS.

Senior Management

BCM Objectives Register

Define intended continuity outcomes and performance measures.

BCM Steering Committee

Management Approval Record

Provide evidence of review, approval and accountability.

Senior Management / Secretariat

 

Maintaining and Reviewing the Organisational Context

Organisational context is not a one-time assessment.

JS should review its context at planned intervals and whenever significant changes occur.

Review triggers may include the introduction or discontinuation of a service, relocation of a facility, changes in beneficiary needs, significant staff restructuring, changes to applicable requirements, adoption of major technology platforms, new critical suppliers, significant incidents or changes in the external threat environment.

The BCM Coordinator should ensure that relevant changes are reflected in the BCMS scope, CBF register, BIA, risk assessment, continuity strategies and recovery procedures.

The review should also consider whether changes in climate conditions or other external circumstances introduce new continuity requirements. 

 

Banner [Summary] [BCM]  [E1] [C2] Understanding Your Organisation

Understanding the organisation is the starting point for effective Business Continuity Management.

Without a clear understanding of organisational objectives, operating conditions, stakeholders, critical services and dependencies, continuity plans may fail to address the activities and resources that matter most during a disruption.

For Jamiyah Singapore, the organisational context assessment must place particular emphasis on protecting vulnerable beneficiaries and continuing to deliver essential care, educational support, welfare assistance, and community services.

The assessment should also recognise that interconnected resources support essential services, including personnel, facilities, utilities, information, technology, suppliers, financial systems, and external partners.

A disruption affecting any of these resources may have consequences extending beyond the immediate service unit.

Therefore, JS should adopt an integrated approach that connects organisational governance, risk management, operational activities and continuity planning.

By documenting its internal and external issues, interested-party requirements, critical services and organisational dependencies, JS can establish a defensible foundation for its BCMS.

This foundation will support the subsequent identification of credible threats, assessment of business impacts, determination of recovery requirements and selection of appropriate continuity strategies.

Ultimately, understanding Jamiyah Singapore means understanding not only how the organisation operates, but also whom it serves, what must continue during disruption and which capabilities are essential to protecting the people who depend on its services.

A well-defined organisational context will enable JS to implement a BCMS aligned with its charitable mission, proportionate to its operating environment, and capable of supporting resilient community services.

Author's implementation note: This chapter is an illustrative BCM implementation guide, not a verified statement of every current JS programme, facility, licence or internal control. The ten-CBF catalogue follows the working methodology developed for this eBook series.

Validate organisational details, applicable sector regulations, and proposed governance arrangements with JS before formal adoption or publication.

 

 

x [BCM] [JS] Summing Up Banner

eBook 1: Understanding Your Organisation
C1 C2 C3 C4 C5 C6
[BCM] [JS] [E1] [C1] Overview of BCM Case Study [BCM] [JS] [E1] [C2] Understanding Your Organisation [BCM] [JS] [E1] [C3] Establishing Organisational Goals [BCM] [JS] [E1] [C4] Establishing Business Continuity Objectives [BCM] [JS] [E1] [C5] Determining BC Assumptions [BCM] [JS] [E1] [C6] Composing BCM Team
C7 C8 C9 C10 C11 C12
[BCM] [JS] [E1] [C7] Analysing Operating Environment [BCM] [JS] [E1] [C8] Implementing the BCM Planning Methodology [BCM] [JS] [E1] [C9] Assessing Risks and Threats [BCM] [JS] [E1] [C10] Identifying Critical Business Functions [BCM] [JS] [E1] [C11] Summary [BCM] [JS] [E1] [C12] Back Cover
 

 

More Information About Business Continuity Management Courses

 

To learn more about the course and schedule, click the buttons below for BCM-300 Business Continuity Management Implementer [BCM-3] and BCM-5000 Business Continuity Management Expert Implementer [BCM-5].

New call-to-action New call-to-action Register [BL-B-3]*
New call-to-action New call-to-action New call-to-action
FAQ [BL-B-3]

Please feel free to send us a note if you have any questions.

Email to Sales Team [BCM Institute]

 FAQ BL-B-5 BCM-5000
New call-to-action New call-to-action New call-to-action
 
 

Your Comments Here :

 

More Posts

New Call-to-action