Before developing business continuity strategies, recovery procedures or emergency response arrangements, an organisation must understand its purpose, operating environment, responsibilities, stakeholders, services and dependencies.
For Jamiyah Singapore (JS), this understanding is particularly important because the organisation operates within the social and community services sector, where service disruption may directly affect the safety, welfare and well-being of vulnerable individuals and families.
Unlike organisations whose continuity priorities are driven primarily by commercial and financial considerations, JS must also evaluate the consequences of disruptions to essential care, residential services, educational support, welfare assistance, and community programmes.
For example, a temporary administrative system failure may be manageable through manual procedures.
However, interruptions to resident supervision, essential healthcare support, or emergency welfare assistance may require immediate continuity arrangements to protect beneficiaries.
This chapter establishes the organisational context required to implement BCM at JS. It examines the organisation's purpose, operating environment, internal and external issues, interested parties, governance obligations, critical services and organisational dependencies.
The chapter also explains how these considerations support identifying Critical Business Functions (CBFs), establishing Minimum Business Continuity Objectives (MBCOs), and subsequently developing Business Continuity Strategies.
The methodology aligns with Clause 4 of ISO 22301:2019, particularly the requirements for understanding the organisation and its context, understanding interested-party requirements, determining the scope of the BCMS, and establishing the management system.
Jamiyah Singapore is a charitable and community-oriented organisation operating in Singapore. Its activities include social welfare, community development, education, and support for individuals and families requiring assistance.
For BCM planning purposes, JS may be considered a multi-service charitable organisation whose continuity requirements extend across residential facilities, care-related services, educational programmes, welfare assistance, beneficiary management and supporting administrative operations.
Its operating environment may involve direct service delivery, interaction with vulnerable beneficiaries, collaboration with government agencies, reliance on employees and volunteers, and dependence on external suppliers and service providers.
The BCM programme must therefore address both organisational sustainability and the continued delivery of essential services to beneficiaries.
Table 2.1: Organisational Profile of Jamiyah Singapore
|
Organisational Element |
Description and BCM Relevance |
|
Organisation Name |
Jamiyah Singapore |
|
Organisation Acronym |
JS |
|
Country of Operation |
Singapore |
|
Organisation Type |
Charitable and community service organisation |
|
Primary Purpose |
Community welfare, social support, education and related charitable services |
|
Principal Stakeholders |
Beneficiaries, residents, children, families, employees, volunteers, donors, government agencies, regulators and service providers |
|
Operating Environment |
Community service facilities, residential settings, educational environments, administrative offices and external service locations |
|
Governance Authority |
Commissioner of Charities, Singapore |
|
Sector Oversight |
Relevant authorities, including MSF, MOH and ECDA, where applicable to specific services |
|
Primary BCM Standard |
ISO 22301:2019 with Amendment 1:2024 |
|
BCM Guidance |
ISO 22313:2020 |
|
Key BCM Consideration |
Protection of beneficiaries and continuation of essential community services |
|
Principal Continuity Dependencies |
Personnel, premises, utilities, information, ICT systems, communications, suppliers, transportation and financial resources |
The purpose of BCM at JS is to ensure that essential services remain available at an acceptable minimum level during incidents, emergencies and disasters.
The programme should support the organisation's ability to:
Translate these responsibilities into measurable continuity objectives and support them with approved recovery strategies.
External issues are conditions outside JS's direct control that may influence its ability to deliver services or achieve BCM objectives.
For a charitable organisation operating in Singapore, these include regulatory requirements, economic conditions, public health threats, environmental conditions, demographic developments, technological changes and third-party dependencies.
Table 2.2: External Issues Affecting BCM at Jamiyah Singapore
|
External Issue |
Organisational Context |
BCM Implications |
Illustrative Example |
|
Legal and Regulatory Environment |
JS operates within Singapore's charity governance framework and may be subject to service-specific requirements. |
Continuity arrangements must preserve applicable legal, safeguarding, reporting and accountability obligations. |
A disruption to residential care must not compromise mandatory safety and care responsibilities. |
|
Public Health Environment |
Infectious disease outbreaks may affect staff, residents, children and beneficiaries. |
JS requires arrangements for workforce shortages, infection-related restrictions, and continuity of essential care. |
An outbreak reduces the number of residential care staff available. |
|
Economic Conditions |
Inflation and changing operating costs may affect service delivery and procurement. |
BCM strategies must consider the affordability and availability of emergency resources. |
Increased food and transportation costs affect welfare distribution activities. |
|
Funding and Donations |
Charitable programmes may depend on donations, grants and other funding sources. |
Financial continuity is necessary to maintain essential programmes and emergency expenditure. |
A prolonged interruption to donation processing creates cash-flow pressure. |
|
Demographic and Social Conditions |
Changes in community needs may increase demand for welfare and care services. |
Continuity arrangements should accommodate surges in demand during emergencies. |
More vulnerable households require emergency assistance following a major disruption. |
|
Technology Environment |
Digital systems support administration, beneficiary information and communications. |
JS must protect information availability, integrity and confidentiality. |
A ransomware incident prevents access to beneficiary records. |
|
Cybersecurity Threats |
Cybercriminal activity and social engineering may affect charitable organisations. |
Integrate cyber incident response and IT disaster recovery with BCM. |
Compromised credentials interrupt access to essential applications. |
|
Climate and Environmental Conditions |
Singapore experiences heavy rainfall, thunderstorms, heat and periodic transboundary haze. |
Facilities and essential care arrangements should address environmental disruption. |
Extreme heat affects residents when cooling systems fail. |
|
Supplier and Service Provider Environment |
JS may rely on suppliers for food, healthcare products, ICT, maintenance and transport. |
Third-party dependencies require continuity arrangements and alternative sourcing. |
A food supplier cannot deliver meals to a residential facility. |
|
Transportation Infrastructure |
Staff, volunteers, beneficiaries and suppliers depend on public and private transportation. |
Transport disruptions may delay personnel and essential deliveries. |
Road closures prevent essential personnel from reaching a care facility. |
|
Community Expectations |
Beneficiaries and families expect safe, reliable and accountable services. |
Effective communications and service continuity are important to public confidence. |
Families require timely updates during an emergency relocation. |
|
Government and Emergency Services |
Emergency response may require coordination with public authorities and specialist agencies. |
Escalation and communication procedures must support timely coordination. |
A facility evacuation requires emergency services and alternative accommodation. |
Do not treat external issues as isolated environmental observations.
Translate each relevant issue into specific BCM considerations, such as identifying credible disruption scenarios, assessing dependencies, developing recovery strategies, and determining emergency communication requirements.
For example, increasing dependence on cloud-based applications may require JS to consider whether critical beneficiary information can remain accessible when the primary service provider becomes unavailable.
Similarly, changes in community demand may require JS to review whether its minimum staffing and resource arrangements remain sufficient during emergencies.
Internal issues are organisational characteristics and conditions that influence the ability to maintain essential services.
These include governance arrangements, organisational structure, workforce capability, facilities, technology, financial resources, operational processes and organisational culture.
Table 2.3: Internal Issues Affecting BCM at Jamiyah Singapore
|
Internal Issue |
Description |
BCM Implications |
|
Governance and Leadership |
Oversight by the governing body and management, supported by delegated responsibilities. |
BCM accountability, policy approval, resource allocation and management review must be established. |
|
Organisational Structure |
Multiple service units may operate across different facilities and programmes. |
Service units must coordinate responsibilities and escalation arrangements. |
|
Workforce Availability |
Essential services may depend on qualified care personnel, administrative staff and volunteers. |
Cross-training, relief staffing and succession arrangements may be required. |
|
Specialist Competencies |
Certain care and educational activities require appropriately qualified personnel. |
Recovery strategies must account for competency and safeguarding requirements. |
|
Residential Facilities |
Residential services depend on safe accommodation, supervision, utilities and essential supplies. |
Alternate accommodation and continuous essential care arrangements may be necessary. |
|
ICT Infrastructure |
Applications and digital records support operational and administrative functions. |
Evaluate backup, restoration, alternate access, and secure manual procedures. |
|
Information Management |
JS may maintain sensitive personal, beneficiary and care-related information. |
Vital records must remain protected and accessible during disruption. |
|
Financial Resources |
Service delivery requires funding for staffing, facilities, supplies and emergency expenditure. |
Consider emergency purchasing and payment authorisation arrangements. |
|
Procurement and Suppliers |
Essential services may depend on third-party products and services. |
Identify critical suppliers and alternative sourcing arrangements. |
|
Internal Communications |
Service units require reliable communication during incidents. |
Emergency contact lists, escalation procedures and alternate communication channels are necessary. |
|
Organisational Culture |
Employees and volunteers may have different levels of BCM awareness. |
Training, exercises and awareness activities should reinforce continuity responsibilities. |
|
Existing Emergency Arrangements |
Individual facilities may have evacuation, safety or emergency response procedures. |
Integrate existing arrangements into a coordinated enterprise BCM framework. |
Consider a hypothetical incident in which a JS residential facility experiences an extended electricity outage.
The disruption may affect lighting, ventilation, cooling, refrigeration, electronic records, communications and essential equipment.
The internal organisational assessment should determine:
This example shows why BCM planning must consider the relationships among people, premises, processes, information, technology, and suppliers.
ISO 22301 requires an organisation to determine interested parties relevant to its BCMS and identify their applicable requirements.
For JS, interested parties include beneficiaries, families, employees, volunteers, governing bodies, regulators, suppliers, donors and community partners.
Different interested parties may have different expectations concerning service availability, safety, information protection, communication and accountability.
Table 2.4: Interested Parties and BCM Requirements
|
Interested Party |
Principal Needs and Expectations |
BCM Requirements for JS |
|
Residents and Beneficiaries |
Safe, reliable and timely essential services. |
Maintain critical care, safeguarding and welfare support during disruption. |
|
Children and Students |
Safe supervision and continuity of essential care or educational support. |
Establish emergency accountability, safe handover and alternative arrangements. |
|
Families and Caregivers |
Assurance regarding safety and welfare. |
Provide timely, accurate and authorised communications. |
|
Governing Board |
Ensure effective governance, accountability, and protection of organisational objectives. |
Approve BCM policy, risk appetite, objectives and appropriate resources. |
|
Senior Management |
Continue delivering priority services and manage incidents effectively. |
Establish activation, escalation and recovery decision-making arrangements. |
|
Employees |
Safe working conditions, clear responsibilities and reliable communication. |
Provide emergency instructions, safety procedures and workforce continuity arrangements. |
|
Volunteers |
Clear roles, supervision and safe participation. |
Maintain emergency contact, deployment and volunteer coordination arrangements. |
|
Commissioner of Charities |
Ensure appropriate governance, accountability, and compliance with applicable charity obligations. |
Maintain records, oversight, reporting and governance continuity. |
|
MSF, MOH and ECDA, Where Applicable |
Compliance with relevant service-specific obligations. |
Maintain required service standards, safety arrangements and applicable notifications. |
|
Donors and Funding Partners |
Accountability, transparency and responsible use of funds. |
Maintain essential financial records and communications. |
|
Suppliers and Contractors |
Clear service requirements and communication. |
Define continuity obligations and emergency coordination arrangements. |
|
Community Partners |
Coordinated delivery of social assistance and referrals. |
Establish alternative coordination and communication procedures. |
|
Emergency Services |
Accurate information and timely escalation. |
Maintain emergency response interfaces and facility information. |
|
Banks and Financial Institutions |
Authorised and accurate financial transactions. |
Maintain essential payment and banking continuity arrangements. |
JS should maintain a documented register of legal, regulatory, contractual and governance requirements relevant to its BCM programme.
The register should distinguish between requirements that apply to the organisation generally and those that apply only to particular licensed or regulated activities.
Relevant considerations may include the Charities Act and associated governance requirements, applicable personal data protection obligations, workplace safety, fire safety, employment requirements and sector-specific service standards.
The Code of Governance for Charities and IPCs (2023) provides governance expectations, while ISO 22301 and ISO 22313 provide BCM requirements and guidance. Neither ISO standard is itself a Singapore law or regulator.
For services subject to MSF, MOH, or ECDA oversight, identify the applicable legislation, licence conditions, and service standards individually rather than assuming every requirement applies to all JS activities.
Identifying products and services is necessary to determine which organisational outcomes must be protected during disruption.
For BCM purposes, a product or service represents an outcome delivered to beneficiaries, stakeholders or internal users.
The supporting Critical Business Functions are the activities required to deliver those outcomes.
Table 2.5: Illustrative Key Products and Services
|
Product or Service |
Principal Beneficiaries |
Continuity Considerations |
|
Residential Care and Safe Accommodation |
Residents and families |
Continuous supervision, accommodation, safeguarding, meals and essential daily care. |
|
Nursing and Essential Healthcare Support |
Residents requiring healthcare assistance |
Time-critical healthcare support, medication arrangements and emergency escalation. |
|
Early Childhood Care and Education |
Children and parents |
Child safety, accountability, supervision and authorised handover. |
|
Student Care and Educational Support |
Students and families |
Safe supervision, essential student support and family communication. |
|
Emergency Welfare and Financial Assistance |
Vulnerable individuals and households |
Urgent case assessment, approved assistance and alternative disbursement arrangements. |
|
Food Assistance and Essential Distribution |
Individuals and families requiring support |
Availability of essential food, supplies and distribution arrangements. |
|
Critical Beneficiary Case Management |
Beneficiaries requiring urgent intervention |
Safeguarding, urgent referrals, case information and coordination. |
|
Beneficiary and Family Communications |
Beneficiaries, residents, families and caregivers |
Timely emergency information and reliable communication channels. |
|
Critical Information and Digital Services |
Service units and authorised personnel |
Access to essential records, applications and communications. |
|
Essential Finance and Procurement Support |
Internal service units and suppliers |
Emergency expenditure, essential payments and procurement continuity. |
These service descriptions are illustrative and should be reconciled with JS's approved service catalogue.
Critical Business Functions are organisational activities whose disruption could result in unacceptable consequences within a defined period.
For JS, assess criticality not only through financial and operational criteria but also through consequences for beneficiary safety, safeguarding, social responsibility, and legal obligations.
The following CBF catalogue provides a proposed basis for subsequent Business Impact Analysis.
Table 2.6: Critical Business Functions for Jamiyah Singapore
|
CBF Code |
Critical Business Function |
Principal Continuity Requirement |
|
CBF-1 |
Residential Care and Resident Safety |
Maintain safe accommodation, supervision, safeguarding and essential daily care. |
|
CBF-2 |
Nursing and Essential Healthcare Support |
Maintain time-critical healthcare assistance and essential clinical coordination. |
|
CBF-3 |
Early Childhood Care and Education |
Protect children and maintain essential supervision and safe handover arrangements. |
|
CBF-4 |
Student Care and Educational Support |
Maintain student safeguarding, accountability and essential care support. |
|
CBF-5 |
Emergency Welfare and Financial Assistance |
Continue urgent welfare assessment and approved emergency assistance. |
|
CBF-6 |
Food Assistance and Essential Distribution |
Maintain essential food and supply distribution to priority beneficiaries. |
|
CBF-7 |
Critical Beneficiary Case Management and Referral |
Maintain urgent case intervention, safeguarding and referrals. |
|
CBF-8 |
Beneficiary, Family and Emergency Communications |
Maintain critical communications with beneficiaries, families and stakeholders. |
|
CBF-9 |
Critical ICT Systems and Information Management |
Maintain or recover essential information, applications and communications. |
|
CBF-10 |
Essential Finance, Procurement and Resource Support |
Maintain essential payments, procurement and resource mobilisation. |
A single product or service may depend on several CBFs.
For example, residential care depends primarily on CBF-1 but also requires CBF-2 for essential healthcare support, CBF-8 for family and emergency communications, CBF-9 for information access and CBF-10 for supplies and financial support.
Document this relationship during the BIA to ensure recovery strategies address the full service-delivery chain, not individual functions in isolation.
Critical services depend on a combination of internal resources and external providers.
JS must identify these dependencies before it can determine whether its recovery strategies are realistic and achievable.
Table 2.7: Principal BCM Dependencies
|
Dependency Category |
Illustrative Resources |
Potential Continuity Consequences |
|
People |
Care personnel, healthcare support staff, educators, social workers, administrators and volunteers |
Staff shortages may prevent maintaining minimum service levels. |
|
Premises |
Residential facilities, care centres, educational facilities, offices and distribution points |
Denial of access may require alternative accommodation or service locations. |
|
Utilities |
Electricity, water, sanitation, cooling and telecommunications |
Failure may make premises unsuitable for essential care or service delivery. |
|
ICT Systems |
Beneficiary systems, financial applications, document management and communications |
Outages may prevent access to records and delay operational decisions. |
|
Information |
Resident care records, emergency contacts, beneficiary files and financial records |
Loss of information may compromise safety, coordination and accountability. |
|
Suppliers |
Food providers, medical suppliers, maintenance contractors and ICT vendors |
Supplier failure may interrupt essential resources. |
|
Transportation |
Staff transport, beneficiary transport, delivery services and emergency vehicles |
Disruption may delay relocation, staffing and essential deliveries. |
|
Financial Services |
Banking platforms, payment systems and funding channels |
Financial disruption may delay emergency assistance and procurement. |
|
Community Partners |
Social service agencies, healthcare providers and referral partners |
Partner unavailability may interrupt urgent support and referral arrangements. |
|
Governance and Decision-Making |
Governing Board, management, delegated authorities and emergency coordinators |
Unclear authority may delay activation, expenditure or recovery decisions. |
Consider a disruption affecting JS's principal food supplier.
The organisation may still have sufficient employees and operational premises, but the loss of essential supplies could compromise its ability to deliver food assistance.
The BIA should therefore identify the required food items, priority beneficiaries, minimum distribution capability, alternate suppliers, transportation arrangements, procurement authority and acceptable recovery time.
This illustrates why continuity planning must address external dependencies as well as internal operational capability.
ISO 22301 requires the organisation to address risks and opportunities relevant to the BCMS and its intended outcomes.
At this stage, the purpose is to identify issues that may affect the establishment and effectiveness of the BCM programme.
Conduct detailed threat analysis and likelihood and impact scoring using the Risk Analysis and Review methodology.
Table 2.8: BCM Risks and Improvement Opportunities
|
Organisational Issue |
Potential BCM Risk |
Improvement Opportunity |
|
Multiple Service Locations |
Inconsistent continuity arrangements across facilities. |
Establish a common BCM policy and standardised planning methodology. |
|
Reliance on Specialist Personnel |
Essential services may be interrupted when qualified staff are unavailable. |
Develop competency mapping, relief staffing and cross-training arrangements. |
|
Dependency on Critical Suppliers |
A single supplier failure may affect multiple services. |
Establish supplier dependency mapping and alternative sourcing arrangements. |
|
Reliance on Digital Records |
ICT outages may prevent access to vital information. |
Develop protected access to records and tested restoration arrangements. |
|
Increasing Cyber Threats |
Cyber incidents may interrupt essential systems and compromise information. |
Integrate cybersecurity response with BCM and IT disaster recovery. |
|
Dependence on Volunteers |
Volunteer shortages may reduce programme delivery capacity. |
Establish volunteer mobilisation and alternate staffing procedures. |
|
Emergency Communication Complexity |
Delayed or inconsistent messages may affect families and beneficiaries. |
Develop an integrated crisis communication framework. |
|
Limited Recovery Resources |
Simultaneous disruptions may exceed available contingency capacity. |
Prioritise minimum service requirements and shared recovery resources. |
|
Changing Beneficiary Needs |
Existing continuity arrangements may no longer meet essential service demand. |
Review MBCOs and resource requirements periodically. |
|
Fragmented Emergency Procedures |
Different service units may respond inconsistently. |
Integrate emergency response, crisis management and business continuity plans. |
The BCMS scope defines the organisational boundaries, activities, products, services, and locations the management system covers.
JS should determine its BCMS scope by considering its organisational context, interested-party requirements, legal and regulatory obligations, critical services and relevant dependencies.
A proposed scope statement is:
The Business Continuity Management System of Jamiyah Singapore encompasses the governance, planning, coordination, and continuity arrangements required to maintain and recover its identified critical community, residential care, healthcare support, educational, welfare, and enabling services during incidents, emergencies, and disasters.
The scope includes the personnel, premises, processes, information, technology, suppliers, and external dependencies needed to meet approved minimum continuity requirements.
This statement should be reviewed and formally approved by JS management.
Table 2.9: Proposed BCMS Scope Boundaries
|
Scope Element |
Proposed Inclusion |
|
Organisational Units |
Service units responsible for identified critical products and services, together with essential supporting functions. |
|
Critical Services |
The services supported by CBF-1 through CBF-10. |
|
Physical Locations |
Facilities and premises supporting in-scope critical services. |
|
Personnel |
Employees, volunteers, contractors and authorised external personnel supporting essential activities. |
|
ICT Systems |
Applications, infrastructure, communication platforms and information required for essential services. |
|
Third Parties |
Critical suppliers and service providers whose disruption may affect continuity objectives. |
|
Governance Activities |
BCM policy, planning, approval, management review, audit and continual improvement. |
|
Emergency and Recovery Activities |
Incident escalation, crisis management interfaces, continuity activation, recovery and return to normal operations. |
Any exclusions should be documented and justified.
Do not exclude an activity solely because it is outsourced or managed by another department if its disruption could compromise an in-scope critical service.
Once JS has established the organisational context and scope, it should define BCM objectives that support its mission and essential service obligations.
Where practicable, the objectives should be measurable and consistent with the organisation's approved risk appetite and continuity requirements.
Table 2.10: Proposed BCM Objectives
|
BCM Objective |
Intended Outcome |
Illustrative Performance Measure |
|
Protect Life and Safety |
Maintain beneficiary, resident, child and workforce safety. |
Safety-critical activities remain continuously supported during disruption. |
|
Maintain Essential Services |
Sustain approved minimum service levels for critical functions. |
CBFs achieve their approved MBCOs and RTOs during exercises or incidents. |
|
Strengthen Workforce Resilience |
Maintain access to competent personnel. |
Document and test relief staffing and delegation arrangements. |
|
Protect Vital Records |
Maintain access to essential information. |
Recovery tests demonstrate that approved information recovery requirements can be achieved. |
|
Strengthen Supplier Continuity |
Reduce dependence on unavailable critical suppliers. |
Critical suppliers have documented continuity arrangements or approved alternatives. |
|
Improve Crisis Coordination |
Support timely activation and management decisions. |
Exercise and evaluate escalation and activation arrangements. |
|
Improve BCM Competency |
Ensure personnel understand their continuity responsibilities. |
Relevant personnel complete scheduled BCM training and exercises. |
|
Maintain BCM Effectiveness |
Ensure plans and strategies remain suitable. |
BCM reviews, exercises, corrective actions and management reviews are completed as scheduled. |
Approve actual targets following the BIA and an assessment of available recovery capabilities.
Effective BCM requires clearly defined authority, accountability and responsibility.
For JS, governance arrangements should ensure that continuity planning is not treated solely as an administrative or ICT activity.
Table 2.11: Proposed BCM Governance Responsibilities
|
Role |
Principal BCM Responsibilities |
|
Governing Board |
Provide oversight, approve strategic BCM direction where appropriate and ensure adequate governance arrangements. |
|
Senior Management |
Approve BCMS scope, objectives, recovery priorities, resource allocation and major continuity decisions. |
|
BCM Steering Committee |
Coordinate BCM implementation, review progress, resolve cross-functional issues and recommend improvements. |
|
BCM Coordinator |
Maintain the BCM methodology, coordinate assessments, consolidate plans and oversee exercises. |
|
Critical Business Function Owners |
Identify critical activities, assess impacts, determine recovery requirements and maintain continuity procedures. |
|
Facilities and Safety Personnel |
Maintain emergency response, evacuation, facility safety and alternative premises arrangements. |
|
Human Resources |
Coordinate workforce continuity, relief staffing, staff welfare and emergency communications. |
|
ICT and Information Security |
Maintain ICT continuity, cyber response, backup, restoration and IT disaster recovery arrangements. |
|
Finance and Procurement |
Maintain emergency expenditure, payments, critical supplies and supplier continuity arrangements. |
|
Communications Personnel |
Coordinate approved messages to beneficiaries, families, employees, donors and other stakeholders. |
|
Internal Audit or Independent Reviewer |
Provide independent assurance regarding the adequacy and effectiveness of the BCMS. |
JS should undertake the organisational context assessment as a structured exercise involving management, service owners and supporting departments.
The following documents should be produced or updated during this exercise.
Table 2.12: Organisational Context Assessment Deliverables
|
Deliverable |
Purpose |
Proposed Owner |
|
Organisational Profile |
Establish the mission, structure, operating environment and principal services. |
Senior Management / BCM Coordinator |
|
Internal and External Issues Register |
Record issues relevant to BCM planning and performance. |
BCM Coordinator / Risk Management |
|
Interested Parties Register |
Identify relevant stakeholders and continuity requirements. |
Governance / Service Owners |
|
Legal and Regulatory Requirements Register |
Identify applicable compliance and service obligations. |
Governance / Compliance |
|
Products and Services Catalogue |
Document services and outcomes requiring continuity consideration. |
Service Owners |
|
Critical Business Functions Register |
Identify the activities necessary to deliver priority services. |
CBF Owners |
|
Dependency Register |
Document people, premises, technology, information and supplier dependencies. |
CBF Owners / Supporting Functions |
|
BCMS Scope Statement |
Establish the boundaries and applicability of the BCMS. |
Senior Management |
|
BCM Objectives Register |
Define intended continuity outcomes and performance measures. |
BCM Steering Committee |
|
Management Approval Record |
Provide evidence of review, approval and accountability. |
Senior Management / Secretariat |
Organisational context is not a one-time assessment.
JS should review its context at planned intervals and whenever significant changes occur.
Review triggers may include the introduction or discontinuation of a service, relocation of a facility, changes in beneficiary needs, significant staff restructuring, changes to applicable requirements, adoption of major technology platforms, new critical suppliers, significant incidents or changes in the external threat environment.
The BCM Coordinator should ensure that relevant changes are reflected in the BCMS scope, CBF register, BIA, risk assessment, continuity strategies and recovery procedures.
The review should also consider whether changes in climate conditions or other external circumstances introduce new continuity requirements.
Understanding the organisation is the starting point for effective Business Continuity Management.
Without a clear understanding of organisational objectives, operating conditions, stakeholders, critical services and dependencies, continuity plans may fail to address the activities and resources that matter most during a disruption.
For Jamiyah Singapore, the organisational context assessment must place particular emphasis on protecting vulnerable beneficiaries and continuing to deliver essential care, educational support, welfare assistance, and community services.
The assessment should also recognise that interconnected resources support essential services, including personnel, facilities, utilities, information, technology, suppliers, financial systems, and external partners.
A disruption affecting any of these resources may have consequences extending beyond the immediate service unit.
Therefore, JS should adopt an integrated approach that connects organisational governance, risk management, operational activities and continuity planning.
By documenting its internal and external issues, interested-party requirements, critical services and organisational dependencies, JS can establish a defensible foundation for its BCMS.
This foundation will support the subsequent identification of credible threats, assessment of business impacts, determination of recovery requirements and selection of appropriate continuity strategies.
Ultimately, understanding Jamiyah Singapore means understanding not only how the organisation operates, but also whom it serves, what must continue during disruption and which capabilities are essential to protecting the people who depend on its services.
A well-defined organisational context will enable JS to implement a BCMS aligned with its charitable mission, proportionate to its operating environment, and capable of supporting resilient community services.
Author's implementation note: This chapter is an illustrative BCM implementation guide, not a verified statement of every current JS programme, facility, licence or internal control. The ten-CBF catalogue follows the working methodology developed for this eBook series.
Validate organisational details, applicable sector regulations, and proposed governance arrangements with JS before formal adoption or publication.
| eBook 1: Understanding Your Organisation | |||||
| C1 | C2 | C3 | C4 | C5 | C6 |
| C7 | C8 | C9 | C10 | C11 | C12 |
To learn more about the course and schedule, click the buttons below for BCM-300 Business Continuity Management Implementer [BCM-3] and BCM-5000 Business Continuity Management Expert Implementer [BCM-5].
|
Please feel free to send us a note if you have any questions. |
||