[BCM] [JS] [E1] [C4] Establishing Business Continuity Objectives

eBook 1: Chapter 4

Business Continuity Objectives for Implementing the Business Continuity Management Program at Jamiyah Singapore

Introduction

Establishing Business Continuity Management (BCM) objectives is essential to translating an organisation's strategic goals into measurable continuity outcomes.

While organisational goals define what an organisation intends to achieve, BCM objectives set the specific results, performance expectations, and management responsibilities needed to demonstrate that essential services can continue during disruptions.

For Jamiyah Singapore (JS), BCM objectives must reflect the organisation's charitable mission and responsibility to support vulnerable individuals, families and communities.

The objectives should prioritise beneficiaries' safety and welfare, the continuity of essential residential and healthcare support, the protection of children and students, and the availability of critical welfare assistance.

Unlike organisations whose BCM objectives may focus predominantly on financial losses or commercial service availability, JS must consider the potential humanitarian and social consequences of operational disruptions.

For example, an extended interruption to resident supervision may expose vulnerable individuals to immediate safety concerns. Similarly, a disruption affecting emergency welfare assistance could delay support to households experiencing urgent hardship.

These considerations require JS to establish BCM objectives that are practical, measurable, achievable and consistent with the minimum service levels required during incidents, emergencies and disasters.

ISO 22301:2019 Clause 6.2 requires organisations to establish business continuity objectives at relevant functions and levels. These objectives must be consistent with the business continuity policy, measurable where practicable, monitored, communicated and updated as appropriate.

The organisation must also determine the activities required to achieve the objectives, the resources needed, the responsible parties, the implementation timelines, and the methods used to evaluate results.

This chapter explains how JS can establish, implement, monitor and review BCM objectives within its Business Continuity Management System (BCMS).

It provides proposed enterprise-level objectives, service-specific examples, performance indicators, governance responsibilities and practical implementation arrangements.

The chapter builds upon Chapter 2, Understanding Your Organisation for Jamiyah Singapore, and Chapter 3, Establishing Organisational Goals for BCM, by translating the organisation's mission and continuity priorities into measurable performance requirements.

Understanding BCM Objectives

Definition of BCM Objectives

BCM objectives are specific outcomes an organisation aims to achieve through implementing and maintaining its BCMS.

They provide measurable expectations against which management can evaluate whether continuity arrangements are suitable, adequate and effective.

For JS, BCM objectives should support three principal outcomes:

Protection: Safeguard beneficiaries, residents, children, employees, volunteers, information and essential resources.
Continuity: Maintain or restore critical services at approved minimum operating levels.
Assurance: Demonstrate through testing, exercising, monitoring and management review that the required continuity capability exists.

These outcomes should be supported by documented responsibilities, recovery requirements, performance indicators and implementation plans.

Difference between BCM Goals and BCM Objectives

BCM goals and BCM objectives should be distinguished to ensure that strategic intentions are translated into practical implementation requirements.

Table 4.1: Relationship Between BCM Goals and Objectives

Element	Description	Example for JS
Organisational Goal	A broad strategic outcome that supports the organisation's mission.	Protect vulnerable residents during operational disruptions.
BCM Objective	A specific, measurable outcome that supports the organisational goal.	Demonstrate that minimum residential care requirements can be maintained during an approved disruption scenario.
Minimum Business Continuity Objective (MBCO)	Minimum acceptable service or activity level required during disruption.	Maintain resident accountability, supervision, safeguarding, meals, hydration and essential daily care.
Recovery Time Objective (RTO)	Target time for resuming a disrupted activity at the required level.	Restore access to essential resident records within the approved recovery time.
Recovery Point Objective (RPO)	Maximum targeted period of data loss, expressed in time, for relevant information systems.	Recover essential electronic records to the approved recovery point.
Key Performance Indicator (KPI)	Measure used to evaluate whether an objective is achieved.	Percentage of critical recovery exercises meeting approved service and recovery requirements.
Business Continuity Strategy	Selected approach for achieving the required continuity capability.	Deploy alternate personnel, emergency supplies and secure manual records.

An objective should be specific enough for management to determine whether it has been achieved.

For example, the statement "improve residential care resilience" expresses a general intention but does not provide a measurable result.

A more effective objective would be:

Demonstrate, through an annual residential care continuity exercise, that the minimum requirements for resident supervision, safeguarding, essential meals and time-critical healthcare support can be maintained throughout the simulated disruption.

This objective identifies the expected outcome and how performance will be evaluated.

ISO 22301 Requirements for Establishing BCM Objectives

ISO 22301 provides the principal framework for establishing business continuity objectives within a BCMS.

Clause 6.2 is particularly relevant because it requires the organisation to define objectives and plan how it will achieve them.

Table 4.2: ISO 22301 Requirements and Application to JS

ISO 22301 Requirement	Practical Interpretation	Application to JS
Consistency with BCM Policy	Objectives must support the organisation's approved business continuity commitments.	Align objectives with beneficiary protection, essential service continuity and responsible governance.
Measurable Where Practicable	Objectives should have identifiable performance measures.	Establish recovery targets, exercise criteria, service availability requirements and completion indicators.
Consider Applicable Requirements	Objectives must reflect relevant legal, regulatory and contractual obligations.	Consider charity governance, safeguarding, care requirements, information protection and applicable service conditions.
Monitoring	Progress and performance must be evaluated.	Establish a BCM performance dashboard and report to management periodically.
Communication	Relevant personnel must understand the objectives.	Communicate approved objectives to CBF owners, recovery teams and supporting departments.
Updating	Objectives must remain relevant when circumstances change.	Review objectives after major incidents, organisational changes, exercises and BIA updates.
Defined Actions	The organisation must determine how to achieve each objective.	Develop continuity strategies, recovery procedures and testing programmes.
Resource Requirements	Necessary resources must be identified.	Determine personnel, facilities, equipment, ICT, suppliers and financial resources.
Accountability	Responsible persons must be assigned.	Appoint objective owners and supporting functions.
Completion and Evaluation	Timelines and evaluation methods must be established.	Define implementation deadlines, acceptance criteria and evidence requirements.

Alignment with Singapore's governance environment

JS should set its BCM objectives in line with its legal and governance obligations.

Relevant considerations may include the Charities Act, the Code of Governance for Charities and IPCs (2023), applicable personal data protection requirements, workplace safety and fire safety obligations, and service-specific requirements associated with MSF, MOH or ECDA where applicable.

The Commissioner of Charities provides the principal charity governance framework.

However, individual services may be subject to additional oversight or licensing requirements that must be identified separately.

ISO 22301 is an international management system standard, not a Singapore regulatory instrument. Accordingly, JS should adopt an organisation-specific BCM policy that reflects its mission, risk appetite, operating environment and verified legal obligations.

The BCM objectives should be consistent with that policy.

Principles for Establishing Effective BCM Objectives

JS should adopt a structured approach to developing BCM objectives.

A practical method is to apply the SMART principle: Specific, Measurable, Achievable, Relevant and Time-bound.

Table 4.3: SMART Principles for BCM Objectives

Principle	Description	Example for JS
Specific	Clearly identify the intended continuity outcome.	Maintain essential residential care during facility disruption.
Measurable	Define how achievement will be assessed.	Demonstrate compliance with approved minimum staffing and care requirements during an exercise.
Achievable	Ensure the objective is supported by realistic resources and capabilities.	Establish a tested relief staffing arrangement using available competent personnel.
Relevant	Align the objective with critical services and organisational responsibilities.	Prioritise resident safety and urgent welfare support.
Time-bound	Establish a deadline or review period.	Complete the approved continuity exercise programme within the annual BCM cycle.

Additional Considerations for JS

SMART objectives should also reflect the following requirements:

Beneficiary-centred: Objectives should consider the consequences of disruption for residents, children, families and vulnerable beneficiaries.

Risk-informed: Objectives should address significant threats and dependencies identified through Risk Analysis and Review.

BIA-driven: Recovery targets and minimum service requirements should be supported by BIA findings.

Resource-supported: Objectives should be achievable with approved personnel, facilities, equipment, technology and financial resources.

Evidence-based: Demonstrate achievement through documented assessments, exercises, recovery tests, and management reviews.

Continuously reviewed: Objectives should remain relevant as services, beneficiaries, dependencies and operating conditions change.

Proposed Enterprise-Level BCM Objectives for Jamiyah Singapore

The enterprise-level BCM objectives should provide a common direction for all service units and supporting departments.

They should reflect the organisational BCM goals established in Chapter 3.

Table 4.4: Enterprise-Level BCM Objectives

Objective Code	BCM Objective	Proposed Performance Target	Accountable Owner
BCM-O01	Protect the life, safety and welfare of beneficiaries, residents, children, employees and volunteers.	All in-scope facilities maintain reviewed emergency arrangements and complete scheduled safety exercises.	Senior Management / Facilities and Service Owners
BCM-O02	Maintain approved minimum service levels for all identified Critical Business Functions.	100% of identified CBFs have approved MBCOs and documented continuity arrangements.	BCM Coordinator / CBF Owners
BCM-O03	Maintain essential residential care and healthcare support during disruptions.	Exercises demonstrate that safety-critical care and safeguarding requirements can be maintained.	Residential Care / Healthcare Service Owners
BCM-O04	Maintain urgent welfare assistance and food distribution capabilities.	Priority welfare and food assistance services have approved alternative operating procedures.	Welfare and Community Service Owners
BCM-O05	Maintain sufficient competent personnel for critical activities.	All designated critical roles have documented alternate staffing or delegation arrangements.	Human Resources / CBF Owners
BCM-O06	Protect critical information and restore essential ICT services.	Critical ICT recovery tests meet approved RTO/RPO requirements or result in tracked corrective actions.	ICT / Information Security
BCM-O07	Maintain essential facilities, utilities and third-party services.	All identified critical suppliers and facility dependencies have documented continuity assessments.	Facilities / Procurement
BCM-O08	Maintain effective emergency and crisis communications.	Emergency communication exercises meet approved notification and escalation targets.	Crisis Management / Communications
BCM-O09	Maintain governance, accountability and applicable regulatory obligations during disruption.	BCM-relevant obligations are reviewed at least annually and after material changes.	Governance / Compliance
BCM-O10	Demonstrate the effectiveness of the BCMS through testing, exercising and continual improvement.	Complete the approved annual BCM exercise and management review programme.	BCM Coordinator / Senior Management

These objectives are proposed examples. JS should validate their suitability, targets, resources and accountability arrangements before formal adoption.

Establishing Service-Specific BCM Objectives

Translate enterprise-level objectives into specific requirements for each Critical Business Function.

The following examples use the ten-CBF catalogue developed for JS.

Table 4.5: BCM Objectives for Critical Business Functions

CBF Code and Name	Proposed BCM Objective	Minimum Continuity Outcome	Performance Measurement
CBF-1 Residential Care and Resident Safety	Maintain safe residential care and resident accountability throughout disruptions.	Provide continuous resident supervision, safeguarding, essential daily care, meals, hydration, and safe accommodation.	Residential care exercise results, staffing verification and resident accountability records.
CBF-2 Nursing and Essential Healthcare Support	Maintain time-critical healthcare support for residents.	Provide essential health monitoring, authorised medication support, and emergency healthcare escalation.	Healthcare continuity exercise results and review of essential care procedures.
CBF-3 Early Childhood Care and Education	Protect children and maintain essential care arrangements during emergencies.	Child accountability, supervision, safeguarding and authorised handover or transfer.	Child safety exercise results and accountability reconciliation.
CBF-4 Student Care and Educational Support	Maintain essential student care and protection during disruption.	Student supervision, safeguarding, accountability and urgent caregiver communication.	Student care exercise results and emergency communication records.
CBF-5 Emergency Welfare and Financial Assistance	Continue urgent welfare assessment and approved emergency assistance.	Triage priority cases and authorise emergency financial assistance.	Welfare continuity simulations and assessment of alternative approval arrangements.
CBF-6 Food Assistance and Essential Distribution	Maintain essential food and supply assistance to priority beneficiaries.	Distribution of essential food and supplies through approved arrangements.	Supplier and distribution exercises, delivery records and resource availability reviews.
CBF-7 Critical Beneficiary Case Management and Referral	Maintain urgent case intervention and safeguarding referrals.	Conduct urgent case assessments, safeguard escalations, and essential referral coordination.	Case management simulations and vital records access tests.
CBF-8 Beneficiary, Family and Emergency Communications	Maintain timely and accurate communications during incidents.	Authorised emergency updates to affected beneficiaries, families, personnel and relevant stakeholders.	Communication exercises and notification performance reports.
CBF-9 Critical ICT Systems and Information Management	Restore essential ICT services and protect vital information.	Secure access to critical applications, records and communications within approved recovery requirements.	Conduct backup restoration tests, DR exercises, and information recovery verification.
CBF-10 Essential Finance, Procurement and Resource Support	Maintain essential financial transactions, procurement and resource mobilisation.	Manage emergency expenditure, critical payments, supplier coordination, and resource procurement.	Financial continuity exercises and emergency procurement simulations.

Example: CBF-1 Residential Care and Resident Safety

Consider a scenario in which a residential facility becomes inaccessible because of a fire or major utility failure.

The organisational BCM goal is to protect residents and maintain essential care.

The service-specific BCM objective is to demonstrate that approved recovery arrangements can sustain resident safety, supervision, safeguarding and essential daily care.

The MBCO establishes the minimum service outcomes that must continue.

The BIA determines the acceptable disruption limits and resource requirements for the supporting activities.

The Business Continuity Strategy identifies how those requirements will be achieved through arrangements such as alternate accommodation, qualified personnel, emergency supplies and secure access to essential records.

Testing and exercising provide evidence that the strategy can be implemented.

This example illustrates the progression from a strategic goal to a measurable operational capability.

Establishing Minimum Business Continuity Objectives

The MBCO is an important element of the BCM objectives framework.

It describes the minimum acceptable level of products, services or activities that the organisation must maintain or restore during disruption.

For JS, define MBCOs at both the corporate and business unit levels.

Corporate MBCO

The Corporate MBCO should define the minimum essential service outcomes that JS intends to protect across the organisation.

A proposed statement is:

Jamiyah Singapore shall maintain the minimum essential capabilities required to protect life, safety, and safeguarding; sustain critical residential and healthcare support; provide urgent welfare assistance; maintain essential communications; and preserve the organisational resources needed to support these services during disruption.

Senior management should approve this statement and support it with detailed, service-specific requirements.

Business Unit MBCOs

Each CBF owner should determine the minimum service level required for their function.

Table 4.6: Illustrative Business Unit MBCO Measures

CBF	MBCO Measurement Area	Illustrative Minimum Requirement
CBF-1	Resident supervision and essential care	All residents remain accounted for, supervised and supported with essential daily care.
CBF-2	Essential healthcare support	Time-critical healthcare requirements continue through competent and authorised arrangements.
CBF-3	Child safeguarding	All children remain supervised, accounted for and subject to safe handover arrangements.
CBF-4	Student safeguarding	All students remain accounted for and receive essential supervision until authorised release or transfer.
CBF-5	Emergency assistance	Urgent cases continue to be assessed, and priority assistance can be authorised.
CBF-6	Essential distribution	Priority beneficiaries can receive essential food and supplies through approved alternatives.
CBF-7	Urgent case intervention	Critical safeguarding and referral cases continue to receive timely attention.
CBF-8	Emergency communication	Essential emergency messages can be issued through at least one approved channel.
CBF-9	Critical information access	Essential records remain securely accessible or recoverable through approved arrangements.
CBF-10	Emergency resource support	Authorise and execute essential expenditure and procurement.

Refine these minimum requirements during the BIA to include approved service volumes, staffing, resources, timing, and operational constraints.

Linking BCM Objectives to Business Impact Analysis

The BIA provides the evidence needed to establish realistic recovery objectives.

For each CBF, JS should determine:

The consequences of disruption over time.
The minimum acceptable service level.
The Maximum Tolerable Period of Disruption (MTPD).
The Recovery Time Objective (RTO).
The Recovery Point Objective (RPO), where relevant to information.
Essential personnel, premises, technology and information.
Internal and external dependencies.
Resource requirements at the minimum recovery level.

The BIA should also establish whether a proposed BCM objective is achievable with existing arrangements.

Table 4.7: Relationship Between BCM Objectives and BIA Outputs

BCM Objective	Required BIA Information	Example for JS
Maintain Resident Safety	Critical care activities, staffing, facilities and acceptable disruption limits.	Determine the minimum number of competent personnel required for continuous supervision.
Maintain Essential Healthcare Support	Time-critical activities, medical resources and external healthcare dependencies.	Identify essential healthcare activities that cannot be interrupted.
Maintain Welfare Assistance	Urgent beneficiary needs, payment dependencies and service priorities.	Determine how quickly emergency assistance must be available.
Maintain Food Distribution	Minimum supplies, distribution capacity, suppliers and transportation.	Identify emergency stock and alternative distribution requirements.
Maintain Critical ICT	Application dependencies, data requirements, RTOs and RPOs.	Establish recovery requirements for essential beneficiary records.
Maintain Essential Finance	Payment requirements, authorised personnel and banking dependencies.	Determine the minimum capability needed for emergency expenditure.

BCM objectives should be revised where BIA findings demonstrate that the proposed requirements are inappropriate or cannot be achieved without additional resources.

Linking BCM Objectives to Risk Assessment

Risk Assessment identifies the threats and vulnerabilities that could prevent JS from achieving its continuity objectives.

The Risk Analysis and Review process should consider threats affecting people, premises, technology, information, suppliers, utilities and communications.

Table 4.8: BCM Objectives and Relevant Threat Scenarios

BCM Objective	Illustrative Threats	Continuity Implications
Protect Life and Safety	Fire, structural failure, gas leak and extreme heat.	Evacuation, emergency response and safe accommodation may be required.
Maintain Residential Care	Facility inaccessibility, workforce shortages and utility failure.	Alternative premises, staffing and essential supplies may be necessary.
Maintain Healthcare Support	Infectious disease outbreaks, specialist staff shortages and medical supply disruption.	Essential care arrangements may require alternate qualified personnel and external support.
Maintain Welfare Assistance	Banking disruption, payment system failure and staff unavailability.	Emergency approval and disbursement procedures may be needed.
Maintain Food Distribution	Supplier failure, logistics disruption and transportation restrictions.	Alternative suppliers and distribution arrangements may be necessary.
Maintain ICT Services	Ransomware, cyberattack, network failure and data corruption.	IT disaster recovery and secure manual workarounds may be required.
Maintain Emergency Communications	Telecommunications failure, internet outage and loss of mobile communications.	Alternative communication channels may be necessary.

Risk Assessment findings should guide the prioritisation of improvement actions and continuity investments.

Translating BCM Objectives into Business Continuity Strategies

BCM objectives should lead directly to the selection of suitable Business Continuity Strategies.

Select a strategy because it can meet an approved continuity requirement, not simply because it is commonly used.

Table 4.9: BCM Objectives and Recovery Strategies

BCM Objective	Proposed Business Continuity Strategy	Evidence of Capability
Maintain Residential Care	Alternate accommodation, relief staffing, emergency supplies and secure care records.	Residential relocation or continuity exercise report.
Maintain Healthcare Support	Qualified alternate personnel, essential healthcare records and emergency referral arrangements.	Healthcare continuity simulation.
Maintain Child and Student Safety	Emergency supervision, safe handover and alternative care arrangements.	Child or student accountability exercise.
Maintain Welfare Assistance	Alternative approval procedures and emergency payment arrangements.	Welfare assistance continuity exercise.
Maintain Food Distribution	Alternative suppliers, emergency stocks and alternate distribution locations.	Supplier and distribution simulation.
Maintain ICT Services	Backup, restoration, alternative connectivity and secure manual procedures.	IT disaster recovery test results.
Maintain Communications	Alternate communication platforms and emergency contact procedures.	Crisis communication exercise.
Maintain Finance and Procurement	Delegated emergency expenditure authority and alternative purchasing arrangements.	Finance and procurement continuity exercise.

Evaluate strategies for suitability, cost, feasibility, dependencies, implementation time, and ability to meet approved recovery requirements.

Establishing BCM Performance Indicators

Performance indicators allow JS to determine whether BCM objectives are being achieved.

They should measure both implementation progress and demonstrated continuity capability.

Table 4.10: Proposed BCM Performance Indicators

KPI Code	Performance Indicator	Proposed Target	Reporting Frequency
BCM-KPI01	Percentage of CBFs with approved BIA reports.	100%	Quarterly during implementation; annually thereafter
BCM-KPI02	Percentage of CBFs with approved continuity plans.	100%	Quarterly
BCM-KPI03	Percentage of critical roles with documented alternates.	100%	Semi-annually
BCM-KPI04	Percentage of critical suppliers with documented continuity assessments.	100%	Annually
BCM-KPI05	Completion of approved BCM exercises.	100% of scheduled exercises	Quarterly
BCM-KPI06	Percentage of recovery tests meeting approved RTOs.	100%, with exceptions escalated and tracked	Following each test
BCM-KPI07	Percentage of critical information recovery tests meeting approved RPOs.	100%, with exceptions escalated and tracked	Following each test
BCM-KPI08	Percentage of critical BCM personnel completing required training.	100%	Annually
BCM-KPI09	Percentage of high-priority corrective actions completed by approved due dates.	100%, with overdue items escalated	Monthly or quarterly
BCM-KPI10	Completion of formal BCMS management reviews.	100% of scheduled reviews	Annually

These targets are illustrative. JS should approve the actual targets based on its operational requirements, risk appetite and available resources.

A completed activity does not necessarily demonstrate effective continuity capability.

For example, having a Business Continuity Plan does not prove that minimum service levels can be achieved. Exercise results and evidence of operational recovery are also necessary.

Planning to Achieve BCM Objectives

ISO 22301 requires organisations to plan how they will achieve their BCM objectives.

For each objective, JS should identify the required activities, resources, accountable owner, implementation deadline and evaluation method.

Table 4.11: BCM Objectives Implementation Plan

Objective	Required Activities	Proposed Owner	Resources Required	Illustrative Timeline	Evaluation Method
Establish Approved BCM Objectives	Conduct management workshops, review organisational goals and approve the objectives register.	Senior Management / BCM Coordinator	Management participation and BCM documentation	Months 1–2	Approved objectives register
Establish CBF Recovery Requirements	Complete BIA workshops and approve MBCOs, MTPDs and RTOs.	CBF Owners / BCM Coordinator	Service owners and BIA templates	Months 2–4	Approved BIA reports
Develop Continuity Strategies	Identify and evaluate recovery options for critical services.	CBF Owners / Supporting Functions	Staffing, facilities, ICT and procurement inputs	Months 4–6	Approved strategy documents
Develop Continuity Plans	Document activation, response, continuity and recovery procedures.	CBF Owners / BCM Coordinator	Plan templates and recovery teams	Months 5–7	Approved continuity plans
Establish Workforce Continuity	Identify critical competencies, alternates and delegation arrangements.	Human Resources / Service Owners	Competency records and training resources	Months 4–7	Staffing and delegation records
Establish ICT Recovery Capability	Validate backups, restoration procedures and application recovery requirements.	ICT / Information Security	Recovery infrastructure and technical resources	Months 4–8	DR test results
Establish Supplier Continuity	Review critical suppliers and identify alternative arrangements.	Procurement / Service Owners	Supplier information and contractual reviews	Months 4–8	Supplier continuity assessments
Conduct BCM Exercises	Develop scenarios, conduct exercises and evaluate results.	BCM Coordinator / CBF Owners	Exercise participants and facilitators	Months 8–10	Exercise reports
Conduct Management Review	Evaluate BCMS performance and approve improvement actions.	Senior Management	KPI reports, audit results and exercise findings	Months 11–12	Management review records

The timelines represent an illustrative first-year implementation programme and should be adjusted to JS's approved project plan.

Governance and Accountability for BCM Objectives

Clear ownership is necessary to ensure that BCM objectives are implemented, monitored and reviewed.

Table 4.12: Responsibilities for BCM Objectives

Role	Responsibilities
Governing Board	Provide strategic oversight of organisational resilience and BCM governance.
Senior Management	Approve BCM objectives, performance targets, resource allocation and significant corrective actions.
BCM Steering Committee	Review implementation progress, resolve cross-functional issues and monitor performance.
BCM Coordinator	Maintain the objectives register, coordinate implementation and consolidate performance reporting.
CBF Owners	Establish service-specific objectives, determine recovery requirements and demonstrate continuity capability.
Human Resources	Support staffing, succession, training and workforce continuity objectives.
Facilities and Safety	Support emergency preparedness, physical safety and alternate premises objectives.
ICT and Information Security	Support ICT recovery, cybersecurity and information protection objectives.
Finance and Procurement	Support emergency expenditure, supplier continuity and resource mobilisation.
Governance and Compliance	Identify applicable requirements and review alignment with organisational obligations.
Internal Audit or Independent Reviewer	Provide independent assurance on the design and effectiveness of the BCMS.

Monitoring, Reviewing and Updating BCM Objectives

BCM objectives should be reviewed at planned intervals and whenever significant organisational changes occur.

The review should determine whether the objectives remain relevant, whether performance targets have been achieved, whether continuity arrangements remain capable of meeting approved requirements and whether additional resources or corrective actions are necessary.

Table 4.13: BCM Objectives Monitoring Framework

Review Area	Review Question	Evidence	Suggested Frequency
Strategic Alignment	Do the objectives remain aligned with JS's mission and BCM policy?	Management review records	Annually
Service Criticality	Have changes in services affected BCM priorities?	Updated CBF register and BIA	Annually and after material changes
MBCO Adequacy	Do minimum service levels remain appropriate?	Approved MBCO register	Annually
Recovery Capability	Can required minimum services be achieved within approved RTOs?	Exercise and recovery test reports	According to exercise programme
Workforce Capability	Are critical staffing and delegation arrangements sufficient?	Staffing and competency records	Semi-annually
ICT Recovery	Are critical applications and records recoverable?	DR test results	According to DR test schedule
Supplier Continuity	Can critical suppliers support required service levels?	Supplier assurance reports	Annually
Regulatory Alignment	Have applicable obligations changed?	Compliance register	Annually and following changes
Corrective Actions	Are identified weaknesses being resolved?	Corrective action tracker	Monthly or quarterly
Continual Improvement	Are lessons learned incorporated into BCM arrangements?	Management review and improvement records	Following exercises and incidents

Revise objectives when evidence shows they are no longer suitable, achievable, or aligned with organisational requirements.

Practical BCM Objectives Development Process

The following process provides a structured approach for JS to establish and maintain its BCM objectives.

Key Deliverables

Establishing BCM objectives should produce documented outputs that can be used throughout the BCM implementation programme.

Table 4.14: BCM Objectives Deliverables

Deliverable	Purpose	Proposed Owner
BCM Objectives Register	Records approved enterprise and service-specific objectives.	BCM Coordinator
Corporate MBCO Statement	Defines minimum organisation-wide continuity outcomes.	Senior Management
Business Unit MBCO Register	Records minimum service requirements for each CBF.	CBF Owners
BCM KPI Register	Establishes measurable performance indicators and targets.	BCM Coordinator
BCM Objectives Implementation Plan	Defines actions, resources, responsibilities and deadlines.	BCM Coordinator / CBF Owners
Recovery Requirements Register	Records approved MTPDs, RTOs and RPOs where relevant.	CBF Owners / ICT
BCM Resource Requirements Register	Identifies resources necessary to achieve objectives.	Supporting Functions
BCM Performance Reports	Provides management with evidence of implementation and capability.	BCM Coordinator
Exercise and Testing Reports	Demonstrates whether continuity arrangements achieve required outcomes.	Exercise Owners
Corrective Action Register	Tracks deficiencies and improvement activities.	BCM Coordinator
Management Review Records	Documents management evaluation and decisions.	Senior Management

Chapter Summary

Establishing BCM objectives enables Jamiyah Singapore to translate its organisational continuity goals into measurable operational requirements.

The chapter has established a proposed framework for defining enterprise-level BCM objectives, service-specific objectives, Corporate and Business Unit MBCOs, performance indicators, implementation responsibilities and monitoring arrangements.

The proposed objectives address protecting life and safety, essential residential care, healthcare support, education-related safeguarding, welfare assistance, food distribution, beneficiary communications, ICT resilience, supplier continuity, and organisational governance.

The chapter also demonstrates that BCM objectives must be supported by the BIA, Risk Assessment, Business Continuity Strategies, documented procedures, testing and management review.

The effectiveness of the BCMS should ultimately be assessed by whether JS can demonstrate the required minimum continuity capability, rather than solely by whether policies and plans have been documented.

Establishing Business Continuity Management objectives is an essential step in converting organisational resilience aspirations into measurable commitments and practical capabilities.

For Jamiyah Singapore, BCM objectives must reflect the organisation's responsibility to protect vulnerable beneficiaries and maintain essential community services during incidents, emergencies and disasters.

These objectives should align with JS's approved BCM policy, charitable mission, governance responsibilities, and applicable legal and regulatory requirements.

They should also recognise that different services have different continuity needs. Activities involving life safety, resident supervision, safeguarding and time-critical healthcare support may require continuous minimum capability, while other activities may be restored within approved recovery timeframes.

By defining measurable objectives, assigning accountable owners, identifying necessary resources and establishing performance indicators, JS can create a structured basis for implementing and evaluating its BCMS.

The Business Impact Analysis and Risk Assessment will provide the evidence needed to validate these objectives and determine appropriate recovery requirements. Business Continuity Strategies and Plans will then translate the approved requirements into practical operating arrangements.

Testing and exercising will demonstrate whether these arrangements can achieve the required minimum service levels.

Management review and continual improvement will ensure that the objectives remain relevant as JS's operating environment, services, beneficiaries and dependencies evolve.

Ultimately, the value of BCM objectives lies not in the statements themselves, but in Jamiyah Singapore's demonstrated ability to protect people, maintain essential services and recover effectively when normal operations are disrupted.

A well-established BCM objectives framework will help JS strengthen organisational resilience, support responsible governance and maintain the confidence of beneficiaries, families, employees, regulators, donors and community partners.

Implementation note from author: The objectives, targets, recovery arrangements and governance responsibilities presented in this chapter are illustrative proposals for the eBook. They should not be interpreted as existing or approved JS policies.

Management should validate final requirements through consultation, the BIA, Risk Assessment, and review of applicable legal, regulatory, and contractual obligations.

eBook 1: Understanding Your Organisation
C1	C2	C3	C4	C5	C6

C7	C8	C9	C10	C11	C12

More Information About Business Continuity Management Courses

To learn more about the course and schedule, click the buttons below for BCM-300 Business Continuity Management Implementer [BCM-3] and BCM-5000 Business Continuity Management Expert Implementer [BCM-5].



	Please feel free to send us a note if you have any questions.

Resilient Communities: Implementing Business Continuity Management at Jamiyah Singapore

[BCM] [JS] [E1] [C4] Establishing Business Continuity Objectives

Business Continuity Management Certified Planner-Specialist-Expert

eBook 1: Chapter 4

Business Continuity Objectives for Implementing the Business Continuity Management Program at Jamiyah Singapore

Introduction

Understanding BCM Objectives

Definition of BCM Objectives

Difference between BCM Goals and BCM Objectives

ISO 22301 Requirements for Establishing BCM Objectives

Alignment with Singapore's governance environment

Principles for Establishing Effective BCM Objectives

Additional Considerations for JS

Proposed Enterprise-Level BCM Objectives for Jamiyah Singapore

Establishing Service-Specific BCM Objectives

Example: CBF-1 Residential Care and Resident Safety

Establishing Minimum Business Continuity Objectives

Corporate MBCO

Business Unit MBCOs

Linking BCM Objectives to Business Impact Analysis

Linking BCM Objectives to Risk Assessment

Translating BCM Objectives into Business Continuity Strategies

Establishing BCM Performance Indicators

Planning to Achieve BCM Objectives

Governance and Accountability for BCM Objectives

Monitoring, Reviewing and Updating BCM Objectives

Practical BCM Objectives Development Process

Key Deliverables

Chapter Summary

More Information About Business Continuity Management Courses

Your Comments Here :

More Posts

Resilient Communities: Implementing Business Continuity Management at Jamiyah Singapore

[BCM] [JS] [E1] [C4] Establishing Business Continuity Objectives

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, '7f0f119d-fad1-42d6-9d33-a8190502e6c0', {"useNewLoader":"true","region":"na1"});

Business Continuity Management Certified Planner-Specialist-Expert

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, '7a1ba6dc-8352-46e7-b150-d25945acf3d9', {"useNewLoader":"true","region":"na1"});

eBook 1: Chapter 4

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, '7f0f119d-fad1-42d6-9d33-a8190502e6c0', {"useNewLoader":"true","region":"na1"});

Business Continuity Objectives for Implementing the Business Continuity Management Program at Jamiyah Singapore

Introduction

Understanding BCM Objectives

Definition of BCM Objectives

Difference between BCM Goals and BCM Objectives

ISO 22301 Requirements for Establishing BCM Objectives

Alignment with Singapore's governance environment

Principles for Establishing Effective BCM Objectives

Additional Considerations for JS

Proposed Enterprise-Level BCM Objectives for Jamiyah Singapore

Establishing Service-Specific BCM Objectives

Example: CBF-1 Residential Care and Resident Safety

Establishing Minimum Business Continuity Objectives

Corporate MBCO

Business Unit MBCOs

Linking BCM Objectives to Business Impact Analysis

Linking BCM Objectives to Risk Assessment

Translating BCM Objectives into Business Continuity Strategies

Establishing BCM Performance Indicators

Planning to Achieve BCM Objectives

Governance and Accountability for BCM Objectives

Monitoring, Reviewing and Updating BCM Objectives

Practical BCM Objectives Development Process

Key Deliverables

Chapter Summary

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, 'ca186780-c71c-49a5-b5f7-501267e40ab0', {"useNewLoader":"true","region":"na1"});

More Information About Business Continuity Management Courses

Your Comments Here :

More Posts