[BCM] [JS] [E1] [C5] Determining BC Assumptions

Written by Moh Heng Goh | Oct 14, 2026, 6:28:59 AM

eBook 1: Chapter 5

Determining BC Assumptions

Introduction

Determining Business Continuity Management (BCM) assumptions is an important step in establishing a realistic, effective and sustainable Business Continuity Management System (BCMS).

Assumptions set the conditions under which an organisation expects its continuity arrangements, recovery strategies, and emergency procedures to operate during incidents, emergencies, and disasters.

For Jamiyah Singapore (JS), BCM assumptions must reflect its charitable mission, operating environment and responsibility to safeguard vulnerable beneficiaries.

The organisation's continuity planning must consider the availability of personnel, residential facilities, essential healthcare support, food and welfare supplies, information systems, utilities, transportation, suppliers and community partners.

During a disruption, these resources may not remain available in the manner anticipated under normal operating conditions.

For example, a Business Continuity Plan (BCP) may assume that qualified relief personnel can be mobilised within a specified period.

However, during a widespread infectious disease outbreak, both regular and relief personnel may be unavailable at the same time.

Similarly, a residential care recovery strategy may assume that an alternative accommodation facility is available.

That assumption may prove invalid if the same disruption affects both the primary and alternative locations.

Unverified assumptions can significantly weaken business continuity arrangements.

Even when a recovery strategy appears appropriate, it may fail if the underlying assumptions concerning staffing, infrastructure, suppliers or recovery resources are incorrect.

JS must therefore identify, document, validate and periodically review the assumptions supporting its BCMS.

This chapter explains how to establish and manage BCM assumptions, provides practical examples for JS's ten proposed Critical Business Functions (CBFs), and introduces an Assumptions Register that can be used during Business Impact Analysis (BIA), Risk Assessment, Business Continuity Strategy development, Plan Development and Testing, and Exercising.

The chapter builds upon Chapter 2, Understanding Your Organisation for Jamiyah Singapore; Chapter 3, Establishing Organisational Goals for BCM; and Chapter 4, Establishing BCM Objectives.

Understanding BCM Assumptions

Definition of BCM Assumptions

A BCM assumption is a planning condition, expectation or proposition that is treated as valid when developing continuity arrangements but may not yet be fully verified.

Assumptions help organisations make planning decisions when complete information is unavailable or when future disruption conditions cannot be predicted precisely.

For JS, assumptions may concern the availability of qualified staff, the accessibility of recovery facilities, the continuity of essential utilities, the availability of emergency supplies or the ability of external service providers to support recovery operations.

Do not treat an assumption as a confirmed fact unless appropriate evidence supports it.

Purpose of Establishing BCM Assumptions

The principal purposes of establishing BCM assumptions are to:

Define the conditions under which continuity strategies are expected to operate.
Identify dependencies that could affect the achievement of BCM objectives.
Support realistic BIA and recovery resource planning.
Reveal uncertainties requiring validation or additional arrangements.
Establish the boundaries and limitations of recovery strategies.
Provide scenarios for testing and exercising.
Support informed management decisions regarding resilience investments.

Difference between Assumptions, Dependencies, Constraints and Risks

These concepts are related but should not be used interchangeably.

Table 5.1: Understanding BCM Planning Concepts

Concept	Description	Example for JS
Assumption	A condition expected to hold during disruption but requiring validation.	Qualified relief personnel will be available to support essential residential care.
Dependency	A resource, service or relationship required to perform an activity.	Residential care depends on qualified personnel, utilities, food supplies and essential records.
Constraint	A limitation affecting available recovery options.	Alternative accommodation must satisfy applicable safety and care requirements.
Threat	An event or circumstance capable of causing disruption.	A fire renders a residential facility inaccessible.
Vulnerability	A weakness that may increase exposure to disruption.	Only one person is authorised to perform a critical task.
Risk	The effect of uncertainty on objectives, often assessed through consequences and likelihood.	Failure to maintain resident supervision because relief personnel cannot be mobilised.
Recovery Requirement	A defined capability or timeframe needed to support continuity.	Maintain minimum resident supervision continuously during relocation.

An assumption becomes particularly important when its failure could prevent JS from achieving an approved Minimum Business Continuity Objective (MBCO) or Recovery Time Objective (RTO).

Alignment with ISO 22301 and Singapore's Governance Environment

ISO 22301 considerations

ISO 22301 does not prescribe a standalone clause titled "Determining BCM Assumptions".

However, identifying and validating assumptions supports several standard requirements.

Table 5.2: ISO 22301 Alignment

ISO 22301 Clause	Relevant Requirement	Application to BCM Assumptions
Clause 4.1	Understanding organisational context	Identify internal and external conditions that may affect continuity planning.
Clause 4.2	Interested-party requirements	Establish assumptions concerning stakeholder needs, obligations and dependencies.
Clause 4.3	BCMS scope	Clarify the BCMS boundaries, exclusions, and operating conditions.
Clause 6.1	Risks and opportunities	Identify uncertainties that may affect the intended outcomes of the BCMS.
Clause 6.2	BCM objectives	Determine whether the assumptions supporting BCM objectives are realistic.
Clause 7.1	Resources	Validate assumptions concerning personnel, facilities, equipment and financial resources.
Clause 8.2	BIA and Risk Assessment	Examine assumptions relating to disruption consequences, dependencies and recovery requirements.
Clause 8.3	Strategies and solutions	Determine whether selected recovery arrangements can operate under credible disruption conditions.
Clause 8.4	Plans and procedures	Document the conditions and resources required for activation and recovery.
Clause 8.5	Exercise programme	Test assumptions and identify weaknesses in continuity arrangements.
Clause 9.3	Management review	Review significant changes affecting assumptions and continuity capability.
Clause 10	Improvement	Correct weaknesses identified when assumptions prove invalid.

ISO 22313:2020 provides supporting guidance on implementing and maintaining effective business continuity arrangements.

ISO 31000 and ISO 31010 may also support identifying and evaluating uncertainty associated with critical planning assumptions.

Singapore Governance and Regulatory Considerations

JS should determine BCM assumptions based on Singapore's operating environment and applicable legal, regulatory, and governance requirements.

Relevant considerations include the Charities Act; the Code of Governance for Charities and IPCs (2023); personal data protection requirements; workplace safety and fire safety obligations; and applicable requirements for residential care, healthcare-related support, early childhood services, and other regulated activities.

The Commissioner of Charities provides the primary governance framework for charities.

MSF, MOH, and ECDA may impose additional requirements for specific services, depending on applicable licensing and operational arrangements.

ISO 22301 is an international standard, not a Singapore regulator. There is no single universal Singapore BCM policy that applies automatically to every charity.

JS should therefore establish its own BCM policy and planning assumptions based on its verified obligations, organisational context and approved continuity objectives.

JS should also consider climate-related issues when determining assumptions. ISO 22301 Amendment 1:2024 requires organisations to determine whether climate change is relevant to their context.

For JS, this may affect assumptions concerning outdoor conditions, facility cooling, staff transportation, flooding, haze and the availability of essential supplies.

Principles for Establishing BCM Assumptions

BCM assumptions should be developed using a consistent and evidence-based methodology.

Table 5.3: Principles for Determining BCM Assumptions

Principle	Explanation	Application to JS
Realistic	Assumptions should reflect credible disruption conditions.	Do not assume all personnel remain available during an infectious disease outbreak.
Relevant	Assumptions should relate to essential services and recovery dependencies.	Prioritise assumptions affecting resident safety and urgent welfare assistance.
Specific	Assumptions should identify the expected condition clearly.	State the required number and competency of relief personnel rather than assuming staff are available.
Verifiable	Assumptions should be verifiable through evidence.	Confirm alternate accommodation capacity through documented arrangements.
Conservative	Critical services should not depend on overly optimistic assumptions.	Consider simultaneous disruption of multiple supporting resources.
Time-sensitive	Assumptions should specify availability periods where relevant.	Define how quickly emergency supplies can be delivered.
Owned	Assign an accountable owner to each significant assumption.	Assign staffing assumptions to Human Resources and relevant service owners.
Testable	Evaluate important assumptions through exercises.	Test whether emergency communications remain available during a network outage.
Reviewable	Update assumptions when circumstances change.	Reassess supplier availability after changes in contractual arrangements.

For safety-critical activities, support assumptions with stronger evidence and validate them more frequently.

Categories of BCM Assumptions for Jamiyah Singapore

JS should establish assumptions across the principal resources and operating conditions required to maintain essential services.

Table 5.4: Categories of BCM Assumptions

Category	Planning Consideration	Example for JS
Organisational and Governance	Decision-making, authority and management availability.	Authorised personnel can activate the BCP and approve emergency expenditure.
People and Workforce	Staffing levels, competency, availability and mobility.	Competent relief personnel can be mobilised when regular staff are unavailable.
Premises and Facilities	Accessibility, safety, accommodation and recovery locations.	A suitable alternative care location can accommodate affected residents.
Essential Utilities	Electricity, water, sanitation, cooling and telecommunications.	Backup arrangements can support essential services during utility failure.
ICT and Information	Applications, connectivity, records, backups and recovery capability.	Essential resident records can be securely accessed through approved alternatives.
Healthcare and Care Support	Essential healthcare arrangements and specialist personnel.	Time-critical healthcare support remains available during relocation.
Food and Essential Supplies	Availability, stock levels, procurement and delivery.	Emergency food and care supplies can be mobilised within required periods.
Transportation and Logistics	Vehicles, routes, drivers and movement arrangements.	Suitable transport can be arranged for residents who need to relocate.
Suppliers and Third Parties	Supplier capacity, service availability and contractual arrangements.	Critical suppliers can continue supporting essential services during disruption.
Financial Resources	Emergency expenditure, liquidity and payment arrangements.	Authorised personnel can access funds and execute essential payments.
Communications	Contact information, communication channels and stakeholder availability.	Families, staff and relevant authorities can be contacted through alternate channels.
External Environment	Weather, public infrastructure, national incidents and regulatory conditions.	Essential services can continue under credible Singapore-wide disruption conditions.

These categories should form the structure of the organisation's Assumptions Register.

Establishing Enterprise-Level BCM Assumptions

Enterprise-level assumptions apply across multiple services or supporting functions.

They should be reviewed by the BCM Coordinator and relevant functional owners before being presented for management approval.

Table 5.5: Proposed Enterprise-Level BCM Assumptions Register

Assumption ID	Category	Proposed BCM Assumption	Potential Consequence if Invalid	Validation Requirement
ASM-01	Governance	Authorised decision-makers or approved alternates will be available during a major disruption.	Delayed BCP activation, expenditure approval and recovery decisions.	Verify delegation arrangements and emergency contact procedures.
ASM-02	Workforce	Sufficient competent personnel can be mobilised to maintain minimum essential services.	Reduced care capacity and inability to sustain critical activities.	Validate minimum staffing requirements and the availability of alternate personnel.
ASM-03	Facilities	Access at least one suitable recovery location when a primary facility becomes unavailable.	Delayed relocation and interruption to essential services.	Confirm alternative premises, capacity and suitability.
ASM-04	Utilities	Essential utility services or approved alternatives will support minimum recovery operations.	Loss of lighting, cooling, sanitation, communications or essential equipment.	Verify backup utility capability and operating duration.
ASM-05	ICT	Critical applications and information can be recovered or accessed through approved alternatives.	Delayed beneficiary services, loss of access to information, and operational backlogs.	Review DR capability and test recovery procedures.
ASM-06	Vital Records	Essential records remain available through protected copies or approved manual arrangements.	Inability to access care instructions, contacts or case information.	Test secure record retrieval and reconciliation.
ASM-07	Communications	At least one approved emergency communication channel remains available.	Delayed coordination and inability to notify affected stakeholders.	Test alternate communication arrangements.
ASM-08	Suppliers	Critical suppliers can deliver essential goods and services within agreed recovery periods.	Shortages of food, care supplies, equipment or outsourced support.	Obtain evidence of supplier continuity and validate delivery arrangements.
ASM-09	Transportation	Mobilise suitable transport for essential personnel, beneficiaries, and supplies.	Delayed resident relocation and service delivery.	Verify transport arrangements, accessibility and capacity.
ASM-10	Finance	Authorise and execute emergency expenditure and essential payments.	Delayed procurement and inability to mobilise resources.	Test emergency approval and alternative payment procedures.
ASM-11	External Agencies	Request emergency and relevant external support through established channels.	Delayed escalation, coordination or specialist assistance.	Verify contact arrangements and response dependencies.
ASM-12	Recovery Duration	Selected continuity arrangements can operate for the planned recovery period.	Resource depletion, staff fatigue and declining service capacity.	Conduct sustained-operation exercises and resource modelling.

Important: These are proposed assumptions, not confirmed existing arrangements at JS.

Validate each before relying on it in a recovery strategy or plan.

Establishing BCM Assumptions for Critical Business Functions

The organisation's ten proposed CBFs have different resource dependencies and continuity requirements.

Each CBF owner should establish assumptions appropriate to the nature of the service.

Table 5.6: CBF-Specific BCM Assumptions

CBF	Critical BCM Assumption	Implication if Assumption Fails	Required Validation
CBF-1 Residential Care and Resident Safety	Suitable relief personnel, accommodation, essential supplies and resident information can be mobilised during disruption.	Resident supervision, safeguarding and essential daily care may be compromised.	Residential relocation and continuity exercises.
CBF-2 Nursing and Essential Healthcare Support	Competent personnel, essential healthcare supplies and secure care information remain available.	Time-critical healthcare support may be delayed.	Healthcare continuity simulations and resource verification.
CBF-3 Early Childhood Care and Education	Sufficient qualified personnel and safe arrangements for supervision, collection or transfer are available.	Child safety and accountability may be compromised.	Child safeguarding and emergency handover exercises.
CBF-4 Student Care and Educational Support	Essential supervision, parent contacts and authorised handover arrangements remain available.	Students may experience unsafe supervision or delayed collection.	Student accountability and communication exercises.
CBF-5 Emergency Welfare and Financial Assistance	Emergency approval authority, beneficiary information and payment arrangements remain available.	Urgent financial assistance may be delayed.	Emergency assistance workflow simulations.
CBF-6 Food Assistance and Essential Distribution	Alternative food supplies, storage, transportation and distribution capacity can be mobilised.	Vulnerable beneficiaries may experience delays in receiving essential supplies.	Supplier and distribution continuity exercises.
CBF-7 Critical Beneficiary Case Management and Referral	Essential case information and referral channels remain accessible.	Urgent safeguarding cases may not receive timely intervention.	Case management and referral simulations.
CBF-8 Beneficiary, Family and Emergency Communications	Accurate contact information and alternate communication channels remain available.	Delayed or inconsistent information may affect beneficiaries and families.	Emergency notification exercises.
CBF-9 Critical ICT Systems and Information Management	Backup, restoration and alternative access arrangements can meet approved recovery requirements.	Essential applications and information may remain unavailable beyond acceptable periods.	Technical recovery and data restoration tests.
CBF-10 Essential Finance, Procurement and Resource Support	Authorised personnel, emergency funds, suppliers and alternative transaction procedures remain available.	Recovery resources and essential procurement may be delayed.	Finance and procurement continuity simulations.

These assumptions should be incorporated into the detailed BIA and Business Continuity Strategy documentation for each CBF.

Determining Assumptions for Residential Care and Resident Safety

CBF-1 Residential Care and Resident Safety provides an important example because several supporting resources must remain available simultaneously.

Scenario: Residential facility becomes inaccessible

Assume a fire renders a residential facility temporarily unusable.

JS may need to relocate affected residents while maintaining supervision, safeguarding, essential daily care, healthcare support and communications with families.

The recovery strategy could depend on several assumptions.

Table 5.7: Residential Care Recovery Assumptions

Assumption	Expected Condition	Failure Scenario	Validation Method
Relief Staffing	Sufficient competent personnel can accompany and supervise residents.	Relief personnel are unavailable or lack the required competencies.	Staffing mobilisation exercise
Alternative Accommodation	A suitable location has sufficient capacity and essential facilities.	Recovery premises are unavailable or unsuitable for resident needs.	Site assessment and capacity verification
Resident Transportation	Appropriate vehicles and personnel can transport residents safely.	Vehicles are unavailable or unsuitable for mobility requirements.	Transport mobilisation exercise
Essential Care Records	Critical resident information can be accessed securely.	Electronic systems are unavailable and essential information cannot be retrieved.	Vital records recovery test
Essential Healthcare	Time-critical healthcare needs can continue during transfer.	Required personnel, information or supplies are unavailable.	Healthcare continuity simulation
Food and Hydration	Essential meals and drinking water are available.	Catering or supply arrangements are disrupted.	Emergency supply verification
Family Communications	Families and relevant stakeholders can be notified.	Contact information or communication channels are unavailable.	Emergency communication exercise
Recovery Duration	Resources can sustain essential care throughout the disruption.	Supplies or staffing become insufficient during extended operations.	Multi-day continuity scenario exercise

Key Planning Consideration

A residential care recovery strategy should not depend solely on the assumption that an alternative location exists.

JS must also determine whether the location is suitable, accessible, sufficiently resourced and capable of supporting residents with different care requirements.

The availability of a physical location does not automatically establish an effective residential care recovery capability.

Determining Assumptions for Workforce Continuity

Workforce assumptions are particularly important for services that depend on specialised competencies and continuous supervision.

JS should determine the minimum personnel required for each CBF and assess whether those personnel can remain available during different disruption scenarios.

Table 5.8: Workforce Continuity Assumptions

Workforce Area	Planning Assumption	Validation Requirement
Critical Personnel	Essential roles can be filled during disruption.	Identify primary and alternate personnel.
Specialist Competencies	Required care and safeguarding competencies remain available.	Verify qualifications, training and competency records.
Staff Availability	Sufficient personnel can report to work or operate remotely.	Assess credible absenteeism scenarios.
Shift Coverage	Maintain minimum staffing across required shifts.	Review staffing rosters and relief capacity.
Staff Transportation	Personnel can reach designated operating or recovery locations.	Assess transport disruptions and alternative arrangements.
Staff Welfare	Sustain recovery operations without unacceptable fatigue.	Evaluate shift duration, rest periods and relief arrangements.
Delegation	Make critical decisions when designated managers are unavailable.	Verify delegation of authority and escalation procedures.
Volunteers	Volunteers can support approved activities when required.	Confirm availability, competency and role suitability.

For essential care activities, JS should not assume that volunteers or administrative personnel can automatically replace qualified care staff.

Any alternate staffing arrangement must remain consistent with applicable competency, safeguarding and service requirements.

Determining Assumptions for ICT and Vital Records

Critical ICT and information assumptions should reflect the systems and records needed to support beneficiary services.

These may include resident care records, emergency contact information, beneficiary case files, finance systems, communications platforms and operational documents.

Table 5.9: ICT and Information Recovery Assumptions

Assumption Area	Proposed Assumption	Validation Activity
Data Backup	Essential information is backed up according to approved recovery requirements.	Review backup configurations and completion records.
Data Restoration	Backup information can be restored within approved recovery requirements.	Conduct restoration tests.
Alternate Access	Authorised personnel can access essential information when primary systems fail.	Test alternate access arrangements.
Cybersecurity	Recovery information remains protected from unauthorised access or alteration.	Review recovery security controls.
Network Connectivity	Alternative connectivity is available for essential operations.	Test alternate internet or communications arrangements.
Manual Workarounds	Critical activities can continue temporarily without normal applications.	Conduct manual processing exercises.
Vital Records	Recover and reconcile essential records.	Perform vital records recovery and reconciliation tests.
External Technology Providers	Critical providers can support recovery within agreed requirements.	Review contractual commitments and recovery evidence.

Example: Loss of Electronic Resident Records

If a cyber incident prevents access to resident care information, JS may need to rely on approved alternative records.

The recovery arrangement assumes that essential information is available, accurate, protected and accessible to authorised personnel.

That assumption must be tested.

A backup that exists but cannot be restored, or a manual record that is incomplete or outdated, does not provide the required continuity capability.

Determining Assumptions for Suppliers and External Dependencies

JS may rely on external providers for essential food, healthcare-related supplies, utilities, telecommunications, transportation, technology and facility support.

The organisation should not assume contractual arrangements guarantee supplier availability during a widespread disruption.

Table 5.10: Supplier and Third-Party BCM Assumptions

Supplier Dependency	Planning Assumption	Potential Limitation	Validation Requirement
Food Suppliers	Essential food can be delivered during disruption.	Supplier facilities or logistics may be affected.	Confirm alternative supply and delivery arrangements.
Healthcare Suppliers	Essential healthcare-related supplies remain available.	Distribution shortages or supplier disruptions may occur.	Verify critical supply requirements and alternative sourcing.
Transportation Providers	Mobilise suitable vehicles when required.	Multiple customers may compete for limited transport capacity.	Verify availability and mobilisation arrangements.
Telecommunications Providers	Essential communications can continue or be restored.	Network congestion or infrastructure failure may occur.	Test alternative communication channels.
Cloud and ICT Providers	Critical services can be restored within agreed periods.	Regional outages or cyber incidents may affect the provider's ability to recover.	Review provider continuity and recovery evidence.
Facility Contractors	Essential maintenance and emergency repairs can be arranged.	Contractor personnel or spare parts may be unavailable.	Verify emergency response commitments.
Banking and Payment Providers	Essential transactions can be completed during disruption.	Payment infrastructure or authorisation channels may be unavailable.	Test alternative payment and approval procedures.
Community Partners	Partner organisations can provide agreed assistance.	Partners may face the same disruption.	Confirm capacity, scope and activation arrangements.

Do not treat a supplier's service-level agreement as proof of continuity capability.

Support critical supplier assumptions with evidence of operational readiness and, where appropriate, joint exercises.

Establishing the BCM Assumptions Register

JS should maintain a formal BCM Assumptions Register to provide a central record of the assumptions supporting its continuity arrangements.

The register should identify each assumption, its owner, supporting evidence, validation status, and the consequences if it proves invalid.

Table 5.11: Recommended BCM Assumptions Register Template

Field	Description
Assumption ID	Unique identifier for tracking.
Assumption Category	People, premises, ICT, suppliers, utilities, governance or another relevant category.
Assumption Statement	Clear description of the condition expected to hold.
Related CBF	Critical Business Function supported by the assumption.
Related BCM Objective	BCM objective that depends on the assumption.
Supporting Evidence	Documents, contracts, test results or other information supporting the assumption.
Validation Status	Confirmed, Partially Validated, Unverified or Invalid.
Consequence if Invalid	Operational consequences if the assumption does not hold.
Assumption Owner	Person or function responsible for validation.
Validation Method	Review, inspection, test, exercise or third-party confirmation.
Review Frequency	Required interval for reassessment.
Last Review Date	Date of the most recent validation.
Next Review Date	Scheduled reassessment date.
Required Action	Additional validation, corrective action or strategy revision.
Approval Status	Management review and approval information.

5.12.1 Suggested validation status definitions

Status	Meaning	Required Action
Confirmed	Supported by current and appropriate evidence.	Maintain evidence and review periodically.
Partially Validated	Some evidence exists, but important conditions remain unverified.	Complete outstanding validation activities.
Unverified	No sufficient evidence is available.	Do not rely on the assumption for critical recovery decisions without additional safeguards.
Invalid	Evidence demonstrates that the assumption is incorrect or cannot be relied upon.	Revise the recovery strategy, resources or procedures.

Distinguish validation status from risk rating. A confirmed assumption may still carry residual risk.

Assessing the Criticality of BCM Assumptions

Not every assumption requires the same degree of scrutiny.

JS should prioritise assumptions according to their importance to critical service delivery.

Table 5.12: Assumption Criticality Criteria

Criterion	Assessment Question
Life Safety	Could failure of the assumption endanger residents, children, staff or beneficiaries?
Service Continuity	Could failure prevent achievement of an approved MBCO?
Recovery Timing	Could failure cause the organisation to exceed an approved RTO or MTPD?
Dependency Concentration	Does the assumption depend on a single person, facility, system or supplier?
Availability of Alternatives	Are credible alternative arrangements available?
Regulatory Consequences	Could failure affect applicable legal, safeguarding or service obligations?
Resource Sustainability	Can the assumed resources remain available throughout the expected disruption?
Evidence Quality	Is the assumption supported by reliable and current evidence?
Scenario Sensitivity	Could the assumption fail during a widespread or concurrent disruption?

Assumptions affecting immediate life safety and essential care should receive the highest management attention.

Validating BCM Assumptions Through Testing and Exercising

Testing and exercising provide evidence of whether the assumptions supporting continuity arrangements are realistic.

For JS, exercises should test not only whether personnel understand the BCP but also whether the plan's assumed resources and dependencies are available and effective.

Table 5.13: Assumption Validation Through Exercises

Assumption	Exercise Scenario	Expected Evidence
Relief personnel can be mobilised.	Multiple critical employees are unavailable simultaneously.	Staffing mobilisation records and competency verification.
Alternative accommodation is available.	Primary residential facility becomes inaccessible.	Site capacity, suitability and mobilisation evidence.
Essential resident records can be recovered.	Primary information system becomes unavailable.	Essential records are successfully retrieved and verified.
Emergency food supplies can be obtained.	Primary supplier cannot deliver.	Alternative supplier confirmation and delivery capability.
Emergency communications remain available.	Primary internet and telephone services fail.	Successful use of approved alternative communication channels.
Emergency payments can continue.	Normal banking or payment workflow is unavailable.	Successful simulation of authorised alternative transactions.
Recovery operations can be sustained.	Disruption continues beyond the initial recovery period.	Staffing, supplies and resource sustainability assessment.
Multiple dependencies remain available.	Facility outage coincides with workforce and supplier disruption.	Evidence of coordinated recovery under a compound scenario.

Testing Assumptions Under Compound Disruption Scenarios

A single-disruption exercise may not reveal weaknesses arising from simultaneous failures.

For example, JS may successfully test resident relocation when personnel, transportation, and alternative accommodation are fully available.

However, the same strategy may fail during a widespread disruption that simultaneously affects transport services, relief personnel, and recovery premises.

JS should therefore include selected compound scenarios in its exercise programme.

These exercises should examine whether the organisation can maintain essential services when one or more critical assumptions fail.

Managing Invalid or Unverified Assumptions

When an assumption cannot be validated, JS should determine whether the affected continuity strategy remains acceptable.

Do not ignore an invalid assumption or treat it as a routine administrative issue.

Table 5.14: Managing Assumption Validation Findings

Finding	Required Management Response	Example
Assumption Confirmed	Retain supporting evidence and schedule the next review.	Alternative accommodation capacity is verified.
Assumption Partially Validated	Complete additional verification and document limitations.	Recovery location is available but accessibility requirements remain unconfirmed.
Assumption Unverified	Escalate the uncertainty and identify temporary safeguards.	Supplier has not provided evidence of emergency delivery capability.
Assumption Invalid	Revise the strategy or establish an alternative arrangement.	Recovery location cannot accommodate residents requiring specialised support.
Assumption Changed	Reassess affected BCM objectives, strategies and plans.	A critical supplier changes its service delivery arrangements.
Assumption Failure During Exercise	Record findings, identify root causes and implement corrective actions.	Emergency contact information proves inaccurate during a simulation.

Significant assumption failures should be reported to the BCM Steering Committee or the relevant management authority.

Where the failure affects an approved MBCO, RTO or safety-critical activity, management should review the affected recovery strategy before continuing to rely on it.

BCM Assumptions Development and Validation Process

JS should adopt a structured process to identify, document, and maintain BCM assumptions.

Integrate this process into the organisation's BIA, Risk Assessment, Business Continuity Strategy, and BCMS review arrangements.

Governance and Responsibilities for BCM Assumptions

Validating BCM assumptions requires collaboration between senior management, the BCM Coordinator, CBF owners, and supporting functions.

Table 5.15: Responsibilities for BCM Assumptions

Role	Responsibilities
Governing Board	Provide oversight of significant continuity dependencies and organisational resilience concerns.
Senior Management	Approve critical planning assumptions and decisions affecting essential service continuity.
BCM Steering Committee	Review significant assumptions, validation findings and corrective actions.
BCM Coordinator	Maintain the Assumptions Register and coordinate validation and review activities.
CBF Owners	Identify assumptions affecting their services and validate operational dependencies.
Human Resources	Validate workforce availability, competency and delegation assumptions.
Facilities and Safety	Validate assumptions about premises, utilities, physical safety, and recovery location.
ICT and Information Security	Validate assumptions about technology, information recovery, and cybersecurity.
Finance and Procurement	Validate assumptions about emergency expenditure, suppliers, and procurement.
Governance and Compliance	Validate assumptions concerning applicable obligations and governance requirements.
Internal Audit or Independent Reviewer	Provide independent assurance over the adequacy of assumption management and supporting evidence.

Monitoring and Reviewing BCM Assumptions

BCM assumptions should be reviewed periodically and whenever significant changes occur.

Potential review triggers include changes in service delivery, beneficiary needs, staffing, facilities, technology, suppliers, legislation, contractual arrangements and the external threat environment.

Table 5.16: BCM Assumptions Review Framework

Review Area	Review Requirement	Suggested Frequency
Enterprise Assumptions	Confirm that organisation-wide assumptions remain valid.	Annually
Safety-Critical Assumptions	Validate assumptions affecting resident safety, healthcare and safeguarding.	At planned intervals based on criticality and after relevant changes
Workforce Assumptions	Review staffing, competency and alternate personnel availability.	Semi-annually and following significant workforce changes
Facility Assumptions	Review recovery premises, utilities and emergency arrangements.	Annually and following facility changes
ICT Assumptions	Review recovery capability, backups, access and information availability.	According to approved ICT recovery test schedules
Supplier Assumptions	Verify critical supplier availability and continuity capability.	Annually or according to supplier criticality
Financial Assumptions	Review emergency expenditure and payment arrangements.	Annually
Exercise Findings	Update assumptions based on observed performance.	Following each relevant exercise
Incident Findings	Reassess assumptions that failed or changed during an actual disruption.	Following each significant incident
Management Review	Evaluate significant assumption-related weaknesses and corrective actions.	At scheduled BCMS management reviews

The review frequency should match the assumption's criticality and how quickly the underlying conditions may change.

Key Deliverables

Completing the BCM assumptions assessment should produce documented information to support subsequent BCM implementation activities.

Table 5.17: BCM Assumptions Deliverables

Deliverable	Purpose	Proposed Owner
Enterprise BCM Assumptions Register	Records assumptions applying across the organisation.	BCM Coordinator
CBF-Specific Assumptions Register	Records assumptions affecting individual critical services.	CBF Owners
Critical Dependency Register	Identifies resources and external services supporting continuity.	BCM Coordinator / Supporting Functions
Assumption Validation Records	Provides evidence supporting or challenging assumptions.	Assumption Owners
Recovery Resource Verification Records	Confirms availability and suitability of essential recovery resources.	Relevant Resource Owners
Supplier Continuity Evidence	Documents supplier recovery capabilities and dependencies.	Procurement / Service Owners
Assumption Validation Exercise Reports	Records findings from testing and exercising.	BCM Coordinator
Assumption Gap and Corrective Action Register	Tracks unresolved assumptions and improvement requirements.	BCM Coordinator
Management Approval Records	Documents approval of significant planning assumptions and limitations.	Senior Management
Assumptions Review Schedule	Establishes periodic validation and reassessment activities.	BCM Coordinator

Maintain these deliverables as controlled documented information within the BCMS.

Chapter Summary

Determining BCM assumptions gives JS a structured basis for developing realistic, achievable continuity arrangements.

This chapter explains the distinction between assumptions, dependencies, constraints, threats, vulnerabilities, and risks.

It also establishes proposed enterprise-level and CBF-specific assumptions covering governance, workforce, facilities, healthcare support, ICT, information, utilities, suppliers, transportation, finance, and communications.

It gives particular attention to residential care and resident safety because continuity strategies for these services may depend on several resources remaining available simultaneously.

The proposed Assumptions Register documents expected conditions, identifies accountable owners, records supporting evidence, and tracks validation activities.

The chapter also emphasises testing assumptions through realistic exercises, including scenarios involving multiple simultaneous disruptions.

Where assumptions are invalid or cannot be verified, JS should review the affected recovery strategies and establish appropriate corrective actions.

Determining BCM assumptions is fundamental to effective business continuity planning.

For Jamiyah Singapore, the reliability of continuity arrangements depends not only on the quality of documented plans but also on the validity of the assumptions underlying those plans.

The organisation may develop comprehensive recovery procedures for residential care, healthcare support, welfare assistance, food distribution, communications and ICT services. However, those procedures may not achieve their intended outcomes if essential personnel, facilities, information, suppliers or resources are unavailable when required.

JS should therefore establish a formal approach to identify, document, validate, and maintain BCM assumptions.

JS should support critical assumptions with appropriate evidence, assign accountable owners, and test them against credible disruption scenarios.

The results should inform the Business Impact Analysis, Risk Assessment, Business Continuity Strategy selection, plan development, testing, and Exercising.

If assumptions prove invalid, JS should revise its continuity arrangements rather than continue relying on recovery capabilities it cannot demonstrate.

Regular review is equally important. Changes in organisational services, beneficiary needs, workforce arrangements, technology, suppliers, regulatory obligations and environmental conditions may affect the validity of previously approved assumptions.

By maintaining a current, evidence-based Assumptions Register, JS can improve management decision-making, identify hidden dependencies, and strengthen confidence in its continuity arrangements.

Ultimately, effective Business Continuity Management requires Jamiyah Singapore to plan not only for what is expected to remain available during disruption, but also for what may unexpectedly become unavailable.

Validating these assumptions helps ensure that JS's continuity strategies are practical, achievable and capable of protecting vulnerable beneficiaries while sustaining essential community services.

eBook 1: Understanding Your Organisation
C1	C2	C3	C4	C5	C6

C7	C8	C9	C10	C11	C12

More Information About Business Continuity Management Courses

To learn more about the course and schedule, click the buttons below for BCM-300 Business Continuity Management Implementer [BCM-3] and BCM-5000 Business Continuity Management Expert Implementer [BCM-5].



	Please feel free to send us a note if you have any questions.

View full post