[BCM] [KKH] [E1] [C10] Identifying Critical Business Functions

 

 

Introduction

Business Continuity Management (BCM) begins with understanding what the organisation must continue to deliver during disruptive incidents. ISO 22301 requires organisations to identify the products and services that are critical to achieving their objectives and meeting stakeholder expectations.

In a healthcare environment, this means identifying the clinical and support functions essential to protecting life, ensuring patient safety, complying with regulatory obligations, and maintaining confidence in the healthcare system.

As Singapore's largest specialist hospital dedicated to women and children, KK Women's and Children's Hospital (KKH) provides a wide range of specialised healthcare services, including maternity care, neonatal intensive care, paediatric medicine, paediatric surgery, emergency services, diagnostic support, pharmacy, and allied health services.

Any prolonged interruption to these services could have serious consequences for patients, caregivers, healthcare partners, and the national healthcare system.

This chapter identifies the Critical Business Functions (CBFs) that support KKH's mission.

These functions form the basis for subsequent development of Business Impact Analysis (BIA), Risk Assessment (RA), Business Continuity Strategy (BCS), and Business Continuity Plan (BCP).

While every department contributes to healthcare delivery, BCM focuses on functions whose disruption would have unacceptable impacts on patient care, safety, regulatory compliance, or hospital operations.

 

Understanding Critical Business Functions

A Critical Business Function is an organisational activity that must continue or be restored within an acceptable period following a disruption because its loss would result in unacceptable consequences.

For KKH, criticality is determined based on factors such as:

• Impact on patient safety
• Risk to maternal and neonatal outcomes
• Risk to children's health
• Regulatory obligations
• Financial impact
• Reputational impact
• Availability of alternative healthcare providers
• Impact on national healthcare resilience
• Dependency by other hospital services
• Recovery complexity

Unlike ordinary operational activities, Critical Business Functions require priority protection, recovery resources, and tested recovery procedures.

 

Example

If the Neonatal Intensive Care Unit (NICU) experiences a prolonged power disruption, neonatal care must continue immediately through emergency power systems and clinical contingency procedures. Failure to do so could place critically ill newborns at significant risk.

 

Principles for Identifying Critical Business Functions

KKH should identify Critical Business Functions based on a structured evaluation rather than organisational hierarchy or departmental importance.

Typical evaluation criteria include:

• Does the function directly support patient care?
• Would disruption threaten patient safety?
• Does disruption affect emergency services?
• Is the function legally or regulatorily required?
• Would prolonged disruption affect national healthcare delivery?
• Can the function be manually performed?
• How quickly must the function be restored?
• What are the interdependencies?
• Are alternative providers available?
• What resources are essential for continued operation?

These criteria provide an objective basis for prioritising continuity planning.

 

Critical Business Functions for KK Women's and Children's Hospital

The following table presents a representative list of Critical Business Functions for KKH. The actual list should be validated through workshops involving clinical leaders, department heads, and senior management.

 

No.	Critical Business Function	Primary Purpose	Typical Impact if Disrupted
CBF-1	Emergency Obstetric Services	Manage obstetric emergencies and childbirth	Significant maternal and neonatal safety risks
CBF-2	Labour and Delivery Services	Conduct safe childbirth and maternity care	Delayed deliveries and increased clinical complications
CBF-3	Neonatal Intensive Care Services (NICU)	Provide intensive care for critically ill newborns	Immediate life-threatening consequences for neonates
CBF-4	Paediatric Emergency Services	Deliver emergency care for infants and children	Delayed emergency treatment and increased clinical risk
CBF-5	Paediatric Inpatient Services	Provide specialised inpatient medical care	Interrupted patient treatment and reduced bed capacity
CBF-6	Operating Theatre Services	Support emergency and essential surgical procedures	Cancellation of urgent and life-saving surgeries
CBF-7	Intensive Care Services	Provide critical care for seriously ill patients	Increased mortality and inability to manage critical cases
CBF-8	Pharmacy Services	Supply medicines and clinical pharmaceuticals	Medication shortages affecting patient treatment
CBF-9	Laboratory Diagnostic Services	Perform pathology and laboratory testing	Delayed diagnosis and treatment decisions
CBF-10	Medical Imaging Services	Provide radiology and diagnostic imaging	Delayed clinical diagnosis and surgical planning
CBF-11	Blood Bank and Transfusion Services	Supply blood products for patient care	Inability to perform emergency transfusions
CBF-12	Electronic Medical Records (EMR) Management	Provide access to patient medical information	Clinical delays and increased risk of medical errors
CBF-13	Infection Prevention and Control	Prevent healthcare-associated infections	Increased infection transmission and patient safety risks
CBF-14	Sterile Supply Services	Sterilise and distribute surgical instruments	Operating theatres unable to function safely
CBF-15	Medical Gas Supply Management	Ensure continuous oxygen and medical gas supply	Immediate impact on critical care and surgical services
CBF-16	Clinical Engineering and Biomedical Equipment Support	Maintain life-support and medical equipment	Equipment failures affecting patient treatment
CBF-17	Facilities and Engineering Operations	Maintain utilities and hospital infrastructure	Hospital-wide operational disruptions
CBF-18	Information and Communication Technology (ICT) Services	Maintain hospital information systems and networks	Loss of digital healthcare operations
CBF-19	Security and Emergency Response	Protect patients, staff, visitors, and facilities	Increased safety and security risks
CBF-20	Procurement and Supply Chain Management	Ensure availability of medical supplies and equipment	Supply shortages affecting clinical operations

 

Interdependencies Between Critical Business Functions

Healthcare services rely heavily on interconnected functions rather than isolated departments.

For example:

Emergency Caesarean Section

Depends on:

• Labour Ward
• Obstetricians
• Anaesthetists
• Operating Theatre
• Blood Bank
• Pharmacy
• Laboratory
• Neonatal Intensive Care Unit
• Biomedical Engineering
• ICT Systems
• Medical Records
• Facilities Management

If any one of these supporting functions fails, patient outcomes may be adversely affected.

This illustrates why BCM focuses on end-to-end service continuity rather than individual departmental recovery.

 

Supporting Resources Required by Critical Business Functions

 

Each Critical Business Function depends upon multiple supporting resources.

Examples include:

People

• Doctors
• Nurses
• Allied health professionals
• Pharmacists
• Laboratory scientists
• Biomedical engineers
• Facilities engineers
• ICT specialists

 

Information

• Electronic Medical Records
• Clinical protocols
• Patient histories
• Diagnostic reports
• Drug formularies

 

Technology

• Clinical applications
• Medical devices
• Laboratory systems
• Radiology systems
• Patient monitoring systems
• Network infrastructure

 

Facilities

• Operating theatres
• Intensive care units
• Emergency Department
• Pharmacy
• Laboratories
• Data centres

 

Suppliers

• Pharmaceutical distributors
• Medical device vendors
• Blood suppliers
• Oxygen suppliers
• Waste management providers
• Laundry services
• Catering services

 

These dependencies will be analysed further during the Business Impact Analysis.

 

Prioritising Critical Business Functions

 

Not every function requires immediate recovery.

Recovery priorities should consider:

• Risk to life
• Patient safety
• Regulatory requirements
• Clinical urgency
• Service interdependencies
• Public expectations
• Resource availability
• Recovery complexity

A typical recovery sequence may be:

 

Priority 1

• Emergency Services
• Labour and Delivery
• NICU
• Intensive Care
• Medical Gas Supply
• Emergency ICT

 

Priority 2

• Pharmacy
• Laboratory
• Blood Bank
• Operating Theatres
• Radiology

 

Priority 3

• Outpatient Clinics
• Administrative Services
• Finance
• Human Resources
• Corporate Communications

These priorities should be validated through formal Business Impact Analysis.

 

Governance of Critical Business Functions

Identification of Critical Business Functions is not a one-time activity.

KKH should establish governance processes that ensure:

• Annual review of Critical Business Functions
• Review after organisational restructuring
• Review following major incidents
• Review after introducing new clinical services
• Review following regulatory changes
• Periodic approval by senior management
• Alignment with enterprise risk management
• Integration with emergency preparedness programmes

Maintaining an accurate inventory ensures BCM plans remain relevant as healthcare services evolve.

 

Example Scenario

Consider a major ransomware attack affecting hospital information systems.

The immediate priority would be restoring or maintaining:

• Emergency Obstetric Services
• NICU
• Children's Emergency Department
• Intensive Care
• Pharmacy
• Laboratory Services
• Electronic Medical Records (using downtime procedures where necessary)

Meanwhile, lower-priority administrative activities, such as routine reporting or non-essential meetings, may be temporarily suspended until core clinical operations are stabilised.

This prioritisation enables KKH to continue delivering safe patient care while recovering from significant disruptions.

 

Identifying Critical Business Functions is one of the most important activities within the ISO 22301 Business Continuity Management lifecycle.

For KK Women's and Children's Hospital, these functions represent the essential clinical, diagnostic, operational, and support activities that safeguard maternal, neonatal, and paediatric healthcare services.

By systematically identifying and prioritising these functions, KKH can focus its resources on protecting the services that are most critical to patient safety, regulatory compliance, and organisational resilience.

The Critical Business Functions identified in this chapter provide the foundation for the next stages of the BCM programme.

In the following chapters, each function will undergo a detailed Business Impact Analysis to determine recovery time objectives, resource requirements, operational dependencies, and continuity strategies.

Together, these activities enable KKH to develop a comprehensive, ISO 22301-aligned Business Continuity Management System that strengthens its preparedness for disruptions and supports the continued delivery of high-quality healthcare services across Singapore.

eBook 1: Understanding Your Organisation
C1 √	C2 √	C3	C4	C5	C6
C7	C8 √	C9	C10 √	C11	C12

 

More Information About Business Continuity Management Courses