[BCM] [KKH] [E1] [C3] Establishing Organisational Goals

Establishing Organisational Goals

 

 

Introduction

Business Continuity Management (BCM) is most effective when it is aligned with an organisation's strategic direction, mission, and operational priorities. ISO 22301:2019 emphasises that a Business Continuity Management System (BCMS) should be established within the context of the organisation and should support the achievement of its business objectives.

This requires senior management to define clear BCM goals that reflect the organisation's purpose, stakeholder expectations, risk appetite, and regulatory obligations.

For KK Women's and Children's Hospital (KKH), BCM is fundamentally about ensuring that essential healthcare services remain available during disruptions while protecting patients, healthcare professionals, visitors, and the wider healthcare ecosystem.

As Singapore's largest specialist hospital for women and children, KKH has a unique responsibility to maintain continuity of maternity, neonatal, paediatric, emergency, and specialist services, even under adverse conditions such as pandemics, cyberattacks, utility failures, supply chain disruptions, or mass casualty incidents.

The BCM goals established by KKH should align not only with ISO 22301 but also with Singapore's healthcare resilience objectives, Ministry of Health (MOH) requirements, and the national emphasis on maintaining resilient healthcare services.

Well-defined goals provide strategic direction for the development of Business Impact Analyses (BIA), Risk Assessments (RA), Business Continuity Strategies (BCS), Business Continuity Plans (BCP), training programmes, and continual improvement activities.

This chapter outlines a structured approach for establishing BCM goals that support KKH's mission, strengthen organisational resilience, and ensure the continued delivery of safe, high-quality healthcare services.

Purpose of BCM Goals

Business Continuity Management goals define what the organisation intends to achieve through its BCMS.

For KKH, BCM goals should:

• Support the hospital's mission and strategic priorities.
• Protect patients and ensure continuity of clinical care.
• Minimise the impact of disruptions on healthcare services.
• Strengthen organisational resilience.
• Improve emergency preparedness.
• Support regulatory compliance.
• Enhance stakeholder confidence.
• Promote continual improvement.

 

Rather than focusing solely on disaster recovery, BCM goals should enable KKH to maintain critical healthcare services under a wide range of disruptive conditions.

 

Example

A BCM goal such as "Maintain uninterrupted emergency obstetric and neonatal services during major disruptions" provides a clear strategic direction for planning priorities, investment decisions, and recovery strategies.

 

Aligning BCM Goals with Organisational Strategy

BCM goals should reinforce the hospital's broader organisational objectives.

Typical strategic priorities include:

• Deliver safe and high-quality patient care.
• Improve patient outcomes.
• Enhance operational excellence.
• Strengthen clinical governance.
• Support innovation and digital healthcare.
• Develop workforce capability.
• Maintain financial sustainability.
• Support research and education.
• Build organisational resilience.

The BCMS should contribute directly to these priorities.

 

Organisational Objective	BCM Contribution
Deliver safe patient care	Ensure continuity of essential clinical services during disruptions.
Improve patient outcomes	Minimise delays in diagnosis, treatment, and emergency care.
Enhance operational excellence	Reduce operational downtime and improve recovery capability.
Digital transformation	Protect clinical information systems and ensure technology resilience.
Workforce development	Prepare staff through BCM training, awareness, and exercises.
Research and education	Safeguard critical research activities and teaching functions where appropriate.

 

Strategic BCM Goals for KKH

A comprehensive BCMS should support several strategic goals.

Goal 1 – Protect Patient Safety

Patient safety remains the highest priority.

Objectives include:

• Prevent avoidable harm.
• Maintain safe clinical care.
• Protect vulnerable patient groups.
• Support rapid clinical decision-making.

 

Example

During an Electronic Medical Record (EMR) outage, clinicians continue to deliver safe care using established downtime procedures and manual documentation.

 

Goal 2 – Maintain Critical Healthcare Services

Critical Business Functions should continue operating despite disruptions.

Examples include:

• Labour and Delivery
• Neonatal Intensive Care Unit (NICU)
• Children's Emergency Department
• Intensive Care
• Operating Theatres
• Pharmacy
• Laboratory Services

The objective is to minimise service interruption and ensure continuity of life-saving healthcare.

 

Goal 3 – Strengthen Organisational Resilience

 

KKH should develop the capability to:

• Prepare for disruptions.
• Respond effectively.
• Recover efficiently.
• Adapt to changing risks.
• Learn from incidents.

Resilience enables the hospital to continue delivering essential services even under severe operating conditions.

 

Goal 4 – Protect Critical Information and Technology

Modern healthcare depends heavily on digital systems.

BCM goals include protecting:

• Electronic Medical Records
• Clinical applications
• Diagnostic systems
• Medical devices
• Hospital networks
• Communications platforms

Cyber resilience should be integrated into BCM planning.

 

Goal 5 – Strengthen Supply Chain Resilience

Healthcare services depend upon reliable suppliers.

BCM goals include:

• Diversifying critical suppliers.
• Maintaining emergency stock levels.
• Monitoring supplier performance.
• Establishing contingency procurement arrangements.

 

Example

Alternative pharmaceutical suppliers are identified for essential neonatal medications to reduce the impact of supply disruptions.

 

Goal 6 – Ensure Workforce Readiness

Healthcare workers are essential resources.

Goals include:

• Cross-training staff.
• Maintaining succession arrangements.
• Providing BCM education.
• Conducting regular exercises.
• Supporting staff welfare during prolonged incidents.

 

Goal 7 – Enhance Incident Response Capability

KKH should establish coordinated incident management processes that enable:

• Rapid incident assessment.
• Effective command and control.
• Timely decision-making.
• Stakeholder communication.
• Resource prioritisation.

 

Goal 8 – Support Continuous Improvement

BCM should evolve continuously.

Goals include:

• Reviewing incidents.
• Capturing lessons learned.
• Updating recovery plans.
• Conducting regular exercises.
• Monitoring programme performance.

 

Characteristics of Effective BCM Goals

BCM goals should be SMART:

• Specific – Clearly define the intended outcome.
• Measurable – Include performance indicators where appropriate.
• Achievable – Be realistic given available resources.
• Relevant – Align with organisational priorities.
• Time-bound – Include review periods or implementation timelines.

 

Example

Rather than stating "Improve emergency preparedness," a stronger goal would be:

"Conduct at least two hospital-wide business continuity exercises annually covering major clinical disruption scenarios."

 

Stakeholder Expectations

BCM goals should reflect the expectations of key stakeholders.

 

Stakeholder	BCM Expectation
Patients	Safe and uninterrupted healthcare services.
Families and Caregivers	Timely communication and continuity of patient care.
Healthcare Professionals	Safe working environment and effective recovery procedures.
Ministry of Health (MOH)	Compliance with national healthcare resilience requirements.
Healthcare Partners	Coordinated response and mutual support during emergencies.
Suppliers	Clear communication regarding service continuity and procurement needs.
Senior Management	Organisational resilience and effective governance.

Considering stakeholder expectations ensures that BCM delivers value beyond compliance.

 

Regulatory Considerations

When establishing BCM goals, KKH should consider Singapore's regulatory and healthcare environment.

Key considerations include:

• Alignment with ISO 22301:2019 Business Continuity Management Systems.
• Ministry of Health (MOH) healthcare resilience expectations.
• National emergency preparedness frameworks.
• Healthcare quality and patient safety requirements.
• Cybersecurity governance for healthcare institutions.
• Public health emergency response obligations.

These regulatory expectations reinforce the importance of continuity planning as part of good healthcare governance.

 

Measuring Achievement of BCM Goals

Achievement of BCM goals should be monitored using Key Performance Indicators (KPIs).

Examples include:

BCM Goal	Example KPI
Maintain emergency healthcare services	Percentage availability of emergency clinical services during disruptions.
Improve incident response	Time taken to activate the Incident Management Team.
Enhance recovery capability	Recovery time achieved versus target recovery time.
Improve staff readiness	Percentage of staff completing BCM training annually.
Strengthen exercises	Number of BCM exercises conducted each year.
Improve continual improvement	Percentage of corrective actions completed within target timeframe.

Regular reporting enables management to evaluate programme effectiveness.

 

Practical Example

Consider a major ransomware attack affecting clinical information systems.

Because KKH has established clear BCM goals, its response priorities are already defined:

• Protect patient safety above all else.
• Continue emergency obstetric, neonatal, and paediatric care using downtime procedures.
• Activate the Incident Management Team.
• Restore critical ICT systems according to predefined recovery priorities.
• Maintain communication with staff, patients, healthcare partners, and regulators.
• Review lessons learned after service restoration and strengthen cyber resilience measures.

Without clearly established BCM goals, recovery activities may become fragmented, inconsistent, and less effective.

 

Integrating BCM Goals into the BCMS

Once approved by senior management, BCM goals should be embedded throughout the Business Continuity Management System

This includes:

• BCM Policy
• Business Impact Analysis (BIA)
• Risk Assessment (RA)
• Business Continuity Strategy (BCS)
• Business Continuity Plans (BCP)
• Incident Management Plans
• Training and awareness programmes
• Exercise and testing programmes
• Management review processes
• Continual improvement initiatives

This integration ensures that every component of the BCMS supports the hospital's strategic resilience objectives.

 

Summary of Recommended BCM Goals for KKH

 

Strategic BCM Goal	Desired Outcome
Protect patient safety	Ensure uninterrupted delivery of safe clinical care during disruptions.
Maintain critical healthcare services	Prioritise continuity of essential maternal, neonatal, paediatric, emergency, and intensive care services.
Strengthen organisational resilience	Improve preparedness, response, recovery, and adaptability.
Protect critical information and technology	Safeguard clinical information systems and digital healthcare capabilities.
Enhance supply chain resilience	Maintain access to essential medicines, equipment, and services.
Ensure workforce readiness	Develop a trained, resilient, and adaptable workforce.
Improve incident response	Enable coordinated and timely management of disruptive events.
Support continual improvement	Regularly review, test, and enhance the BCMS.

 

Establishing clear Business Continuity Management goals is a critical step in developing an effective ISO 22301-compliant Business Continuity Management System.

For KK Women's and Children's Hospital, these goals provide strategic direction for protecting patients, maintaining critical healthcare services, safeguarding essential resources, and strengthening organisational resilience.

By aligning BCM objectives with the hospital's mission, operational priorities, stakeholder expectations, and Singapore's healthcare resilience requirements, KKH ensures that continuity planning becomes an integral component of clinical governance rather than a standalone compliance exercise.

The goals established in this chapter provide the foundation for the practical activities described throughout the remainder of this eBook series.

They guide the identification of critical business functions, the assessment of operational impacts and risks, the development of recovery strategies, and the continual enhancement of the BCMS.

Through sustained leadership commitment, regular performance monitoring, and continuous improvement, KKH can build a resilient organisation capable of delivering safe, reliable, and high-quality healthcare services under both normal operating conditions and major disruptive events.