[BCM] [KKH] [E1] [C4] Establishing Business Continuity Objectives

Business Continuity Objectives for Implementing the Business Continuity Management Program at KK Women's and Children's Hospital

 

Introduction

Once the strategic goals of the Business Continuity Management (BCM) programme have been established, the next step is to define measurable Business Continuity Management (BCM) objectives.

While BCM goals describe the overall direction of the programme, BCM objectives translate those goals into specific, measurable, achievable, relevant, and time-bound (SMART) outcomes that guide implementation, monitoring, and continual improvement.

ISO 22301:2019 Clause 6.2 requires organisations to establish business continuity objectives at relevant functions and levels within the organisation. These objectives must be consistent with the Business Continuity Policy, measurable where practicable, monitored, communicated, and updated as necessary.

They should also support the organisation's strategic direction and address applicable business continuity requirements.

For KK Women's and Children's Hospital (KKH), BCM objectives must reflect the hospital's commitment to protecting patients, ensuring continuity of critical clinical services, safeguarding healthcare workers, maintaining regulatory compliance, and supporting Singapore's national healthcare resilience.

As a specialist tertiary hospital providing maternity, neonatal, paediatric, and women's healthcare services, KKH must establish objectives that prioritise patient safety while ensuring the resilience of supporting technologies, facilities, people, and supply chains.

This chapter provides a structured framework for developing BCM objectives aligned with ISO 22301 and tailored to the operational environment of KKH.

 

 

Understanding BCM Objectives

BCM objectives define the measurable outcomes that the organisation seeks to achieve through its Business Continuity Management System (BCMS).

Unlike strategic goals, which are broad and long-term, BCM objectives are operational and measurable. They enable management to evaluate whether the BCMS is functioning effectively and delivering the intended results.

For KKH, BCM objectives should support:

• Protection of patients and staff.
• Continuity of essential healthcare services.
• Effective incident response.
• Timely recovery of critical operations.
• Compliance with regulatory requirements.
• Continuous improvement of organisational resilience.

 

Example

A strategic goal may be:

Maintain continuity of critical healthcare services.

A corresponding BCM objective could be:

Restore critical clinical information systems within the hospital's approved Recovery Time Objective (RTO) following an unplanned disruption.

 

ISO 22301 Requirements for BCM Objectives

According to ISO 22301, BCM objectives should:

• Be consistent with the Business Continuity Policy.
• Be measurable wherever possible.
• Consider applicable legal and regulatory requirements.
• Take into account organisational risks and opportunities.
• Be communicated throughout the organisation.
• Be monitored and reviewed.
• Be updated when necessary.

KKH should ensure that BCM objectives are approved by senior management and incorporated into the broader governance framework.

 

Relationship Between Goals and Objectives

Business Continuity Goals establish the strategic direction of the BCMS, while BCM Objectives define how success will be achieved and measured.

 

BCM Goal	BCM Objective
Protect patient safety	Ensure emergency obstetric, neonatal, paediatric, and intensive care services remain continuously available during disruptions.
Maintain critical healthcare services	Restore Priority 1 clinical services within approved recovery targets following a disruption.
Improve incident response	Activate the Incident Management Team within the predefined response time after incident notification.
Strengthen resilience	Conduct regular exercises to validate continuity plans and recovery capabilities.
Improve organisational preparedness	Ensure all departments maintain current and approved Business Continuity Plans.

 

Principles for Developing BCM Objectives

Effective BCM objectives should follow the SMART framework.

Specific

Objectives should clearly identify the expected outcome.

Example

"Maintain uninterrupted neonatal intensive care services during utility failures."

 

Measurable

Performance should be capable of being monitored.

 

Example

"Complete annual BCM training for at least 95% of staff."

 

Achievable

Objectives should reflect available resources and organisational capability.

 

Relevant

Objectives must support KKH's strategic priorities and healthcare mission.

 

Time-Bound

Objectives should include implementation or review timeframes.

 

Recommended BCM Objectives for KKH

 

The following objectives support KKH's BCM programme.

Objective 1 – Protect Patient Safety

 

Objective

Ensure that no disruption results in avoidable patient harm due to failures in continuity planning.

 

Performance Indicators

• Availability of emergency clinical services.
• Number of patient safety incidents arising from operational disruptions.
• Effectiveness of downtime procedures.

 

Objective 2 – Maintain Critical Clinical Services

 

Objective

Ensure that identified Critical Business Functions remain operational or are recovered within approved recovery objectives.

Examples include:

• Labour and Delivery
• Neonatal Intensive Care Unit (NICU)
• Children's Emergency Department
• Intensive Care
• Pharmacy
• Laboratory Services

 

Objective 3 – Maintain Availability of Clinical Information

 

Objective

Protect the availability, integrity, and accessibility of critical clinical information required for patient care.

 

Examples include:

• Electronic Medical Records
• Laboratory Information Systems
• Radiology Information Systems
• Medication Management Systems

 

Objective 4 – Strengthen Incident Response

 

Objective

Maintain an effective Incident Management capability capable of coordinating hospital-wide response activities during disruptive events.

 

Performance indicators may include:

• Incident activation time.
• Decision-making timelines.
• Communication effectiveness.
• Incident escalation performance.

 

Objective 5 – Improve Recovery Capability

 

Objective

Restore critical healthcare operations within agreed Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).

Recovery objectives should be established following Business Impact Analysis.

 

Objective 6 – Enhance Workforce Preparedness

 

Objective

Develop a workforce that understands its continuity responsibilities.

Examples include:

• Annual BCM awareness programmes.
• Departmental training.
• Incident management exercises.
• Clinical downtime training.
• Cross-functional recovery exercises.

 

Objective 7 – Strengthen Supply Chain Resilience

Objective

Ensure continuity of critical medical supplies and essential support services.

Examples include:

• Essential medicines.
• Blood products.
• Medical gases.
• Laboratory reagents.
• Personal Protective Equipment (PPE).
• Critical medical devices.

 

Objective 8 – Promote Continual Improvement

Objective

Continuously improve the BCMS through reviews, exercises, audits, and lessons learned.

Activities include:

• Annual management reviews.
• Internal BCMS audits.
• Exercise evaluations.
• Corrective action tracking.
• Updating Business Continuity Plans.

 

Cascading Objectives Across the Organisation

ISO 22301 encourages objectives to be established at relevant organisational levels.

For KKH, objectives should cascade from the organisational level to individual departments.

 

Organisational Level	Example BCM Objective
Hospital	Maintain continuity of critical healthcare services.
Clinical Division	Restore specialist clinical services within agreed recovery targets.
Pharmacy	Maintain availability of essential medicines during disruptions.
Laboratory	Continue urgent diagnostic testing with minimal interruption.
ICT	Recover priority clinical applications within approved recovery objectives.
Facilities	Maintain uninterrupted utility services supporting patient care.

This ensures that every department contributes to the hospital's overall resilience.

 

Measuring BCM Performance

BCM objectives should be monitored using Key Performance Indicators (KPIs).

Examples include:

BCM Objective	Example KPI
Protect patient safety	Number of disruption-related patient safety incidents.
Maintain clinical services	Percentage availability of Priority 1 clinical services during incidents.
Improve recovery	Percentage of recovery targets achieved.
Enhance workforce readiness	Staff completion rate for BCM training.
Improve testing	Number of continuity exercises completed annually.
Continual improvement	Percentage of corrective actions implemented within target timeframe.

 

Regular reporting enables senior management to assess programme effectiveness and identify opportunities for improvement.

 

Example Scenario

Consider a major cyberattack affecting KKH's Electronic Medical Record (EMR) system.

The hospital's BCM objectives would guide its response:

• Protect patient safety by activating manual documentation procedures.
• Maintain uninterrupted emergency obstetric, neonatal, and paediatric services.
• Restore critical clinical applications according to established recovery priorities.
• Communicate effectively with staff, patients, healthcare partners, and regulators.
• Conduct a post-incident review to identify improvements and strengthen future resilience.

The existence of predefined objectives enables a coordinated, measurable, and prioritised response rather than an improvised recovery effort.

 

Reviewing BCM Objectives

 

BCM objectives should be reviewed regularly to ensure they remain relevant.

Reviews should occur:

• Annually.
• Following major organisational changes.
• After significant incidents.
• Following BCM exercises.
• After changes to healthcare regulations.
• Following new clinical service introductions.
• During management reviews.

Continuous review ensures that BCM objectives remain aligned with KKH's evolving operational environment and healthcare priorities.

 

Recommended BCM Objectives for KKH

 

No.	BCM Objective	Expected Outcome
1	Protect patient safety	Prevent avoidable harm during disruptions.
2	Maintain critical healthcare services	Ensure continuity of Priority 1 clinical functions.
3	Protect clinical information systems	Maintain access to essential patient information.
4	Improve incident response	Achieve timely activation and coordination of emergency response.
5	Restore operations within recovery targets	Meet approved RTOs and RPOs for critical services.
6	Enhance workforce preparedness	Ensure staff understand BCM roles and responsibilities.
7	Strengthen supply chain resilience	Maintain uninterrupted availability of critical medical supplies.
8	Improve organisational resilience	Strengthen preparedness through testing, exercises, and continual improvement.

 

Practical Example

During a prolonged electrical power outage affecting part of the hospital campus, the BCM objectives enable KKH to prioritise actions in a structured manner.

Emergency generators are activated to sustain critical care areas such as the Neonatal Intensive Care Unit, Operating Theatres, and Children's Emergency Department.

Clinical teams implement downtime procedures where necessary, while facilities engineers work to restore normal power supplies.

Pharmacy and laboratory services activate contingency arrangements to ensure uninterrupted patient care, and the Incident Management Team coordinates communications with staff, patients, and external stakeholders.

Because these actions are guided by predefined BCM objectives, KKH can measure its response against established performance indicators, evaluate whether recovery targets were achieved, and identify opportunities for improvement following the incident.