[BCM] [LKC] [C4] Establishing BCM Goals

Continuity in Care: Implementing BCM for the Lee Kong Chian School of Medicine

Chapter 4

BCM Implementation for Lee Kong Chian School of Medicine

Introduction

The successful implementation of a Business Continuity Management (BCM) framework is essential for the Lee Kong Chian School of Medicine (LKC Medicine) to maintain its critical academic, research, and operational functions in disruptions.

Guided by the ISO 22301 standard, LKCMedicine’s BCM implementation process provides a structured approach to identifying risks, developing response plans, and ensuring operational resilience.

This chapter outlines the key stages of the BCM implementation process, including policy development, plan formulation, testing, and continuous improvement.

By adopting a systematic approach to BCM, LKCMedicine enhances its ability to recover from incidents, safeguard stakeholder interests, and uphold its medical education and research excellence mission.

The framework aligns with NTU’s overarching risk management strategies while addressing the medical school's unique operational requirements.

Implementing BCM at LKCMedicine is a regulatory requirement and a strategic initiative to build long-term resilience.

The comprehensive BCM framework ensures that the institution is well-prepared to respond to unexpected disruptions, from IT outages to natural disasters, while maintaining the continuity of its critical academic and research functions.

Establishing BCM Policy

The BCM implementation process begins with developing a comprehensive BCM policy, which serves as the foundation for the entire framework.

The policy outlines the objectives, scope, and governance structure of LKCMedicine’s BCM programme. Key elements include:

• Purpose and Objectives: Defining the BCM programme’s role in supporting academic and research continuity.
  
  
• Scope of Application: Identifying the departments, processes, and stakeholders covered by the BCM framework.
  
  
• Roles and Responsibilities: Assigning accountability to key personnel, including the BCM Steering Committee and Response Teams.
  
  
• Compliance Requirements: Aligning with ISO 22301, NTU’s risk management policies, and relevant regulatory guidelines.

The BCM policy is approved by senior management and regularly reviewed to reflect changes in the operating environment.

Business Impact Analysis (BIA)

A Business Impact Analysis (BIA) is the cornerstone of the BCM implementation process.

It identifies critical business functions, assesses potential disruptions, and determines their impact on LKC Medicine’s operations.

The BIA process involves:

• Identifying Critical Business Functions: Academic delivery, research projects, clinical training, and administrative services.
  
  
• Assessing Impact: Evaluating the consequences of disruptions on education delivery, research continuity, and stakeholder obligations.
  
  
• Defining Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO): Establishing acceptable timeframes and data loss thresholds for each critical function.

The BIA results inform the development of business continuity strategies and resource allocation.

Risk Analysis and Review (RAR) and Mitigation Strategies

Risk assessment is a key step in the BCM implementation process, helping to identify potential threats to LKCMedicine’s operations. The risk assessment evaluates:

• Natural Disasters (Floods, Fires, Pandemics)
  
  
• Cybersecurity Threats (Data Breaches, System Outages)
  
  
• Supply Chain Disruptions (Medical and Research Supplies)
  
  
• Infrastructure Failures (Power Outages, Building Damage)

Mitigation strategies are developed to reduce the likelihood and impact of these risks. Examples include data backup systems, alternative supply chain arrangements, and enhanced cybersecurity protocols.

BCM Plan Development (PD)

The Business Continuity Plan (BCP) outlines the response and recovery strategies for maintaining critical operations during disruptions. The BCP includes:

• Incident Response Procedures: Immediate actions to be taken during an incident.
  
  
• Communication Protocols: Internal and external communication channels for stakeholders.
  
  
• Recovery Strategies: Alternative arrangements for academic delivery, research continuity, and administrative services.
  
  
• Resource Requirements: Backup facilities, IT systems, and personnel support.
  
  
• Roles and Responsibilities: Assignments for the BCM Steering Committee and Response Teams.

Training and Awareness

Effective BCM implementation requires ongoing training and awareness programmes for staff and students. Training initiatives include:

• BCM Awareness Sessions: Educating stakeholders on their roles in business continuity.
  
  
• Simulation Exercises: Testing response procedures in realistic scenarios.
  
  
• BCM Handbook Distribution: Providing guidance materials to all stakeholders.

Regular training enhances organisational readiness and ensures consistent BCM practices across all departments.

Testing and Exercising (TE)

Testing and exercising the BCP is critical to validating its effectiveness and identifying areas for improvement. LKCMedicine conducts:

• Tabletop Exercises: Scenario-based discussions to assess response procedures.
  
  
• Simulation Drills: Live tests of critical processes, such as IT system recovery and emergency communications.
  
  
• Post-Exercise Reviews: Document lessons learned and update the BCP accordingly.

Testing activities are conducted annually or whenever significant changes occur in the organisation’s structure or operating environment.

Review and Continuous Improvement

BCM is a dynamic process that requires regular reviews and updates. LKCMedicine’s BCM framework includes:

• Periodic Reviews: Annual assessments of the BCP’s effectiveness.
  
  
• Feedback Mechanisms: Collect input from stakeholders and incident debriefings.
  
  
• Audit Compliance: Aligning with ISO 22301 requirements and NTU’s internal audit processes.
  
  
• Continuous Improvement Plans: Implement corrective actions and update BCM documentation.

Summing Up...

This chapter explored the key stages of BCM implementation at LKCMedicine, aligned with ISO 22301 requirements.

The process begins with policy development and progresses through business impact analysis, risk assessment, plan formulation, and testing.

Ongoing training, testing, and continuous improvement reinforce the framework’s effectiveness.

By embedding business continuity principles into its operations, LKC Medicine enhances its resilience, ensuring the sustained delivery of medical education and research excellence.

This proactive approach supports the school’s long-term strategic objectives and strengthens its role in Singapore’s healthcare ecosystem.