[BCM] [MC] [E1] [C3] Identifying Organisational Goals for BCM

Foundations of Resilience: BCM Essentials for Marymount Centre

Chapter 3

Establishing Organisational Goals for BCM: Aligning with ISO 22301 for Marymount Centre

Introduction

Organisations like Marymount Centre must prioritise resilience to mitigate disruptions in Singapore's fast-paced and interconnected environment.

Business Continuity Management (BCM), as mandated by ISO 22301, provides a structured framework to safeguard critical operations.

Establishing clear organisational goals for BCM is foundational to building a robust BCM System (BCMS).

This article outlines how Marymount Centre can define actionable, compliant objectives that align with ISO 22301 while addressing Singapore-specific risks.

The Importance of Organisational Goals in BCM

Organisational goals for BCM serve as the compass guiding resilience efforts. '''

For Marymount Centre—a community or educational hub—these goals ensure the continuity of essential services (e.g., education, community programs) during crises like cyberattacks, supply chain disruptions, or monsoon-related floods. Well-defined goals:

1. Clarify Priorities: Identify mission-critical functions (e.g., student portals, emergency communications).

2. Enhance Stakeholder Confidence: Demonstrate commitment to clients, staff, and regulators.

3. Drive Accountability: Assign roles for risk mitigation and recovery.

4. Support ISO 22301 Certification: Meet the standard’s requirements for documented, measurable objectives.

Aligning BCM Goals with ISO 22301 Requirements

ISO 22301 emphasises context-driven, risk-based goals. Key clauses include:

• Clause 5.2 (Policy): Goals must align with the BCMS policy and organizational purpose.

• Clause 6.2 (Objectives): Objectives should be SMART (Specific, Measurable, Achievable, Relevant, Time-bound).

• Clause 9.1 (Monitoring): Regular evaluation ensures goals remain effective amid evolving risks.

Example Alignment

If Marymount’s BCMS policy prioritises IT resilience, a SMART goal could be: “Reduce IT system recovery time from 24 hours to 4 hours by Q4 2024 through cloud backups and staff training.”

Steps to Establish Organisational Goals for BCM

Understand Organisational Context

• Analyse Marymount’s mission, key services, and dependencies (e.g., IT infrastructure, partnerships).

• Identify Singapore-specific threats: cyber risks (aligned with Singapore’s Cybersecurity Act), floods, or pandemics.

Engage Stakeholders

• Conduct workshops with leadership, staff, and partners to identify critical functions.

• If applicable, align goals with expectations from Singapore’s Social Service Institute or Ministry of Education.

Define SMART Goals

• Example 1: “Train 90% of staff in BCM protocols by Q2 2025 through quarterly workshops.”

• Example 2: “Achieve 100% compliance with ISO22301:2019 standards for BCM by 2025.”

Integrate Goals into BCMS

• Link objectives to risk assessments and Business Impact Analyses (BIA).
• Document goals in the BCMS policy and align recovery strategies (e.g., alternate facilities during floods).

Monitor and Adapt

• Use ISO 22301’s PDCA (Plan-Do-Check-Act) cycle to review goals biannually.

• Leverage Singapore’s BCM Institute resources for updates on emerging threats.

Challenges and Best Practices

Challenges

• Resource constraints for training or technology upgrades.

• Balancing short-term operational needs with long-term resilience.

Best Practices

• Leadership Buy-In: Secure executive sponsorship to allocate budgets and prioritize BCM.

• Leverage Technology: Adopt cloud solutions for data redundancy, as encouraged under Singapore’s Smart Nation Initiative.

• Regular Drills: Conduct scenario-based exercises (e.g., simulated cyberattacks) to test goals.

Summing Up ...

For Marymount Centre, establishing ISO 22301-aligned BCM goals is not just about compliance—it’s a strategic investment in safeguarding Singapore’s community-centric services.

By embedding resilience into its organisational DNA, Marymount can confidently navigate disruptions, uphold stakeholder trust, and contribute to Singapore’s reputation as a resilient nation.

This chapter is part 1 of the eBook "Blueprint for Resilience: A Step-by-Step BCM Framework for Marymount Centre."   Part 1 of the eBook is titled "Foundations of Resilience: BCM Essentials for Marymount Centre", which provides a comprehensive guide to implementing a BCM system in alignment with ISO 22301