[Business Impact Analysis] [Critical Business Function] [T2] Part 3
Part 3: Impact Over Time of Business Functions
CBF-6: Security & Surveillance
Security and surveillance form one of the most critical operational pillars of Marina Bay Sands (MBS), given its positioning as an integrated resort, world-class hospitality venue, and major tourist attraction. CBF-6 Security & Surveillance ensures the safety of guests, staff, assets, and operations through a structured set of business processes ranging from access control and monitoring to incident management and coordination with external agencies.
The “Impact Over Time” analysis is essential in business continuity management, as it helps MBS determine how quickly the absence or degradation of specific security processes escalates risks to life safety, brand reputation, financial losses, and regulatory compliance. By assigning scores from 1 (lowest) to 5 (highest) across timeframes, MBS can identify critical thresholds where disruption becomes intolerable and align recovery strategies with the Recovery Time Objective (RTO) and Maximum Tolerable Period of Disruption (MTPD).
Table: Impact Over Time of Business Functions – CBF-6 Security & Surveillance
Sub-CBF Code |
Sub-CBF |
Highest-Impact Area |
4 Hr |
8 Hr |
1 Day |
2 Day |
3 Day |
5 Day |
7 Day |
10 Day |
14 Day |
21 Day |
30 Day |
60 Day |
RTO |
MTPD |
Vulnerable Period |
CBF-6.1 |
Access Control & Identity Management |
Guest & Asset Safety |
3 |
4 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
8 Hr |
1 Day |
Peak guest check-in / event entry |
CBF-6.2 |
Surveillance & Monitoring |
Life Safety |
4 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
4 Hr |
1 Day |
Night operations / high-volume events |
CBF-6.3 |
Security Operations / Response |
Incident Containment |
4 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
4 Hr |
1 Day |
Emergency or high-risk incident |
CBF-6.4 |
Equipment Maintenance & Technical Surveillance Infrastructure |
Operational Continuity |
2 |
3 |
4 |
4 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
1 Day |
3 Day |
System downtime / scheduled maintenance |
CBF-6.5 |
Security Administration & Policy Management |
Compliance & Governance |
1 |
2 |
2 |
3 |
3 |
4 |
4 |
4 |
5 |
5 |
5 |
5 |
3 Day |
7 Day |
Audit / regulatory inspection period |
CBF-6.6 |
Training, Drills & Human Resources Security |
Staff Readiness |
1 |
1 |
2 |
2 |
3 |
3 |
4 |
4 |
4 |
5 |
5 |
5 |
7 Day |
14 Day |
Pre-event season / festival period |
CBF-6.7 |
Incident Reporting & Investigation |
Regulatory Compliance |
2 |
3 |
4 |
4 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
1 Day |
3 Day |
During serious incidents |
CBF-6.8 |
Event Security & Crowd Control |
Public Safety & Reputation |
3 |
4 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
8 Hr |
1 Day |
Concerts / large gatherings |
CBF-6.9 |
Access to External Support & Liaison |
Crisis Coordination |
2 |
3 |
4 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
1 Day |
3 Day |
Regional/national-level events |
CBF-6.10 |
Security & Surveillance Business Continuity Tasks |
BCM Alignment |
2 |
2 |
3 |
3 |
4 |
4 |
4 |
5 |
5 |
5 |
5 |
5 |
2 Day |
7 Day |
During BCM activation |
Summing Up ... for Part 3
The analysis highlights that surveillance, access control, and incident response (CBF-6.1, CBF-6.2, CBF-6.3) are among the most time-critical functions for Marina Bay Sands, with severe impact (scoring 4–5) arising within the first few hours of disruption. Other functions, such as training, policy management, and business continuity tasks, escalate more gradually but become intolerable if left unaddressed beyond one to two weeks.
This structured evaluation underscores the importance of real-time monitoring, rapid response mechanisms, and well-maintained technical infrastructure to safeguard guests, employees, and brand reputation. Aligning Recovery Time Objectives (RTO) with operational needs ensures that MBS remains resilient against disruptions, while understanding the Maximum Tolerable Period of Disruption (MTPD) provides clear thresholds for escalation.
Ultimately, maintaining robust security and surveillance continuity not only protects life and property but also upholds the trust of stakeholders, regulators, and millions of guests who rely on Marina Bay Sands as a safe and premier destination.
[Business Impact Analysis] [Critical Business Function] [T2] Part 4
Part 4: Supporting IT Systems and Applications
CBF-6: Security & Surveillance
Marina Bay Sands (MBS) operates in a highly complex environment where the safety of guests, staff, assets, and critical infrastructure is of paramount importance.
As an integrated resort and iconic landmark, MBS relies heavily on sophisticated Security & Surveillance systems to maintain a secure operational environment.
The efficiency and resilience of these functions depend not only on human resources and physical safeguards but also on advanced IT systems, applications, and supporting technologies.
This chapter identifies and maps the supporting IT systems and applications for each Sub-CBF under CBF-6 Security & Surveillance, together with their Recovery Point Objectives (RPO), System Recovery Time Objectives (RTO), and the specialized equipment necessary to ensure continuity.
The aim is to provide a clear understanding of how technology underpins security operations at MBS, and how timely recovery is crucial to mitigating risks, ensuring compliance, and protecting the organisation’s reputation.
Table 4-1: [BIA] [P4] Supporting IT Systems and Applications for CBF-6 Security & Surveillance
Sub-CBF Code |
Sub-CBF |
IT Systems and Applications |
RPO |
System RTO |
Supporting Special Equipment or Resources |
Remarks |
CBF-6.1 |
Access Control & Identity Management |
Biometric access systems, RFID card system, ID management software |
15 min |
1 hr |
Biometric scanners, RFID card readers, secure servers |
Critical for staff/guest access control; downtime increases physical risk |
CBF-6.2 |
Surveillance & Monitoring |
CCTV management system, Video Analytics software, VMS servers |
Near real-time |
30 min |
High-definition cameras, control room consoles, video walls |
Continuous monitoring is essential; loss impacts real-time threat detection |
CBF-6.3 |
Security Operations / Response |
Incident management system, Emergency alert system, Dispatch software |
30 min |
1 hr |
Two-way radios, mobile response devices, and command centre terminals |
Ensures coordinated response; downtime leads to delayed interventions |
CBF-6.4 |
Equipment Maintenance & Technical Surveillance Infrastructure |
Maintenance management software, IoT monitoring tools |
24 hrs |
4 hrs |
Diagnostic tools, technical kits, IoT sensors |
Less time-critical but important for long-term resilience |
CBF-6.5 |
Security Administration & Policy Management |
Security policy database, Compliance management systems |
24 hrs |
8 hrs |
Policy management servers, secure storage |
Supports governance and audits; lower urgency but vital for compliance |
CBF-6.6 |
Training, Drills & Human Resources Security |
e-Learning platforms, Training simulation software |
48 hrs |
12 hrs |
Training labs, simulation tools, AR/VR systems |
Downtime affects staff preparedness; tolerable in the short term |
CBF-6.7 |
Incident Reporting & Investigation |
Incident reporting system, Case management software |
1 hr |
2 hrs |
Forensic tools, secure storage for evidence |
Critical for investigations and compliance with regulators |
CBF-6.8 |
Event Security & Crowd Control |
Crowd management systems, Event security monitoring tools |
15 min |
30 min |
Portable barriers, RFID crowd counters, and drones |
Crucial during events; short downtime can cause operational chaos |
CBF-6.9 |
Access to External Support & Liaison |
External law enforcement communication platform, Secure data-sharing systems |
1 hr |
2 hrs |
Secure communication devices, encrypted data transfer channels |
Supports coordination with police, emergency services |
CBF-6.10 |
Security & Surveillance Business Continuity Tasks |
BCM software, Crisis communication apps |
Near real-time |
1 hr |
Redundant communication channels, backup data servers |
Core to BCM continuity; enables rapid crisis activation |
Summing Up ... for Part 4
The Security & Surveillance operations at Marina Bay Sands rely on a multi-layered ecosystem of IT systems, applications, and specialized equipment that enable proactive monitoring, incident response, and risk management. Each Sub-CBF has unique technological dependencies with specific RPOs and RTOs, reflecting the varying urgency of recovery across functions.
For mission-critical processes such as Access Control, Surveillance Monitoring, Event Security, and Incident Management, near real-time recovery is essential to avoid operational and reputational damage. Supporting processes such as Training, Policy Management, and Maintenance tolerate longer recovery windows but remain integral to resilience in the medium term.
By aligning IT systems with business continuity requirements, Marina Bay Sands ensures that its Security & Surveillance functions remain robust, responsive, and adaptable in the face of disruptions—ultimately safeguarding guests, employees, and brand reputation.
More Information About Business Continuity Management Courses
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].