Notes for BCM Institute's Course Participants: This is the template for completing the "Part 1: RAR – List of Threats."
As part of the Bandtree Business Continuity Management (BCM) framework, this Risk
This chapter outlines threats that may occur at both the national (Brunei) and organisational levels, particularly affecting Bandtree’s headquarters located at HQ Building, Simpang 751, Jalan Pantai Jerudong, BG3122, Brunei Darussalam.
The threats are categorised according to internationally recognised business continuity threat classifications: Denial of Access – Natural Disaster, Denial of Access – Man-made Disaster, Unavailability of People, Disruption to the Supply Chain, and Equipment and IT-Related Disruption.
The comprehensive identification of threats in this section forms the foundation for subsequent risk analysis, mitigation planning, and recovery strategy development for Bandtree’s operations.
|
Category of Threats |
Types of Threats |
Description of Threats |
Country Level (Brunei) |
Organi-sation Level (Bandtree HQ) |
|
Denial of Access – Natural Disaster |
Flood, Flash Flood, Drought, Heat Wave, Lightning, Rain, Fog/ Haze, Wind |
Natural events that may prevent access to premises or disrupt operations, for example, heavy rain causing flooding around HQ or haze affecting staff access |
Yes |
Yes |
|
|
Earthquake Tremors |
Seismic activity potentially impacting infrastructure stability or safety. |
No |
Yes |
|
|
Storms: Thunder, Tropical Storm, Typhoon |
Severe weather events may result in the temporary closure of offices, power outages, or structural damage. |
Yes |
Yes |
|
Denial of Access – Man-made Disaster |
Fire – Wild, Urban |
Fires originating externally or within the building, potentially causing evacuation or damage to infrastructure. |
Yes |
Yes |
|
|
Bomb Threat / Explosion, Terrorism |
Security incidents that could render premises inaccessible due to safety protocols or actual events. |
Yes |
Yes |
|
|
Power Outage |
Loss of electricity that disrupts building access controls and critical systems. |
Yes |
Yes |
|
Unavailability of People |
Infectious Disease / Pandemic, Haze |
Health-related issues, such as a widespread respiratory illness or persistent haze, can lead to reduced staff attendance. |
Yes |
Yes |
|
|
Labour Dispute / Strike |
Industrial actions that may disrupt staff availability, particularly for services that impact assets or properties. |
No |
Yes |
|
|
Workplace Safety / Violence, Loss of Key Appointment Holders |
Internal risks affecting staff attendance or the incapacitation of key leadership or expertise. |
Yes |
Yes |
|
Disruption to the Supply Chain |
Loss of Specialised Vendor / Supplier, Default of Key Debtors |
Contractors or vendors failing to deliver services (e.g., cleaning, security, maintenance), adversely affecting operations. |
Yes |
Yes |
|
|
Regulatory or Legal Violation |
Changes in government regulations impacting property operations or contractual obligations. |
Yes |
Yes |
|
|
Accidents (Aviation, Rail, Maritime, Vehicular) |
Disruptions due to accidents affecting logistics or staff commuting to HQ. |
Yes |
Yes |
|
Equipment and IT‑Related Disruption |
IT Failure (Hardware, Software), Network Failure |
Breakdown of IT systems critical to property management (e.g., access systems, maintenance portals). |
Yes |
Yes |
|
|
Telecommunications Failure |
Loss of phone or internet connectivity is affecting coordination and monitoring operations. |
Yes |
Yes |
|
|
IT Sabotage |
Malicious attacks harm operational systems, potentially disabling critical management functions. |
Yes |
Yes |
|
|
Facilities & Equipment Failure (HVAC, UPS, Generators, Lift, A/C) |
Failure of physical building systems affecting habitability and access—e.g., air-conditioning breakdown, generator failure. |
Yes |
Yes |
Identifying relevant threats is a critical first step in ensuring that Bandtree remains resilient in the face of potential disruptions.
By recognising specific threats that may arise due to Brunei’s environmental, geopolitical, and operational landscape, Bandtree can better anticipate risks, assess their potential impact, and prioritise resources for mitigation.
This threat profile will support Bandtree in developing appropriate recovery strategies, enhancing risk awareness, and reinforcing preparedness across departments.
The following sections will build upon this threat landscape to formulate tailored risk treatment measures, control activities, and business continuity strategies to safeguard Bandtree’s corporate property management responsibilities and uphold service delivery under all circumstances.
Implementing Business Continuity Management for Bandtree: A Practical Guide |
||||||
| eBook 3: Starting Your BCM Implementation |
||||||
| MBCO | P&S | RAR T1 | RAR T2 | RAR T3 | BCS T1 | CBF |
| CBF 1: Asset and Facilities Management | ||||||
| DP | BIAQ T1 | BIAQ T2 | BIAQ T3 | BCS T2 | BCS T3 | PD |
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].