[BCM] [BT] [E4] [R] [RAR] Report

Risk Analysis and Review (RAR) Management Reporting

Part 1: RAR - List of Threats

Part 1 outlines threats that may occur at both the national (Brunei) and organisational levels, particularly affecting Bandtree’s headquarters located at HQ Building, Simpang 751, Jalan Pantai Jerudong, BG3122, Brunei Darussalam.

The threats are categorised according to internationally recognised business continuity threat classifications: Denial of Access – Natural Disaster, Denial of Access – Man-made Disaster, Unavailability of People, Disruption to the Supply Chain, and Equipment and IT-Related Disruption.

The comprehensive identification of threats in this section forms the foundation for subsequent risk analysis, mitigation planning, and recovery strategy development for Bandtree’s operations.

Part 2: RAR - Treatment and Control

Part 2 maps each key threat category to the corresponding controls, both existing and proposed, to illustrate Bandtree’s readiness and ongoing efforts in mitigating operational and strategic risks.

By implementing and continually refining these risk management measures, Bandtree ensures alignment with best practices in business continuity management (BCM).

It demonstrates its commitment to delivering sustainable, secure, and reliable services.

Part 3: RAR - Risk Impact and Likelihood Assessment

This section, Part 3: RAR – Risk Impact and Likelihood Assessment, builds upon the threat identification phase by evaluating each threat in terms of its potential consequences and the probability of occurrence.

Bann_BCM_RAR_Risk Impact and Likelihood Assessment

This structured assessment enables the organisation to prioritise risks systematically and to allocate resources efficiently for mitigation and response planning.

Using a standardised scoring methodology across seven key impact areas—Finance, Operations, Legal & Regulatory, Reputation & Image, Social Responsibility, People, and Assets/ IT Systems/ Information — each threat is measured and analysed to determine its overall risk rating and level.

The result is a clear, data-driven foundation for informed decision-making and the strengthening of Bandtree’s business continuity and resilience posture.

Summing Up ...

Identifying relevant threats is a critical first step in ensuring that Bandtree remains resilient in the face of potential disruptions.

By recognising specific threats that may arise due to Brunei’s environmental, geopolitical, and operational landscape, Bandtree can better anticipate risks, assess their potential impact, and prioritise resources for mitigation.

This threat profile will support Bandtree in developing appropriate recovery strategies, enhancing risk awareness, and reinforcing preparedness across departments.

The following sections will build upon this threat landscape to formulate tailored risk treatment measures, control activities, and business continuity strategies to safeguard Bandtree’s corporate property management responsibilities and uphold service delivery under all circumstances.

Implementing Business Continuity Management for Bandtree: A Practical Guide
eBook 4: Consolidate and Report Your BCM Implementation
P&S	RAR T1	RAR T2	RAR T3

More Information About Business Continuity Management Courses

To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].