CBF 1: Risk Assessment and Guarantee Issuance
Recovery Strategies

The Risk Assessment and Guarantee Issuance process is a cornerstone of Credit Guarantee Corporation Malaysia's (CGC) operational capabilities, directly supporting its mission to facilitate access to financing for small and medium enterprises (SMEs).
To ensure business continuity in the face of disruptions, each component of this critical business function must be clearly defined, prioritised, and supported by appropriate recovery strategies.
This chapter provides a detailed breakdown of the Sub-Critical Business Functions (Sub-CBFs) involved in this key process.
Each Sub-CBF is assessed for its Recovery Time Objective (RTO), assigned a suitable recovery strategy, and aligned with a designated recovery location. Justifications for the selected strategies are informed by best practices outlined in recognised business continuity frameworks, such as those presented in BCM Institute's guidance notes.
This structured approach allows CGC to maintain resilience, minimise service interruptions, and protect stakeholders' confidence, even in adverse situations.
Based on the sub-Critical Business Functions (sub-CBFs) for "Risk Assessment and Guarantee Issuance" at Credit Guarantee Corporation Malaysia, and aligning with the guidelines from BCM Institute's Part 1: Mitigation Strategies, the following table outlines each sub-CBF with its corresponding Recovery Time Objective (RTO), Recovery Strategy, Recovery Location, Details of Recovery Strategy, and Justification for the selected strategy.
Table 2: [BCS] [T2] Recovery Strategies for CBF 1: Risk Assessment and Guarantee Issuance
CBF |
CBF Code |
RTO |
Recovery Strategy |
Recovery Location |
Details of Recovery Strategy |
Justification for Selected Recovery Strategy |
Application Intake |
CBF-RA-01 |
4 hrs |
Work-from-Home (WFH) |
Remote Access |
Enable staff to access application systems remotely via secure VPN and multi-factor authentication. |
Ensures continuity of application intake during disruptions; leverages existing remote infrastructure; minimises downtime. |
Preliminary Eligibility Check |
CBF-RA-02 |
4 hrs |
Manual Processing |
Alternate Site |
Utilise predefined checklists and criteria to assess eligibility when systems are unavailable manually. |
Allows for continued processing without reliance on digital systems; ensures minimal disruption to service delivery. |
Credit Risk Assessment |
CBF-RA-03 |
8 hrs |
Alternate Processing Centre |
Secondary Office |
Redirect risk assessment tasks to a secondary office equipped with the necessary tools and access to backup data. |
Maintains assessment capabilities during primary site disruptions; ensures timely evaluations. |
Site Visits / Due Diligence |
CBF-RA-04 |
24 hrs |
Reschedule Appointments |
Client Locations |
Coordinate with clients to reschedule site visits; utilise virtual meeting tools where feasible. |
Maintains client engagement; adapts to travel restrictions or safety concerns; ensures due diligence processes continue. |
Guarantee Structuring |
CBF-RA-05 |
8 hrs |
Template-Based Drafting |
Remote Access |
Use standardised templates and guidelines to draft guarantee structures remotely. |
Facilitates consistent and efficient structuring; reduces reliance on specific personnel or systems. |
Approval Process |
CBF-RA-06 |
4 hrs |
Delegated Authority |
Remote Access |
Implement a delegated approval framework allowing alternate approvers to authorise guarantees during disruptions. |
Ensures timely approvals; maintains operational flow; reduces bottlenecks during staff unavailability. |
Issuance of Guarantee |
CBF-RA-07 |
4 hrs |
Digital Signature Platform |
Remote Access |
Utilise digital signature solutions to issue guarantees electronically. |
Enables prompt issuance; reduces dependency on physical presence, enhances client satisfaction. |
Post-Issuance Monitoring Setup |
CBF-RA-08 |
24 hrs |
Automated Monitoring Tools |
Remote Access |
Deploy automated tools to monitor and guarantee performance and compliance remotely. |
Ensures continuous oversight; minimises manual intervention; allows for proactive risk management. |
This table is structured to align with BCMpedia's guidelines on mitigation strategies, ensuring that each sub-CBF has a clear recovery plan that minimises disruption and maintains service continuity.
Summing Up ...
By thoroughly analysing the Sub-CBFs within the Risk Assessment and Guarantee Issuance process, CGC strengthens its ability to respond quickly and effectively to operational disruptions.
The tailored recovery strategies outlined in this chapter not only support continuity of service but also align with industry best practices for mitigation and resilience.
With clear RTOs, designated recovery locations, and rationalised response plans, CGC demonstrates a proactive stance in managing business risks while maintaining its commitment to supporting Malaysian SMEs.
This level of preparedness ensures that critical decision-making and client-facing services remain functional under pressure, thus safeguarding both CGC’s operational integrity and its broader economic mission.
More Information About Business Continuity Management Courses
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].