---
title: [BCM] [CGC] [E3] [RAR] [T1] List of Threats
description: [BCM] [CGC] [E3] [RAR] [T1] List of Threats
image: https://blog.bcm-institute.org/hubfs/CGC%20Morepost/CGC%20RAR%20Morepost/GEN%20IC_CGC%20RAR_List%20of%20Threats.png
---
.
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Resilience Redefined: Implementing BCM at Credit Guarantee Corporation Malaysia
# \[BCM\] \[CGC\] \[E3\] \[RAR\] \[T1\] List of Threats
The purpose of this section is to identify and categorise potential threats that could impact the operations of Credit Guarantee Corporation Malaysia (CGC).
This risk assessment review (RAR) serves as a foundational component of the organisation’s Business Continuity Management (BCM) framework, ensuring that critical business functions remain resilient in the face of disruption.
Given CGC’s role in facilitating access to financing for Malaysian SMEs through credit guarantees, it is vital to understand and prepare for a broad spectrum of threats, both at the national level and specific to CGC’s locations and operations.
[Dr Goh Moh Heng](https://blog.bcm-institute.org/bcm-for-cgc/author/dr-goh-moh-heng) Jun 24, 2025
###### Operational Resilience Audit-Specialist-Expert
###### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/2622c32f-fde7-43c1-9659-d3003e425eb9)
###### 
### Part 1: RAR – List of Threats
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/b4640f53-8742-419c-b841-d2b0539ff54f)
The purpose of this section is to identify and categorise potential threats that could impact the operations of Credit Guarantee Corporation Malaysia (CGC).
This risk assessment review (RAR) serves as a foundational component of the organisation’s Business Continuity Management (BCM) framework, ensuring that critical business functions remain resilient in the face of disruption.
Given CGC’s role in facilitating access to financing for Malaysian SMEs through credit guarantees, it is vital to understand and prepare for a broad spectrum of threats, both at the national level and specific to CGC’s locations and operations.
These threats have been grouped into five primary categories, in alignment with industry best practices:
1. Denial of Access – Natural Disaster
2. Denial of Access – Man-made Disaster
3. Unavailability of People
4. Disruption to the Supply Chain
5. Equipment and IT-Related Disruption
By identifying and assessing these threat types in detail, CGC aims to strengthen its organisational resilience, maintain service continuity, and safeguard the interests of its stakeholders during adverse events.
Here’s a structured table (“Part 1: RAR – List of Threats”) tailored for Credit Guarantee Corporation Malaysia (CGC), considering its Malaysian operations and applying the BCMpedia threat classification
| Category of Threats | Types of Threats | Description of Threats | Country Level (Malaysia) | Organisation Level (CGC) |
| --- | --- | --- | --- | --- |
| Denial of Access – Natural Disaster | Flood / Flash Flood / Storm / Haze / Heat Wave / Lightning | Environmental events interrupt access to office premises, branch locations, and staff. | South‑east Asia is prone to monsoon floods, haze from Indonesian fires, occasional lightning storms, and tropical storms | Office in KL or branches could become inaccessible; staff unable to commute; damage to property/infrastructure. |
| Denial of Access – Man‑made Disaster | Terrorism; Bomb Threat/Explosion; Power Outage | Intentional acts or utility failures disrupting access. | Malaysia has recorded occasional bomb threats, and power grid instability can affect areas. | CGC's primary office could face evacuation, security lockdown, and loss of critical systems during outages. |
| Unavailability of People | Infectious Disease/ Pandemic; Labour Dispute/ Strike; Loss of Key Appointment Holders | Workforce reduction due to health crisis, industrial action, or key-person dependence. | Malaysia experienced dengue, COVID‑19; public sector strikes are not uncommon. | Reduced staff availability for credit assessments, processing guarantees, and service delivery. |
| Disruption to the Supply Chain | Loss of Key Supplier/ Vendor; Regulatory or Legal Violation; Transportation Accidents | Interruptions in third-party services, compliance breaches, provider defaults, or logistics disruptions. | Malaysia’s financial services ecosystem depends on external partners for IT, document processing, and courier/logistics. Regulations are frequently updated. | Disruption to IT maintenance, outsourced document scanning, legal/compliance non‑adherence, and delays in customer deliverables. |
| Equipment and IT‑Related Disruption | IT Failure (Hardware/ Software); Network/ Telecommunication Failure; Facilities Failure | Hardware/ software outages, telecom breakdowns, utility system failures—UPS, HVAC, generator, etc. | Malaysian Telekom outages reported; equipment ageing; occasional infrastructure failures. | System downtime for guarantee portal, email, telephony, office climate control or power staff comfort; potential data availability issues. |
#### Notes on methodology
- Threat categories as defined by BCMpedia (Denial of Access, Unavailability of People, Supply Chain, Equipment/IT)
- Filtered threat types to those most relevant to CGC in Malaysia (e.g., floods, haze, IT outages).
- Country-level context considers Malaysian environmental patterns, infrastructure, and socio-legal environment.
- Organisation-level impact evaluates direct implications on CGC’s core operations, its premises, staff, and service delivery.
### Summing Up ...
The threats identified in this chapter represent the diverse range of risks that CGC may face due to both internal vulnerabilities and external environmental factors.
While some risks, such as floods or power outages, are recurrent and expected in the Malaysian context, others, like cyberattacks or supply chain disruptions, are evolving and require constant vigilance.
Through this structured threat listing, CGC can better prioritise its risk mitigation strategies, align its continuity planning with real-world conditions, and establish safeguards for uninterrupted service delivery.
These insights will inform subsequent phases of CGC’s business continuity planning process, including impact analysis, recovery strategies, and testing exercises. Proactive awareness and preparation remain key to ensuring CGC’s continued ability to support Malaysia’s small and medium enterprises, even in times of disruption.
| ###### Resilience Redefined: Implementing BCM at Credit Guarantee Corporation Malaysia | | | | | | |
| --- | --- | --- | --- | --- | --- | --- |
| **eBook 3: Starting Your BCM Implementation** | | | | | | |
| **MBCO** | **P&S** | **RAR T1** | **RAR T2** | **RAR T3** | **BCS T1** | ** CBF** |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/57546524-fc20-4098-ac08-daec83e1f89b) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/bb676daa-bc90-4ca0-aa1b-d4fbf4f82789) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/b4640f53-8742-419c-b841-d2b0539ff54f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/4f12caba-3884-4b44-9a64-3a701629e5d4) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7960230b-559d-4c8b-b13a-66a76d1aa2f1) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/37b98eb7-acf6-4702-ad7e-37f6dabbca59) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/84f17126-67cf-47f9-bf1a-a499338d8606) |
| **CBF 1: Risk Assessment and Guarantee Issuance** | | | | | | |
| **DP** | **BIAQ T1** | **BIAQ T2** | **BIAQ T3** | **BCS T2** | **BCS T3** | **PD** |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/15626e40-1164-47a7-b7ba-a5199639dce3) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/9e765197-7959-436f-a900-1e989a441ded) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/52a2ddc4-799c-46f7-83fa-b2e2fa24aeca) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/b2d02c6b-edfe-4502-bcfb-598fb392aa1e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a2fc465f-f860-4521-bd6a-e6ae7ac44d4e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/d09ce16d-fc46-4904-b79c-27d912a14dac) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7b128932-fa16-461d-b69f-31b6e60cb889) |
#### More Information About Business Continuity Management Courses
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer \[BCM-3\] and the BCM-5000 Business Continuity Management Expert Implementer \[BCM-5\].
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f3922b80-e96a-46d6-8993-dc150a5de2d5) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/9ff8a3dc-e39a-465b-929f-72e232cdd5fb) | [![Register \[BL-B-3\]*](https://no-cache.hubspot.com/cta/default/3893111/ac6cf073-4cdd-4541-91ed-889f731d5076.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ac6cf073-4cdd-4541-91ed-889f731d5076) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/21525c10-4003-4934-95fc-fe218174bc5b) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/46460171-c91a-4936-9bb2-8dc5928a0e02) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/1cb17ac7-50b2-4f88-bc4b-c7444e4b57b5) |
| [![FAQ \[BL-B-3\]](https://no-cache.hubspot.com/cta/default/3893111/b3824ba1-7aa1-4eb6-bef8-94f57121c5ae.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b3824ba1-7aa1-4eb6-bef8-94f57121c5ae) | Please feel free to send us a note if you have any questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/9c199ae8-c470-4bb7-9612-73c7a084e94c) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/8999211a-2c51-4be7-bf49-c393f6c67974) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/5c1aa95d-f6dd-4067-a95c-5cc0c32d7ed8) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/086ab3b9-4d66-4a95-b2f7-1148e9803a9c) |
#### **Your Comments Here:**
### More Posts
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/839787f4-a4fd-456f-accf-54c947026558)
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Dr Goh Moh Heng",
"url" : "https://blog.bcm-institute.org/bcm-for-cgc/author/dr-goh-moh-heng"
},
"dateModified" : "2025-08-13T03:55:23.850Z",
"datePublished" : "2025-06-24T08:40:10.000Z",
"headline" : "[BCM] [CGC] [E3] [RAR] [T1] List of Threats",
"image" : [ "https://blog.bcm-institute.org/hubfs/CGC%20Morepost/CGC%20RAR%20Morepost/GEN%20IC_CGC%20RAR_List%20of%20Threats.png" ],
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/bcm-for-cgc/bcm-cgc-e3-rar-t1-list-of-threats",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```