---
title: "Case Study Exercise [1]: Risk Analysis and Review [A]"
description: "Case Study Exercise [1]: Risk Analysis and Review [A]"
image: https://blog.bcm-institute.org/hubfs/More%20Post%20Icon/More%20Post%20Case%20Study/IC_CaseStudy_RAR.png
---
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Training-led Implementation Series
# Case Study Exercise \[1\]: Risk Analysis and Review \[A\]
This is the case study of the BCM-5000 Blended Learning course. This is a five part series starting with the Risk Analysis and Review Phase.
[Moh Heng Goh](https://blog.bcm-institute.org/bcm-planning-methodology/author/moh-heng-goh) May 13, 2020
## 
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/09b52ed6-eab0-401e-bbc5-a3e957dee699)
## Risk Analysis and Review \[A\]
Using the case scenario given, perform a risk analysis and review (RAR) of the following:
- The corporate HQs at its given location
- Any other issues of risk that might have BCM implications
You may make any reasonable assumptions and limitations of your analysis and review but they must be explicitly stated. These could include existing and historical data and occurrences, additional information and statements about the bank and its operations.
As part of the risk analysis and review process undertaking the following activities :
#### **\[A\] Identify Risk and Impact Categories**
Identify the main risk and impact categories confronting the organization
For example: financial, operations, regulatory, etc. Devise an appropriate multi-level impact category (VH/ H /M /L/ VL) and state what each of these mean for each of the identified risk categories.
The following provides a probable outcome of such undertaking
##### **Risk and Impact Categories**
| | **Impact** | Remarks | | | | |
| --- | --- | --- | --- | --- | --- | --- |
| **Risk** | **Very High** | **High** | **Medium** | **Low** | **Very Low** | |
| **Financial** | | | | | | |
| **Operations** | | | | | | |
| **Regulatory & Legal** | | | | | | |
| | | | | | | |
| | | | | | | |
#### \[B\] Establish a List of Probable Threats Confronting the Organization
Brainstorm and establish a list of probable threats confronting the organization and which could have BC implications. Rank this list via a rating system agreed among your risk team.
The following could be a probable outcome of such an exercise
##### **Ranking of Threats to Organization**
| | **Ranking of Threats** | Overall Ranking (Very High, High Medium, Low, Very Low) | | | | | |
| --- | --- | --- | --- | --- | --- | --- | --- |
| **Threats** | **Very High** | **High** | **Medium** | **Low** | **Very Low** | **Remarks** | |
| Fire | | | | | | | |
| Pandemic | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
#### \[C\] Estimate the Probable Duration of Disruption for each Threats
From your table established above brainstorm and estimate the probable duration of disruption for each threats. What could you conclude about the threats occurrence to the given organization in terms of duration?
| |
| --- |
#### Link to Sections of Case Study
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/dd6ffed5-9956-48c5-b76a-acdbc713fb60) | [![BCM-5000 BL-B-5 Case Study: Business Impact Analysis \[A\]](https://no-cache.hubspot.com/cta/default/3893111/88b5793e-0682-49db-804e-719803e106e7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/88b5793e-0682-49db-804e-719803e106e7) | [![BCM-5000 BL-B-5 Case Study: Business Impact Analysis \[B\]](https://no-cache.hubspot.com/cta/default/3893111/950de931-a483-4494-bc65-60ab53644c6a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/950de931-a483-4494-bc65-60ab53644c6a) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/1d2b9f35-679a-4ade-8c73-d510e057829c) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/1f6ffb82-3e48-4ed0-8194-e9fa72915ba3) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/06458096-d517-41b2-b083-50c9fcc8a378) |
| --- | --- | --- | --- | --- | --- |
**Your Comments Here :**
### More Posts
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/04334171-099a-49e5-becc-c8c082c7947f)
All rights reserved. Copyright 2026