---
title: "[BCM] [JHA] [E3] [CORE] [C6] Mitigation Strategies for Jamiyah Home for the Aged"
description: "Mitigation strategies for Jamiyah Home for the Aged: treatments, illustrative target ratings and a phased roadmap for 30 threats, with a justification for each."
---

.

[![BCMIWhiteLogo.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogo.png?width=556&name=BCMIWhiteLogo.png "BCMIWhiteLogo.png")](http://www.bcm-institute.org/)

- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/) 
    - [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
    - [Our History](https://www.bcm-institute.org/about-us/our-history/)
    - [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
    - [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
    - [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog) 
    - [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
    - [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
    - [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
    - [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
    - [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
    - [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
    - [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered) 
    - [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
    - [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
    - [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
    - [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
    - [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
    - [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
    - [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)

- <https://www.facebook.com/BCMInstitute/>
- <https://www.linkedin.com/company/business-continuity-management-institute-bcm-institute>

###### Sustaining Community Services: Implementing BCM at Jamiyah Home for the Aged

![Smiles and Supplies\_ Backpack Donation Day](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20Special%20Needs%20Care%20SPC/Smiles%20and%20Supplies_%20Backpack%20Donation%20Day.png?width=1536&height=1024&name=Smiles%20and%20Supplies_%20Backpack%20Donation%20Day.png "Smiles and Supplies_ Backpack Donation Day")

# \[BCM\] \[JHA\] \[E3\] \[CORE\] \[C6\] Mitigation Strategies for Jamiyah Home for the Aged

[![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/1ce18ee1-97ef-4ed4-b16b-5d6ab24cec19.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1ce18ee1-97ef-4ed4-b16b-5d6ab24cec19)

This is the final chapter of the Business Continuity Management (BCM) implementation guide, Starting Your BCM Implementation for Jamiyah Home for the Aged: CORE. It builds on the Threat Register in Part 1 and the treatment and control assessment in Part 2 of the Risk Assessment Report (RAR), as well as the impact and likelihood assessment in Part 3. Each row of the table below, including those for information technology (IT) threats, combines the existing controls, the current Risk Rating and Risk Level, the proposed risk treatment, the additional mitigation strategy and a justification. The strategy forms part of the home's Business Continuity Strategy (BCS).

The current ratings are taken unchanged from Chapter 5 and reflect the exposure after existing controls and before additional mitigation. The target ratings in the risk treatment column show the level the proposed strategy aims to achieve. In each case,  only the likelihood changes, while the highest impact score is held constant, because mitigation in this chapter reduces how often an event occurs or how well it is handled, not what it would cost if it occurred fully. The targets are illustrative; they have not yet been achieved and can be met only if the planned controls are implemented and validated. The existing controls remain assumed and require validation.

[![\[Logo\] \[BCM\] Certification Transparent](https://no-cache.hubspot.com/cta/default/3893111/7789ece9-0b11-4cae-9f32-d34d7eb1688a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7789ece9-0b11-4cae-9f32-d34d7eb1688a)

[Moh Heng Goh](https://blog.bcm-institute.org/bcm-v2/author/moh-heng-goh) Nov 6, 2026

Knowing which threats matter most is only useful if it leads to action. This chapter sets out the mitigation strategies that Jamiyah Home for the Aged (JHA) could adopt for each threat, the treatment of the remaining risk and the reasons for each choice.

## [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/1ce18ee1-97ef-4ed4-b16b-5d6ab24cec19.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1ce18ee1-97ef-4ed4-b16b-5d6ab24cec19)

## [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/dc612b43-f678-4d9a-888e-8dced9d1b72b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/dc612b43-f678-4d9a-888e-8dced9d1b72b)

## Introduction

[![\[BCM\] \[JHA\] \[E3\] \[BCS\] \[T1\] Mitigation Strategies and Justification](https://no-cache.hubspot.com/cta/default/3893111/000136ee-249d-4cd6-ba08-d201a2681a2a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/000136ee-249d-4cd6-ba08-d201a2681a2a)This is the final chapter of the Business Continuity Management (BCM) implementation guide, Starting Your BCM Implementation for Jamiyah Home for the Aged: CORE. It builds on the Threat Register in Part 1 and the treatment and control assessment in Part 2 of the Risk Assessment Report (RAR), as well as the impact and likelihood assessment in Part 3. Each row of the table below, including those for information technology (IT) threats, combines the existing controls, the current Risk Rating and Risk Level, the proposed risk treatment, the additional mitigation strategy and a justification. The strategy forms part of the home's Business Continuity Strategy (BCS).

The current ratings are taken unchanged from Chapter 5 and reflect the exposure after existing controls and before additional mitigation. The target ratings in the risk treatment column show the level the proposed strategy aims to achieve. In each case, only the likelihood is changed, while the highest impact score is held constant, because mitigation in this chapter reduces how often an event occurs or how well it is handled, not what it would cost if it occurred fully. The targets are illustrative; they have not yet been achieved and can be met only if the planned controls are implemented and validated. The existing controls remain assumed and require validation.

 

| **Risk Level** | **Current number of threats** | **Target number of threats (illustrative)** |
| --- | --- | --- |
| **Very Low / Low** | **3** | **11** |
| **Moderate** | **18** | **15** |
| **High** | **9** | **4** |
| **Very High (Extreme)** | **0** | **0** |

Of the 9 threats currently rated High, the target would move 5 to Moderate, while 4 would remain High. The threats that remain High are those whose consequences stay severe even when likelihood falls, and they should remain under senior management oversight.

## Mitigation strategies

 

| **Threat** | **Existing Controls** | **Risk Rating** | **Risk Level** | **Risk Treatment (Residual Risk)** | **Additional Mitigation Strategy** | **Justification for Selected Mitigation Strategy** |
| --- | --- | --- | --- | --- | --- | --- |
| **Flash Flood (Denial of Access – Natural Disaster)** | **Weather and rainfall alert monitoring (assumed, requires validation); Routine drain and gutter clearance (assumed, requires validation); Staff call-out and contingency roster guidance (assumed, requires validation)** | **3 × 2 = 6** | **Moderate** | **Reduce. Target residual (illustrative): 3 × 1 = 3, Very Low / Low.** | **Complete the flood-exposure survey, relocate vital stock above ground level and agree a temporary staff-transport arrangement.** | **Impact is moderate and the flood footprint is predictable, so inexpensive physical measures can lower the likelihood of operational disruption.** |
| **Severe Storm and Strong Winds (Denial of Access – Natural Disaster)** | **Weather alert monitoring (assumed, requires validation); Routine tree-trimming and structural checks (assumed, requires validation); Indoor relocation of resident activities (assumed, requires validation)** | **3 × 3 = 9** | **Moderate** | **Reduce and accept residual. Target residual (illustrative): 3 × 2 = 6, Moderate.** | **Introduce the storm-readiness checklist and a post-storm inspection routine.** | **Consequences are manageable; low-cost readiness actions reduce disruption, after which the remaining exposure may be accepted with approval.** |
| **Lightning Strike (Denial of Access – Natural Disaster)** | **Building lightning protection system (assumed, requires validation); Surge protection on electrical and alarm circuits (assumed, requires validation); Equipment repair arrangements (assumed, requires validation)** | **3 × 2 = 6** | **Moderate** | **Reduce. Target residual (illustrative): 3 × 1 = 3, Very Low / Low.** | **Complete the certified inspection and replace degraded protection.** | **A verified protection system keeps the likelihood of damaging strikes low at modest cost.** |
| **Extreme Heat (Denial of Access – Natural Disaster)** | **Fans and cooling in resident areas (assumed, requires validation); Hydration rounds (assumed, requires validation); Heat-stress observation by care staff (assumed, requires validation)** | **3 × 3 = 9** | **Moderate** | **Reduce. Target residual (illustrative): 3 × 2 = 6, Moderate.** | **Adopt the heat-stress protocol with defined triggers and test the cooling-room arrangement.** | **Frail residents are vulnerable, so reduction is preferred over acceptance; the protocol is inexpensive and effective.** |
| **Haze (Denial of Access – Natural Disaster)** | **Monitoring of national air-quality advisories (assumed, requires validation); Suspension of outdoor programmes (assumed, requires validation); Stock of masks (assumed, requires validation)** | **3 × 2 = 6** | **Moderate** | **Accept. Target residual (illustrative): 3 × 2 = 6, Moderate.** | **Define the triggers and maintain a mask stock.** | **Impact is limited to health and programme disruption; low-cost preparedness is proportionate and the remaining exposure may be accepted with approval.** |
| **Distant Earthquake Tremors (Denial of Access – Natural Disaster)** | **Evacuation plan (assumed, requires validation); Post-tremor visual inspection routine (assumed, requires validation)** | **2 × 2 = 4** | **Very Low / Low** | **Accept. Target residual (illustrative): 2 × 2 = 4, Very Low / Low.** | **Include tremor response in emergency procedures and review annually.** | **Both consequence and disruption are low, so acceptance with monitoring is proportionate.** |
| **Fire (Denial of Access – Man-made Disaster)** | **Fire detection and alarm system (assumed, requires validation); Fire extinguishers and suppression equipment (assumed, requires validation); Evacuation plan and periodic drills (assumed, requires validation)** | **5 × 2 = 10** | **High** | **Reduce and transfer. Target residual (illustrative): 5 × 1 = 5, Moderate.** | **Complete the fire risk assessment, test horizontal evacuation, confirm insurance cover and pre-agree alternative accommodation.** | **Impact is severe, so the likelihood must be driven down, with insurance as a financial backstop only.** |
| **Gas Leak (Denial of Access – Man-made Disaster)** | **Periodic inspection of gas installations (assumed, requires validation); Gas isolation valve (assumed, requires validation); Emergency contact list for the gas provider (assumed, requires validation)** | **4 × 2 = 8** | **Moderate** | **Reduce. Target residual (illustrative): 4 × 1 = 4, Very Low / Low.** | **Verify detectors and valves and add the response card.** | **Consequences can be severe for people but are controllable through inexpensive detection and isolation.** |
| **Structural Failure (Denial of Access – Man-made Disaster)** | **Periodic structural and façade inspection (assumed, requires validation); Maintenance and repair programme (assumed, requires validation)** | **4 × 1 = 4** | **Very Low / Low** | **Maintain controls and transfer. Target residual (illustrative): 4 × 1 = 4, Very Low / Low.** | **Complete the condition review and agree the relocation plan with the managing agent.** | **Rare but severe; the condition review verifies that the likelihood is truly low and prepares a response, and the likelihood is held rather than lowered.** |
| **Bomb Threat (Denial of Access – Man-made Disaster)** | **Visitor registration and screening (assumed, requires validation); Bomb-threat telephone checklist (assumed, requires validation); Evacuation plan (assumed, requires validation)** | **3 × 2 = 6** | **Moderate** | **Reduce. Target residual (illustrative): 3 × 1 = 3, Very Low / Low.** | **Run the scenario exercise and designate the assembly point.** | **A rehearsed response limits disruption and distress to residents.** |
| **Terrorism Incident Nearby (Denial of Access – Man-made Disaster)** | **Visitor access control (assumed, requires validation); Security awareness briefing for staff (assumed, requires validation)** | **3 × 1 = 3** | **Very Low / Low** | **Accept. Target residual (illustrative): 3 × 1 = 3, Very Low / Low.** | **Document the procedures and review annually.** | **Likelihood is low and impact moderate, so acceptance after procedural preparation is proportionate.** |
| **Road Closure and Major Traffic Incident (Denial of Access – Man-made Disaster)** | **Staff travel advisories (assumed, requires validation); Flexible shift handover (assumed, requires validation)** | **3 × 3 = 9** | **Moderate** | **Accept. Target residual (illustrative): 3 × 3 = 9, Moderate.** | **Document alternative routes; no further mitigation.** | **Short disruptions are manageable and further mitigation is disproportionate.** |
| **Infectious Disease Outbreak (Unavailability of People)** | **Hand hygiene and cleaning routines (assumed, requires validation); Visitor screening (assumed, requires validation); Isolation arrangements for symptomatic residents (assumed, requires validation)** | **5 × 3 = 15** | **High** | **Reduce. Target residual (illustrative): 5 × 2 = 10, High.** | **Approve the outbreak plan, secure supplies and exercise it with partner agencies.** | **Impact is severe for frail residents, so early detection and containment are the priority.** |
| **Mass Staff Illness (Unavailability of People)** | **Call-out and relief roster (assumed, requires validation); Staff illness reporting (assumed, requires validation)** | **4 × 3 = 12** | **High** | **Reduce and transfer. Target residual (illustrative): 4 × 2 = 8, Moderate.** | **Define minimum staffing levels and agree relief arrangements in writing.** | **Relief capacity is the most direct way to protect residents when absences cluster.** |
| **Loss of Key Personnel (Unavailability of People)** | **Deputy arrangements for key posts (assumed, requires validation); Documented role responsibilities (assumed, requires validation)** | **3 × 3 = 9** | **Moderate** | **Reduce. Target residual (illustrative): 3 × 2 = 6, Moderate.** | **Complete succession cover and cross-training.** | **Dependence on single individuals is easily reduced through documentation and cross-training.** |
| **High Staff Turnover and Skills Shortage (Unavailability of People)** | **Ongoing recruitment (assumed, requires validation); Staff training in core and soft skills (assumed, requires validation); Overtime and agency cover (assumed, requires validation)** | **4 × 4 = 16** | **High** | **Reduce. Target residual (illustrative): 4 × 3 = 12, High.** | **Track vacancy triggers, expand recruitment channels and strengthen retention.** | **This is a persistent risk; sector-wide constraints limit how far likelihood can fall, so a realistic target is set.** |
| **Workplace Violence (Unavailability of People)** | **Visitor registration (assumed, requires validation); Incident reporting (assumed, requires validation); Staff training in handling difficult behaviour (assumed, requires validation)** | **4 × 2 = 8** | **Moderate** | **Reduce. Target residual (illustrative): 4 × 1 = 4, Very Low / Low.** | **Train staff and test the panic-alarm procedure.** | **Training and alarms are inexpensive and directly protect staff and residents.** |
| **Mandatory Quarantine of Staff (Unavailability of People)** | **Staff health declaration (assumed, requires validation); Relief roster (assumed, requires validation)** | **4 × 2 = 8** | **Moderate** | **Reduce. Target residual (illustrative): 4 × 1 = 4, Very Low / Low.** | **Adopt the split-team model and relief arrangements.** | **Pre-planning keeps rosters safe when staff are removed at short notice.** |
| **Critical Supplier Failure (Disruption to the Supply Chain)** | **Buffer stock of essentials (assumed, requires validation); Approved supplier list (assumed, requires validation)** | **4 × 2 = 8** | **Moderate** | **Reduce. Target residual (illustrative): 4 × 1 = 4, Very Low / Low.** | **Complete the supplier map, set minimum stock days and qualify alternates.** | **A small stock buffer and alternate suppliers remove most of the exposure at low cost.** |
| **Outsourced Service Provider Failure (Disruption to the Supply Chain)** | **Contractual service levels (assumed, requires validation); Periodic supplier performance review (assumed, requires validation)** | **3 × 3 = 9** | **Moderate** | **Reduce and transfer. Target residual (illustrative): 3 × 2 = 6, Moderate.** | **Insert continuity clauses and identify alternate providers.** | **Contractual protection helps, but accountability remains; alternates are needed.** |
| **Medication and Medical Supply Disruption (Disruption to the Supply Chain)** | **Medication reconciliation and stock check (assumed, requires validation); Standing arrangement with pharmacy (assumed, requires validation)** | **4 × 2 = 8** | **Moderate** | **Reduce. Target residual (illustrative): 4 × 1 = 4, Very Low / Low.** | **Appoint the secondary pharmacy and set reorder points.** | **Direct health consequences justify reducing the likelihood of any gap in therapy.** |
| **Telecommunications Failure (Disruption to the Supply Chain)** | **Mobile phones for duty staff (assumed, requires validation); Emergency contact list (assumed, requires validation)** | **3 × 3 = 9** | **Moderate** | **Reduce. Target residual (illustrative): 3 × 2 = 6, Moderate.** | **Add a second carrier or mobile data backup and test emergency routes.** | **Redundancy is inexpensive and covers both emergency and administrative communication.** |
| **Water and Electricity Supply Failure (Disruption to the Supply Chain)** | **Emergency lighting (assumed, requires validation); Backup power for life-safety systems (assumed, requires validation); Water storage and bottled water stock (assumed, requires validation)** | **4 × 3 = 12** | **High** | **Reduce. Target residual (illustrative): 4 × 2 = 8, Moderate.** | **Verify and test backup power and water arrangements under load.** | **Utilities are a common point of failure; proven backup power and water reduce severity.** |
| **Banking and Payment System Disruption (Disruption to the Supply Chain)** | **Petty cash float (assumed, requires validation); Payment authorisation procedure (assumed, requires validation)** | **3 × 2 = 6** | **Moderate** | **Accept. Target residual (illustrative): 3 × 2 = 6, Moderate.** | **Maintain the manual payment procedure and review annually.** | **Consequences are mostly financial and temporary, so acceptance with monitoring is proportionate.** |
| **Ransomware (Equipment and IT-Related Disruption)** | **Endpoint protection (assumed, requires validation); Regular backups (assumed, requires validation); Staff phishing awareness (assumed, requires validation)** | **5 × 3 = 15** | **High** | **Reduce and transfer. Target residual (illustrative): 5 × 2 = 10, High.** | **Implement offline backups and multi-factor authentication and review cyber insurance.** | **Impact is severe; prevention and recoverability are the main levers.** |
| **Personal Data Breach (Equipment and IT-Related Disruption)** | **Role-based access to records (assumed, requires validation); Confidentiality undertakings (assumed, requires validation); Locked storage for paper records (assumed, requires validation)** | **5 × 3 = 15** | **High** | **Reduce and transfer. Target residual (illustrative): 5 × 2 = 10, High.** | **Complete the access review and breach procedure; review insurance.** | **Legal and reputation consequences are severe, so preventive controls and rehearsed notification matter most.** |
| **Network and Internet Failure (Equipment and IT-Related Disruption)** | **Paper downtime forms (assumed, requires validation); Support contract with IT vendor (assumed, requires validation)** | **3 × 3 = 9** | **Moderate** | **Reduce. Target residual (illustrative): 3 × 2 = 6, Moderate.** | **Test downtime procedures and add a secondary connection.** | **Workarounds are low-cost and keep care continuing.** |
| **Care Records System Failure (Equipment and IT-Related Disruption)** | **Backup of records (assumed, requires validation); Paper copy of medication charts (assumed, requires validation)** | **4 × 3 = 12** | **High** | **Reduce. Target residual (illustrative): 4 × 2 = 8, Moderate.** | **Produce the daily summary and test restoration.** | **Access to current resident information is essential to safe care.** |
| **Emergency Alarm and Nurse Call Failure (Equipment and IT-Related Disruption)** | **Weekly call-bell test (assumed, requires validation); Maintenance contract for alarm systems (assumed, requires validation); Night-time rounding (assumed, requires validation)** | **5 × 2 = 10** | **High** | **Reduce. Target residual (illustrative): 5 × 1 = 5, Moderate.** | **Stock spare devices and start the rounding protocol.** | **Direct risk to resident safety warrants a low target likelihood.** |
| **Lift and Critical Equipment Failure (Equipment and IT-Related Disruption)** | **Preventive maintenance schedule (assumed, requires validation); Service contract with response times (assumed, requires validation)** | **3 × 3 = 9** | **Moderate** | **Reduce. Target residual (illustrative): 3 × 2 = 6, Moderate.** | **Hold spares and define the movement plan.** | **Moderate consequences and common occurrence justify low-cost resilience measures.** |

## Implementation roadmap

The roadmap groups the proposed actions by timeframe. The owners shown are lead owners only; most actions will require supporting teams. All owners and dates are proposals for the Superintendent and the managing agent to confirm.

 

| Timeframe | Number of threats addressed | Threats | Proposed owners (lead owners) |
| --- | --- | --- | --- |
| **0–3 months** | **10** | **Extreme Heat; Fire; Infectious Disease Outbreak; Mass Staff Illness; Medication and Medical Supply Disruption; Water and Electricity Supply Failure; Ransomware; Personal Data Breach; Care Records System Failure; Emergency Alarm and Nurse Call Failure** | **Data Protection Lead; Facilities Manager; Head of Nursing and Care; Human Resources Lead; Infection Control Lead; Information Technology Lead; Safety and Security Officer** |
| **3–6 months** | **15** | **Flash Flood; Severe Storm and Strong Winds; Lightning Strike; Haze; Gas Leak; Bomb Threat; Road Closure and Major Traffic Incident; Loss of Key Personnel; High Staff Turnover and Skills Shortage; Workplace Violence; Mandatory Quarantine of Staff; Critical Supplier Failure; Telecommunications Failure; Network and Internet Failure; Lift and Critical Equipment Failure** | **Facilities Manager; Finance and Procurement Lead; Head of Nursing and Care; Human Resources Lead; Information Technology Lead; Safety and Security Officer** |
| **6–12 months** | **5** | **Distant Earthquake Tremors; Structural Failure; Terrorism Incident Nearby; Outsourced Service Provider Failure; Banking and Payment System Disruption** | **Facilities Manager; Finance and Procurement Lead; Safety and Security Officer** |

- Start with the 10 threats scheduled in the first three months, of which 8 are currently rated High.
- Track every action with a named owner, a due date and evidence of completion.
- Test controls through exercises, record the results, and update the ratings only when evidence supports it.
- Report progress to senior management quarterly, and review acceptance decisions annually.

## [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/64d16cdc-b532-47f6-af61-7b33f5b500a3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/64d16cdc-b532-47f6-af61-7b33f5b500a3)

## Conclusion

The strategies in this chapter show how JHA could reduce its exposure in an organised and proportionate way, with the greatest effort directed to the 9 threats that are currently rated High. The target ratings are aspirations rather than achievements, and no mitigation should be treated as in place until it has been implemented, tested and evidenced. Together, the six chapters of this eBook give the home a documented set of objectives, services, threats, controls, ratings, and strategies to continue its BCM implementation. Reviewing the strategy after incidents, exercises, and changes keeps it current.

**Next step:** turn this plan into capability. To develop the skills to implement and audit a business continuity programme, explore the certification options at [https://blog.bcm-institute.org/certification](https://blog.bcm-institute.org/certification).

---

## **Comments**

![CTA Banner\_OR](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_OR.jpg "CTA Banner_OR")

---

![CTA Banner\_ORA](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_ORA.jpg "CTA Banner_ORA")

---

![CTA Banner\_BCM](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_BCM.jpg "CTA Banner_BCM")

---

![CTA Banner\_ITDR](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_ITDR.jpg "CTA Banner_ITDR")

---

![CTA Banner\_CM](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_CM.jpg "CTA Banner_CM")

![BCMIWhiteLogoSmall.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogoSmall.png?width=72&name=BCMIWhiteLogoSmall.png "BCMIWhiteLogoSmall.png")

All rights reserved. Copyright 2026

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Moh Heng Goh",
    "url" : "https://blog.bcm-institute.org/bcm-v2/author/moh-heng-goh"
  },
  "dateModified" : "2026-11-06T08:39:15.315Z",
  "datePublished" : "2026-11-06T08:39:15.000Z",
  "headline" : "[BCM] [JHA] [E3] [CORE] [C6] Mitigation Strategies for Jamiyah Home for the Aged",
  "mainEntityOfPage" : {
    "@id" : "https://blog.bcm-institute.org/bcm-v2/bcm-jha-e3-core-chapter-6-mitigation-strategies-for-jamiyah-home-for-the-aged",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
    },
    "name" : "BCMI Pte Ltd"
  }
}
```