---
title: "[BCM] [JHA] [E3] [CORE] [C3] List of Threats for Jamiyah Home for the Aged"
description: A register of 30 threats to Jamiyah Home for the Aged across five categories, with country-level and organisation-level relevance for a 24-hour welfare home.
---
.
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Sustaining Community Services: Implementing BCM at Jamiyah Home for the Aged
# \[BCM\] \[JHA\] \[E3\] \[CORE\] \[C3\] List of Threats for Jamiyah Home for the Aged
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/1ce18ee1-97ef-4ed4-b16b-5d6ab24cec19)
A threat is a potential source of disruption. A vulnerability is a weakness that allows the threat to cause harm, and a risk combines the threat, the vulnerability, and the consequence. Identifying threats before evaluating risks keeps the assessment disciplined: the home first asks what could go wrong, then how likely each event is and how much it would matter. This chapter is part of the Risk Assessment Report (RAR) and identifies potential sources of disruption only. Later chapters assess likelihood, impact, and risk treatment.
The register considers internal and external threats, and it describes each threat twice: first at country level, to show how common it is in Singapore, and then at organisation level, to show how it could affect a welfare home that operates around the clock for destitute, elderly and frail residents from the Tampines Avenue 3 site. Together, these views help Business Impact Analysis (BIA), Business Continuity Strategy (BCS), and crisis management focus on credible scenarios. The register includes 30 threats across five categories and uses the Critical Business Function (CBF) list from the previous chapters.
Some organisation-level statements rest on assumptions, because the home's website does not describe every operating detail, such as meals, medication, staffing levels or systems. These statements use the word could and illustrate credible scenarios; the Superintendent must validate them. They cover physical, people, supply and information technology (IT) threats alike.
[![\[Logo\] \[BCM\] Certification Transparent](https://no-cache.hubspot.com/cta/default/3893111/7789ece9-0b11-4cae-9f32-d34d7eb1688a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7789ece9-0b11-4cae-9f32-d34d7eb1688a)
[Moh Heng Goh](https://blog.bcm-institute.org/bcm-v2/author/moh-heng-goh) Nov 6, 2026
A continuity programme can only protect what it understands, and it can only prepare for threats it has named. This chapter identifies the realistic threats that could disrupt the Critical Business Functions of Jamiyah Home for the Aged (JHA) and records them in a Threat Register that the remaining chapters will analyse.
## [](https://cta-redirect.hubspot.com/cta/redirect/3893111/1ce18ee1-97ef-4ed4-b16b-5d6ab24cec19)
## [](https://cta-redirect.hubspot.com/cta/redirect/3893111/dc612b43-f678-4d9a-888e-8dced9d1b72b)
## Introduction
[![\[BCM\] \[JHA\] \[E3\] \[RAR\] \[T1\] List of Threats](https://no-cache.hubspot.com/cta/default/3893111/fc386d5d-7cb4-4758-9b4a-fa11bf195a3e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fc386d5d-7cb4-4758-9b4a-fa11bf195a3e)A threat is a potential source of disruption. A vulnerability is a weakness that allows the threat to cause harm, and a risk is the combination of the threat, the vulnerability and the consequence. Identifying threats before evaluating risks keeps the assessment disciplined: the home first asks what could go wrong, then asks how likely each event is and how much it would matter. This chapter is part of the Risk Assessment Report (RAR) and identifies potential sources of disruption only. Later chapters assess likelihood, impact, and risk treatment.
The register considers internal and external threats, and it describes each threat twice: first at country level, to show how common it is in Singapore, and then at organisation level, to show how it could affect a welfare home that operates around the clock for destitute, elderly and frail residents from the Tampines Avenue 3 site. Together, these views help Business Impact Analysis (BIA), Business Continuity Strategy (BCS), and crisis management focus on credible scenarios. The register contains 30 threats in five categories, and it uses the Critical Business Function (CBF) list from the previous chapters.
Some organisation-level statements rest on assumptions, because the home's website does not describe every operating detail, such as meals, medication, staffing levels or systems. These statements use the word could and illustrate credible scenarios; the Superintendent must validate them. They cover physical, people, supply and information technology (IT) threats alike.
## Threat Register
| **Category of Threats** | **Types of Threats** | **Description of Threat** | **Country-Level Relevance** | **Organisation-Level Relevance** |
| --- | --- | --- | --- | --- |
| **Denial of Access – Natural Disaster** | **Flash Flood** | **Intense short-duration rainfall overwhelms local drainage and causes water to pond around the home, its approaches and low-lying service areas.** | **Occasional. Heavy convective rainfall can cause localised flash floods, although national drainage improvements have reduced their extent.** | **Water on the approaches to the Tampines Avenue 3 site could delay staff, deliveries and ambulances, and could reach ground-level service and storage areas.** |
| **Denial of Access – Natural Disaster** | **Severe Storm and Strong Winds** | **Thunderstorms and squalls bring strong gusts, falling branches and debris, and sudden loss of visibility.** | **Commonly encountered, particularly during monsoon transition periods.** | **Debris and wind could damage external structures and trees on site, interrupt outdoor resident activities and delay staff commuting.** |
| **Denial of Access – Natural Disaster** | **Lightning Strike** | **Direct or nearby lightning strikes damage electrical installations or cause power surges through building cabling.** | **Commonly encountered. Singapore records frequent thunderstorm and lightning activity.** | **A strike could damage electrical, alarm and communications equipment and cause brief loss of power in a facility that operates around the clock.** |
| **Denial of Access – Natural Disaster** | **Extreme Heat** | **Prolonged high temperatures and humidity raise indoor and outdoor heat stress.** | **Increasing concern. Rising temperatures make periods of exceptional heat more frequent.** | **Elderly and frail residents are more vulnerable to heat stress and dehydration, and cooling shortfalls would affect residential areas and outdoor programmes such as the brisk walking programme.** |
| **Denial of Access – Natural Disaster** | **Haze** | **Transboundary smoke from regional vegetation fires degrades air quality for days or weeks.** | **Occasional. Episodes linked to regional fires have affected Singapore in some years and are tracked through national air-quality advisories.** | **Poor air quality could aggravate respiratory conditions among residents and staff and restrict outdoor activities and outings.** |
| **Denial of Access – Natural Disaster** | **Distant Earthquake Tremors** | **Tremors from distant regional earthquakes are felt in buildings, particularly on higher floors.** | **Low historical occurrence of damage. Tremors from regional earthquakes are felt occasionally, but damaging ground motion is not a feature of the national hazard profile.** | **Tremors could cause resident anxiety, brief evacuation decisions and precautionary structural checks.** |
| **Denial of Access – Man-made Disaster** | **Fire** | **Fire starts from electrical faults, cooking, smoking materials or equipment and spreads through the building, producing smoke and heat.** | **Occasional. Residential and institutional fires occur each year despite stringent fire-safety regulation.** | **A fire could force evacuation of residents with limited mobility, damage premises and records, and deny access to the building for an extended period.** |
| **Denial of Access – Man-made Disaster** | **Gas Leak** | **Release of gas from kitchen equipment, supply pipework or adjacent premises creates a risk of fire, explosion or asphyxiation.** | **Occasional. Incidents are infrequent but credible in urban areas that use piped and bottled gas.** | **A leak could require partial or full evacuation, shutdown of kitchen areas and exclusion of residents from affected zones.** |
| **Denial of Access – Man-made Disaster** | **Structural Failure** | **Failure of structural elements, façade, ceilings or building services because of age, defects or water ingress.** | **Low historical occurrence given strict building regulation, but credible for ageing buildings.** | **The home has operated from its present purpose-built site since 1997; ageing fabric could lead to localised closure or relocation of residents.** |
| **Denial of Access – Man-made Disaster** | **Bomb Threat** | **A credible or hoax threat that a device has been placed at or near the premises.** | **Occasional. Hoax threats occur; credible incidents are rare.** | **A threat could trigger evacuation of frail residents, police response and extended closure of affected areas, even when the threat proves false.** |
| **Denial of Access – Man-made Disaster** | **Terrorism Incident Nearby** | **A terrorist attack or related security alert occurs in the surrounding area or on the transport network.** | **Credible but infrequent. Singapore maintains a high security posture against a persistent regional threat.** | **Cordons, movement restrictions and heightened alerts could isolate the home, delay staff and suppliers and cause distress to residents.** |
| **Denial of Access – Man-made Disaster** | **Road Closure and Major Traffic Incident** | **Road closures, accidents or works restrict vehicle access along the routes serving the home.** | **Commonly encountered as localised closures and accidents; network-wide disruption is occasional.** | **Staff shift changes, food and medical deliveries, ambulance access and resident outings could be delayed.** |
| **Unavailability of People** | **Infectious Disease Outbreak** | **An outbreak of communicable illness, for example respiratory or gastrointestinal, spreads among residents, staff or visitors.** | **Commonly encountered at seasonal levels. The national experience of a pandemic has raised sensitivity to outbreaks in residential care settings.** | **Communal living, frailty and shared spaces increase the chance of rapid spread, with possible isolation measures, restricted visits and reduced staff availability.** |
| **Unavailability of People** | **Mass Staff Illness** | **A large share of staff is unavailable at the same time because of illness, food-borne illness or an outbreak.** | **Occasional. Seasonal illness is common; larger clusters are less frequent.** | **Round-the-clock care rosters depend on enough trained staff on every shift; simultaneous absences could reduce supervision and care capacity.** |
| **Unavailability of People** | **Loss of Key Personnel** | **Sudden departure, incapacity or unavailability of individuals with unique responsibility or knowledge, such as senior managers, the Superintendent or lead care staff.** | **Commonly encountered in a tight labour market for care professionals.** | **Decisions, authorisations and resident-specific knowledge may rest with a few people, which could delay incident response and regulatory reporting.** |
| **Unavailability of People** | **High Staff Turnover and Skills Shortage** | **Sustained attrition and difficulty recruiting care, nursing and support staff leave posts unfilled or filled by less experienced personnel.** | **Increasing concern. The ageing population and demand for eldercare workers continue to outpace local supply.** | **Staffing gaps could degrade supervision and personal care, increase fatigue and reliance on overtime or agency staff and weaken continuity know-how.** |
| **Unavailability of People** | **Workplace Violence** | **Physical or verbal aggression towards staff, residents or visitors by a resident, visitor or intruder.** | **Occasional. Workplace violence is recognised in healthcare and social-care settings.** | **Residents with behavioural or mental-health needs and open visiting could expose staff and other residents to injury, and cause areas to be temporarily closed.** |
| **Unavailability of People** | **Mandatory Quarantine of Staff** | **Health authorities or the employer require staff to isolate after exposure to a notifiable disease.** | **Occasional. Quarantine and isolation orders have been used during public-health events.** | **Exposed care staff could be removed from rosters at short notice, reducing coverage even when no outbreak has occurred in the home.** |
| **Disruption to the Supply Chain** | **Critical Supplier Failure** | **A supplier of food, consumables or care supplies fails to deliver because of insolvency, capacity loss or an incident at its own premises.** | **Occasional. Supplier failures occur, particularly among small firms and during commodity shocks.** | **The home is assumed to rely on external suppliers for essential consumables such as food and care supplies; this dependency requires confirmation.** |
| **Disruption to the Supply Chain** | **Outsourced Service Provider Failure** | **An outsourced provider, for example for cleaning, laundry, security or maintenance, fails to perform or withdraws.** | **Occasional. The outsourcing market is mature but sensitive to manpower shortages.** | **Cleanliness, laundry and security standards underpin infection control and resident safety; loss of a provider could degrade conditions quickly.** |
| **Disruption to the Supply Chain** | **Medication and Medical Supply Disruption** | **Interruption to the supply of prescribed medication, dressings or medical consumables from pharmacies or healthcare institutions.** | **Occasional. Supply is generally robust, but shortages of specific items have occurred globally.** | **Residents with chronic conditions depend on timely medication; a supply or collection disruption could affect health outcomes.** |
| **Disruption to the Supply Chain** | **Telecommunications Failure** | **Failure of fixed, mobile or data network services from the provider.** | **Occasional. Major outages are rare; localised faults are more common.** | **Loss of telephone and data links could affect emergency calls, contact with families, partner agencies and the managing agent, and access to online systems.** |
| **Disruption to the Supply Chain** | **Water and Electricity Supply Failure** | **Interruption of mains electricity or water supply to the premises through network faults, maintenance or damage to infrastructure.** | **Low historical occurrence of prolonged outages; short interruptions occur.** | **A home operating 24 hours depends on continuous power and water for lifts, cooling, kitchens, hygiene and assistive equipment.** |
| **Disruption to the Supply Chain** | **Banking and Payment System Disruption** | **Failure of banking or electronic payment services used for salaries, suppliers and resident-related transactions.** | **Low historical occurrence of major failures; occasional service outages.** | **Delays in paying staff, suppliers or utilities could erode supplier confidence and staff morale and affect resident funds handling.** |
| **Equipment and IT-Related Disruption** | **Ransomware** | **Malicious software encrypts or locks systems and data and demands payment, often with theft of data.** | **Increasing concern. Ransomware affects organisations of all sizes, including healthcare and charities.** | **Care records, rosters, finance and email could become unavailable, forcing manual operation and possible exposure of sensitive resident data.** |
| **Equipment and IT-Related Disruption** | **Personal Data Breach** | **Unauthorised access, loss or disclosure of personal data about residents, staff and donors.** | **Increasing concern. The Personal Data Protection Act 2012 imposes protection and notification obligations.** | **Resident records are highly sensitive; a breach could expose vulnerable individuals and trigger regulatory, charity-governance and public-trust consequences.** |
| **Equipment and IT-Related Disruption** | **Network and Internet Failure** | **Failure of the internal network or the internet connection used by office and care systems.** | **Occasional. Services are mature, but local faults occur.** | **Staff could lose access to email, online records and communication tools, slowing documentation and coordination.** |
| **Equipment and IT-Related Disruption** | **Care Records System Failure** | **Outage, corruption or loss of the application or database holding resident records, care plans, medication charts and assessments.** | **Occasional. Software failures and data corruption occur across sectors.** | **The home may hold resident information in electronic or hybrid form, which is to be confirmed; loss of access could affect shift handover, medication checks and incident reporting.** |
| **Equipment and IT-Related Disruption** | **Emergency Alarm and Nurse Call Failure** | **Failure of resident call bells, fall alarms, fire alarm panels or emergency communication devices.** | **Occasional. Equipment faults are routine and depend on maintenance regimes.** | **Residents who cannot summon help are at risk, and staff may be unaware of emergencies in rooms or bathrooms, particularly at night.** |
| **Equipment and IT-Related Disruption** | **Lift and Critical Equipment Failure** | **Breakdown of lifts, hoists, generators, cooling or kitchen equipment critical to daily operation.** | **Commonly encountered. Equipment faults are routine and repair times depend on parts and contractors.** | **Failure of lifts or mobility equipment could cut residents with limited mobility off from other floors or areas, hamper evacuation and increase manual-handling risk for staff.** |
## Coverage check
The following table confirms that the register covers each area that a welfare home depends on. Where a threat affects several areas, the table shows it against the area of its primary consequence. For this purpose, customers or stakeholders are the residents, their families and the community that supports the home.
| **Area of dependency** | **Threats that primarily affect it** |
| --- | --- |
| **People** | **Infectious Disease Outbreak; Mass Staff Illness; Loss of Key Personnel; High Staff Turnover and Skills Shortage; Workplace Violence; Mandatory Quarantine of Staff** |
| **Premises** | **Flash Flood; Fire; Gas Leak; Structural Failure** |
| **Technology** | **Ransomware; Network and Internet Failure; Care Records System Failure** |
| **Information** | **Personal Data Breach; Care Records System Failure** |
| **Communications** | **Telecommunications Failure; Network and Internet Failure** |
| **Suppliers** | **Critical Supplier Failure; Outsourced Service Provider Failure; Medication and Medical Supply Disruption** |
| **Utilities** | **Lightning Strike; Water and Electricity Supply Failure** |
| **Transportation** | **Road Closure and Major Traffic Incident** |
| **Third Parties** | **Critical Supplier Failure; Outsourced Service Provider Failure; Medication and Medical Supply Disruption** |
| **Regulators** | **Infectious Disease Outbreak; Personal Data Breach** |
| **Customers or Stakeholders** | **Extreme Heat; Haze** |
| **Reputation** | **Bomb Threat; Personal Data Breach** |
| **Governance** | **Loss of Key Personnel; Outsourced Service Provider Failure** |
| **Financial Operations** | **Critical Supplier Failure; Banking and Payment System Disruption** |
| **Cybersecurity** | **Ransomware; Personal Data Breach** |
| **Physical Security** | **Bomb Threat; Terrorism Incident Nearby; Workplace Violence** |
The register contains 6 threats in Denial of Access – Natural Disaster, 6 threats in Denial of Access – Man-made Disaster, 6 threats in Unavailability of People, 6 threats in Disruption to the Supply Chain and 6 threats in Equipment and IT-Related Disruption. Traditional threats, such as fire and flash floods, sit alongside technological threats, such as ransomware and personal data breaches, and emerging threats, such as extreme heat, workforce shortages, and supplier dependency.
## [](https://cta-redirect.hubspot.com/cta/redirect/3893111/64d16cdc-b532-47f6-af61-7b33f5b500a3)
## Conclusion
A well-kept Threat Register is the foundation of Business Continuity Management (BCM). It converts the general sense that things can go wrong into a specific list that can be assessed, assigned to owners and tested through exercises. These 30 threats become inputs to the BIA and the risk assessment in the chapters that follow, where their likelihood, impact, and treatment will be examined. Because the operating environment changes, review the register at least annually and after significant incidents, with attention to emerging threats such as climate events, cyber risks, workforce shortages, and supplier concentration. Identifying threats is the first step in protecting JHA's critical services, and the subsequent assessment will evaluate the likelihood, impact, and treatment of each one.
**Next step:** ask your Superintendent and function owners to challenge this register, add threats they have experienced, and then continue to Chapter 4, Treatment and Control for Jamiyah Home for the Aged.
---
## **Comments**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/bcm-v2/author/moh-heng-goh"
},
"dateModified" : "2026-11-06T07:00:17.665Z",
"datePublished" : "2026-11-06T06:05:26.000Z",
"headline" : "[BCM] [JHA] [E3] [CORE] [C3] List of Threats for Jamiyah Home for the Aged",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/bcm-v2/chapter-3-list-of-threats-for-jamiyah-home-for-the-aged",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```