[BCM] [Boost] [E3] [RAR] [T1] List of Threats

 Notes for BCM Institute's Course Participants: This is the template for completing the "Part 1: RAR – List of Threats." 

Part 1: RAR – List of Threats

Introduction

As a fully digital bank operating across Malaysia, Boost Bank Malaysia must proactively identify and assess a comprehensive range of threats that could disrupt its operations.

Part 1 of this Risk Assessment and Review (RAR) outlines the various internal and external threats that could adversely affect the bank’s ability to deliver services, protect customer data, and maintain regulatory compliance.

Given Boost Bank’s dependence on technology infrastructure, third-party service providers, and its nationwide digital presence, the threats covered include both traditional and emerging risks.

These threats are categorised into five main areas: Denial of Access – Natural Disaster, Denial of Access – Man-made Disaster, Unavailability of People, Disruption to the Supply Chain, and Equipment and IT-Related Disruption.

This section provides a detailed breakdown of threat types within each category, offering clear descriptions and analyses of their potential impact at both the national (Malaysia) and organisational (Boost Bank) levels.

The goal is to establish a risk-informed foundation for resilience planning and business continuity strategies that align with the bank’s operational environment and regulatory obligations.

The table of potential threats to Boost Bank Malaysia, based on BCMpedia’s RAR 1‑1 framework.

It maps each Category of Threats to specific Types of Threats, with descriptions and relevance at both the national (Malaysia) and organisational (Boost Bank) levels.

 Table R1: List of Threats 

Notes & Insights

• Floods, haze, power outages, and cyber threats are especially relevant at both the national level (common in Malaysia) and the organisational level (inhibiting operations or staff safety).
• Terrorism, bombs, urban fires or extreme weather are less frequent but high-impact risks that deserve preparedness planning.
• Emerging digital threats such as cyberattacks, cloud failures, and telecom outages are crucial to a digital bank’s resilience.

Understanding and categorising threats is a critical first step in Boost Bank Malaysia’s business continuity planning process. The threats identified in this section highlight the diverse risks posed by natural disasters, human-made incidents, staff unavailability, supply chain vulnerabilities, and technological disruptions.

As a digital-first financial institution, Boost Bank must remain vigilant against both conventional and digital-era risks, such as floods and cyberattacks.

This risk profile serves as a foundation for conducting a Business Impact Analysis (BIA), designing appropriate recovery strategies, and ensuring timely incident responses.

By maintaining an up-to-date and realistic view of the threat landscape, Boost Bank can enhance its preparedness, minimise service disruption, and uphold customer trust and regulatory compliance in the face of adversity.

.

Safeguarding Digital Finance: Boost Bank's Approach to Business Continuity Management
eBook 3: Starting Your BCM Implementation
MBCO	P&S	RAR T1	RAR T2	RAR T3	BCS T1	CBF
CBF 1: Customer Transactions and Payment Processing
DP	BIAQ T1	BIAQ T2	BIAQ T3	BCS T2	BCS T3	PD

More Information About Business Continuity Management Courses

To learn more about the course and schedule, click the buttons below for the  BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].

 

	Please feel free to send us a note if you have any questions.