The objective of this assessment is to prioritise risks systematically, ensuring that the most severe and probable threats are identified and managed effectively. This structured approach enables the Children’s Aid Society to focus on areas of greatest vulnerability, ensuring continuity of care for its beneficiaries and compliance with statutory and social obligations.
|
Threat |
Impact Area - Finance |
Impact Area - Operations |
Impact Area - Legal & Regulatory |
Impact Area - Reputation & Image |
Impact Area - Social Responsibility |
Impact Area - People |
Impact Area - Assets/ IT Systems/ Information |
Risk Impact Area (Highest Numeric Score) |
Risk Likelihood |
Risk Rating |
Risk Level |
Expected Period of Disruption |
|
Fire at Residential Facilities |
High |
Severe disruption to residential care |
Breach of fire safety regulations |
Significant reputational damage |
Major setback in fulfilling child welfare responsibilities |
High injury/fatality risk |
Loss of records & IT damage |
Operations (5) |
Medium |
15 |
High |
Weeks to Months |
|
Pandemic / Infectious Disease Outbreak |
High (medical costs, additional resources) |
Severe disruption to care & schooling |
Health & safety compliance issues |
Public concern & loss of trust |
Inability to provide safe care |
High illness/fatality risk |
Limited IT impact, except remote access strain |
People (5) |
High |
20 |
Extreme |
Months |
|
Cybersecurity Breach (Data Theft) |
Medium |
Moderate impact on operations |
Breach of PDPA and child protection laws |
Loss of public and donor confidence |
Trust deficit in safeguarding children’s information |
Indirect stress to staff & residents |
High risk to IT & confidential data |
Assets/IT (5) |
Medium |
15 |
High |
Weeks |
|
Funding Cuts / Financial Instability |
Severe |
Reduced programs & staff |
Breach of financial obligations |
Negative media & donor concerns |
Impaired ability to support children |
Job insecurity |
Limited IT impact |
Finance (5) |
Medium |
15 |
High |
Months |
|
Staff Shortages / High Turnover |
Medium |
Service delivery disruption |
Breach of care ratio compliance |
Community concern |
Reduced capacity to serve beneficiaries |
High stress on remaining staff |
Minimal IT impact |
Operations (4) |
High |
20 |
Extreme |
Weeks to Months |
|
Natural Disaster (Flood, Storm) |
High (property damage) |
Severe facility disruption |
Possible breach of building codes |
Reputational concerns |
Children’s safety compromised |
High injury/displacement risk |
Damage to IT infrastructure |
Operations (5) |
Low |
10 |
Medium |
Weeks |
|
Legal / Regulatory Non-Compliance |
Medium |
Administrative burden |
Fines, penalties, or closure risk |
Reputational harm |
Perceived lack of accountability |
Staff stress |
Limited IT impact |
Legal & Regulatory (4) |
Medium |
12 |
Medium |
Weeks |
|
Security Breach / Intruder Incident |
Medium |
Disruption to safety & care |
Legal consequences if harm occurs |
Loss of community trust |
Perception of unsafe environment |
High trauma risk |
Minor IT impact |
People (5) |
Low |
10 |
Medium |
Days to Weeks |
The assessment reveals that the Children’s Aid Society faces a spectrum of risks ranging from operational disruptions (fire, natural disasters, staff shortages) to compliance and reputational threats (cybersecurity, regulatory breaches). Among these, pandemics and staff shortages are assessed as Extreme risks due to their high likelihood and critical impact on people and operations. Risks such as funding instability, cybersecurity breaches, and fire hazards are rated High, requiring robust treatment strategies to mitigate long-term consequences.
By mapping risks against their impact and likelihood, the organisation gains clarity on prioritisation, ensuring resources are allocated effectively to areas where disruptions could be most damaging. This risk-based approach strengthens the resilience of the Children’s Aid Society, safeguarding its mission to provide a safe, nurturing, and supportive environment for children in need.
Resilience in Service: BCM Implementation for Children’s Aid Society |
||||||
| eBook 3: Starting Your BCM Implementation |
||||||
| MBCO | P&S | RAR T1 | RAR T2 | RAR T3 | BCS T1 | CBF |
| CBF 1: Residential Care Operations |
||||||
| DP | BIAQ T1 | BIAQ T2 | BIAQ T3 | BCS T2 | BCS T3 | PD |
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].
|
Please feel free to send us a note if you have any questions. |
||