---
title: "[CM] [JHA] [E3] [PB] [2] [C3] Before Crisis Steps in Detail: Crisis Management Playbook to Manage Lone Wolf / Intruder Attack for Jamiyah Home for the Aged"
description: Detailed breakdown of each before crisis action for an intruder attack at Jamiyah Home for the Aged, with owners, time targets, steps and common mistakes.
---
.
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Crisis Management in Action: A Practical Implementation Guide for Jamiyah Home for the Aged
# \[CM\] \[JHA\] \[E3\] \[PB\] \[2\] \[C3\] Before Crisis Steps in Detail: Crisis Management Playbook to Manage Lone Wolf / Intruder Attack for Jamiyah Home for the Aged
*[![\[CM\] \[JHA\] \[Full Banner\] \[Haze\] A Practical Implementation Guide for Jamiyah Home for the Aged](https://no-cache.hubspot.com/cta/default/3893111/bdc00ed8-f19a-4103-a408-1d726db0e452.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/bdc00ed8-f19a-4103-a408-1d726db0e452)*
Read this chapter with Table CMP-B5 in Chapter 2. The action numbers are the same, from B-01 to B-13. All roles, thresholds, time targets, and contacts in this chapter are illustrative and must be validated by JHA before the playbook is adopted.
[![\[Logo\] \[CM\] Certification Transparent](https://no-cache.hubspot.com/cta/default/3893111/93e4d869-8de4-4ffd-8aad-33538c5ce0ee.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/93e4d869-8de4-4ffd-8aad-33538c5ce0ee)
[Dr Goh Moh Heng](https://blog.bcm-institute.org/cm-v2/author/dr-goh-moh-heng) Nov 13, 2026
## Introduction
Chapter 2 gave the Before Crisis action list for Jamiyah Home for the Aged (JHA). This chapter breaks each of the 13 actions down in detail, so that every owner knows why the action matters, what steps to take, what evidence to keep and which mistakes to avoid.
*[![\[CM\] \[JHA\] \[Full Banner\] \[Haze\] A Practical Implementation Guide for Jamiyah Home for the Aged](https://no-cache.hubspot.com/cta/default/3893111/bdc00ed8-f19a-4103-a408-1d726db0e452.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/bdc00ed8-f19a-4103-a408-1d726db0e452)*
[![\[CM\] \[E3\] \[C1\] Starting Your CM Implementation Banner](https://no-cache.hubspot.com/cta/default/3893111/1bf08c12-b11b-44cc-a7a5-3bd25c740d4c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1bf08c12-b11b-44cc-a7a5-3bd25c740d4c)
[![\[CM\] \[JHA\] \[E3\] \[PB\] \[2\] Before Crisis in Detail](https://no-cache.hubspot.com/cta/default/3893111/436eeb52-06c6-47d5-a8a3-851ffddcdd16.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/436eeb52-06c6-47d5-a8a3-851ffddcdd16)Read this chapter with Table CMP-B5 in Chapter 2. The action numbers are the same, from B-01 to B-13. All roles, thresholds, time targets, and contacts in this chapter are illustrative and must be validated by JHA before the playbook is adopted.
## How to use this chapter
Each action has a heading, a line giving the owner, time target and output, a short explanation of its purpose, numbered steps and a note on what to watch out for. The steps are illustrative and should be adapted to the layout, staffing and resident profile of the Home.
The two key considerations from Chapter 1 apply to every action: protect all persons first, and never provoke the intruder. When two actions compete for time or money, the one that protects life or avoids provocation comes first.
## Implementation sequence
Some actions depend on others. The risk assessment (B-03) feeds the access, alert, shelter and protocol actions, and the approval and team actions (B-01 and B-02) come first. Table CMP-BD1 shows a suggested sequence in three waves.
**Table CMP-BD1: Suggested implementation sequence for the Before Crisis actions**
| Wave | Actions | Focus |
| --- | --- | --- |
| **Wave 1: first 60 days** | **B-01, B-02** | **Approval, governance and a trained Crisis Management Team (CMT)** |
| **Wave 2: first 90 days** | **B-03, B-08, B-09, B-10** | **Risk assessment, external links, messages and legal readiness** |
| **Wave 3: days 90 to 150** | **B-04, B-05, B-06, B-07, B-11, B-12** | **Controls, alerts, shelter plans, protocols, wellbeing safeguards and funding** |
| **Continuing** | **B-13** | **Drills twice a year and a yearly readiness review** |
## Detailed actions
### B-01: Approve the playbook and confirm governance
**Owner:** Crisis Management Team Leader. **Time target:** Within 30 days of adoption. **Output:** Signed approval and a version-controlled playbook.
A playbook with no sponsor is not used. Approval by the Managing Agent gives the CMT authority to act fast, including the authority to call the Police without asking first.
1. Present the playbook and its two key considerations to Managing Agent leadership for approval.
2. Record the standing authority of any staff member to raise the alarm and call 999.
3. Set the review cycle: annually, and after every drill, incident or change of premises.
*Watch out for:* Treating approval as a one-off signature; unreviewed plans drift out of date within a year.
### B-02: Appoint and train the Crisis Management Team
**Owner:** Deputy Crisis Management Team Leader. **Time target:** Within 60 days of approval. **Output:** Named roster with alternates and contact tree.
An intrusion can happen at night or on a weekend. Every role needs a named alternate so command never waits for one person.
1. Name a primary and an alternate for each of the ten roles, including night and weekend cover.
2. Hold an induction that walks each person through their roles in Chapters 4 and 5.
3. Test the contact tree by phone twice a year and fix any numbers that fail.
*Watch out for:* Listing job titles without named people, so nobody knows who is really in charge at 2 a.m.
### B-03: Assess intruder risk and vulnerabilities
**Owner:** Security and Safety Lead. **Time target:** Within 90 days, then yearly. **Output:** Risk register and site vulnerability report.
The Home is open around the clock and welcomes visitors, so risk must be understood in the light of who may wish it harm and why.
1. Walk the site from the entrance to the rear and list points where an unauthorised person could enter or loiter unseen.
2. Review the four motivation types: extremist cause, mental episode, perceived unfair treatment and revenge.
3. Rate each risk, assign an owner and a treatment date, and feed the results into B-04 to B-07.
*Watch out for:* Focusing only on terrorism and overlooking the more likely motivations of grievance and mental distress.
### B-04: Strengthen access control and visitor management
**Owner:** Facilities and IT Lead. **Time target:** Within 120 days of risk assessment. **Output:** Access control procedure and visitor log.
Early detection is the cheapest defence. The site asks visitors to write to the Superintendent before visiting, and that discipline should be matched at the door.
1. Confirm every visitor is expected, signed in, identified and issued a badge; keep unplanned entrances locked.
2. Check closed-circuit television (CCTV) coverage, lighting and door hardware, and set a retention period agreed with Legal and Compliance.
3. Brief front-desk staff to greet and observe calmly, and to report unease without challenging anyone.
*Watch out for:* Heavy-handed checks that make visitors and families feel unwelcome and discourage reporting.
### B-05: Install alert and communication means
**Owner:** Facilities and IT Lead. **Time target:** Within 120 days of risk assessment. **Output:** Tested alarm, code word and phone tree.
Staff must be able to warn everyone quickly without the intruder noticing. A quiet signal protects the principle of not alarming the attacker.
1. Fit discreet alarms or panic points where staff work, and test them monthly.
2. Agree a short code word that means 'intruder, shelter now', known to all staff and never used in drills for anything else.
3. Keep a charged mobile phone and a printed contact sheet at each nursing station.
*Watch out for:* A loud siren that panics frail residents or provokes an attacker.
### B-06: Define shelter and lockdown zones and resident plans
**Owner:** Resident Care Lead. **Time target:** Within 120 days of risk assessment. **Output:** Zone map and individual resident movement plans.
Many residents cannot run. The Home therefore plans to hide and protect rather than to evacuate, and moves residents only when this is safe.
1. Mark rooms and areas that can be locked from inside and are away from entrances.
2. Record for each resident how they move, any dementia or hearing needs and who helps them shelter.
3. Plan how bedridden and wheelchair residents are secured in place and kept quiet and calm.
*Watch out for:* Plans that assume every resident can walk, hurry or stay silent on request.
### B-07: Prepare staff response protocols
**Owner:** Security and Safety Lead. **Time target:** Within 150 days of risk assessment. **Output:** One-page protocols and staff pocket cards.
The key rule is not to provoke or challenge the intruder. Staff need simple, memorable steps that adapt Run, Hide, Tell to a care setting.
1. Write short instructions for the first person who sees the intruder: observe, alert quietly, call 999.
2. Teach calm, low-voice communication and a non-threatening posture, and say clearly that no one should confront or restrain the intruder.
3. Include Press, Tie, Tell first aid and how to describe the person and location to the Police.
*Watch out for:* Teaching heroics. Staff who tackle an attacker put every resident at greater risk.
### B-08: Establish links with external partners
**Owner:** Crisis Coordinator. **Time target:** Within 90 days, then yearly. **Output:** Partner contact directory and shared site pack.
Help from outside is only as fast as its knowledge of the Home. Early introductions shorten the Police response and avoid confusion on arrival.
1. Meet the local Police post and Singapore Civil Defence Force (SCDF) and share floor plans, entrances and key-holder details.
2. Register an SGSecure representative and agree contact points with the Managing Agent and Ministry of Social and Family Development (MSF).
3. Identify counselling and medical partners who can support residents and staff after an incident.
*Watch out for:* Leaving the first meeting with the Police until the day of an emergency.
### B-09: Prepare communications
**Owner:** Communications Lead. **Time target:** Within 90 days of approval. **Output:** Holding statements, scripts and approved spokespersons.
Families and the public will want facts within minutes, and rumours spread quickly. Pre-approved messages protect residents' dignity and the Home's credibility.
1. Draft holding statements for staff, families, MSF and the media, for the three severity levels.
2. Name one spokesperson and one alternate, and train them for sensitive, short statements.
3. Agree a social media approach that avoids sharing unverified images or details.
*Watch out for:* Publishing details that help the intruder or identify victims before families are told.
### B-10: Prepare legal, compliance and data readiness
**Owner:** Legal and Compliance Lead. **Time target:** Within 90 days of approval. **Output:** Reporting checklist and evidence preservation procedure.
After an incident, the Home must report quickly and accurately and must protect footage and personal data. Preparing the checklist now saves hours later.
1. List what MSF expects to be reported under the licence conditions and Codes of Practice, and how fast.
2. Prepare the Personal Data Protection Act breach assessment steps, including the three-calendar-day rule for the Personal Data Protection Commission (PDPC).
3. Set up evidence preservation for CCTV, logs and visitor records, and clarify rules on reasonable force.
*Watch out for:* Assuming reporting times without checking the current licence conditions.
### B-11: Build early warning and staff wellbeing safeguards
**Owner:** HR and Staff Welfare Lead. **Time target:** Within 120 days of approval. **Output:** Grievance, exit and concern-reporting procedures.
Some attackers are former staff, relatives or others with a perceived grievance, or are in mental distress. Fair handling and early support lower the chance of an incident.
1. Review how dismissals, complaints and disputes with families are handled, so decisions are fair, documented and explained.
2. Create a confidential channel for staff to raise concerns about threats or behaviour.
3. Arrange access to counselling and a plan for managing contact with people who have been asked to leave.
*Watch out for:* Treating threats as 'just words'. Report every credible threat to the Crisis Management Team Leader.
### B-12: Secure budget, insurance and recovery resources
**Owner:** Finance and Administration Lead. **Time target:** Within 150 days of approval. **Output:** Funded plan, insurance review and emergency purchase approval.
Security upgrades, drills and recovery cost money. Response slows when no one can approve spending or knows what the policy covers.
1. Cost the actions from B-04 to B-07 and ask the Managing Agent to fund them.
2. Review insurance for injury, property damage, loss of income and counselling costs.
3. Set an emergency spending limit for the Crisis Management Team Leader and the procedure for urgent purchases.
*Watch out for:* Discovering after an incident that a key cost is not covered.
### B-13: Train, drill and test, then review readiness
**Owner:** Crisis Coordinator. **Time target:** Drills twice a year; readiness review yearly. **Output:** Exercise reports and readiness checklist.
Only people who have rehearsed will act calmly when it matters. Drills should be gentle and scripted for residents, and more demanding for staff and the CMT.
1. Run a tabletop exercise for the CMT and a code-word walk-through for all shifts, including nights.
2. Run a small live drill with the Police agreed beforehand; never stage anything that could alarm residents or neighbours.
3. Score the readiness checklist and report gaps to the Crisis Management Team Leader with owners and dates.
*Watch out for:* Realistic-looking drills held without warning, which frighten residents and neighbours.
## Common themes across the actions
Three themes run through the Before Crisis actions.
- **Simplicity.** Protocols that fit on a pocket card are used; long manuals are not.
- **Dignity.** Security measures should respect residents, visitors, and staff, and should not make the Home feel unsafe.
- **Evidence.** Each action produces something that can be checked, such as a signed approval, a test record or an exercise report.
The Crisis Coordinator tracks progress against Table CMP-B5 and reports to the Crisis Management Team Leader every quarter. Actions that fall behind are escalated to the Managing Agent.
## [![\[CM\] \[E3\] \[Summing Up\] Introduction to Crisis Management Playbook](https://no-cache.hubspot.com/cta/default/3893111/cef2aa74-66d4-4c52-9382-0626b894e2f3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/cef2aa74-66d4-4c52-9382-0626b894e2f3)
## Conclusion
The 13 Before Crisis actions give the Home a team, controls, messages and practised habits. None of them alone prevents an attack, but together they make an intruder less likely to succeed and make every response faster and safer.
Chapter 4 moves to the period during a crisis, with the response phases and the action list that the CMT follows when an intruder is present.
To build these skills for your own organisation, explore the programmes at [https://blog.bcm-institute.org/certification](https://blog.bcm-institute.org/certification).
## **Comments**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Dr Goh Moh Heng",
"url" : "https://blog.bcm-institute.org/cm-v2/author/dr-goh-moh-heng"
},
"dateModified" : "2026-11-13T02:54:04.088Z",
"datePublished" : "2026-11-13T02:54:04.000Z",
"headline" : "[CM] [JHA] [E3] [PB] [2] [C3] Before Crisis Steps in Detail: Crisis Management Playbook to Manage Lone Wolf / Intruder Attack for Jamiyah Home for the Aged",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/cm-v2/cm-jha-e3-pb-2-c3-before-crisis-steps-in-detail-crisis-management-playbook-to-manage-lone-wolf-/-intruder-attack-for-jamiyah-home-for-the-aged",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```