[OR] [BCPC] [C9] Case Studies and Regional Insights

Chapter 9

Case Studies and Regional Insights

Introduction

Malaysia and the broader ASEAN region provide rich, real-world insights into how organisational culture shapes Business Continuity Management (BCM) outcomes.

Over the past decade—particularly through the COVID-19 pandemic, large-scale technology disruptions, and supply chain shocks—organisations have been tested not just on their plans, but on their ability to execute under pressure.

This chapter presents selected case-based insights across financial institutions, government-linked organisations, and regional disruption events.

The focus is not on naming specific institutions, but on identifying patterns of success and failure, and more importantly, the cultural turning points that transformed organisational resilience.

Purpose of the Chapter

The purpose of this chapter is to:

• Provide practical, regionally relevant examples of BCM performance
• Highlight cultural strengths and weaknesses observed during disruptions
• Extract key lessons learned from real-world scenarios
• Identify cultural turning points that enabled organisations to improve resilience

By the end of this chapter, readers will gain actionable insights into how culture influences outcomes in real disruptions.

Financial Institutions: Resilience Under Regulatory Pressure

Financial institutions in Malaysia operate within a highly regulated environment, with increasing emphasis on operational resilience driven by Bank Negara Malaysia (BNM).

These institutions provide critical services where disruptions can have a systemic impact.

Case Insight: Digital Banking Disruption

A Malaysian financial institution experienced a major disruption to its digital banking platform, affecting customer access for several hours.

What Worked

• Rapid activation of incident response teams
• Clear communication to customers via multiple channels
• Strong IT recovery capability

What Failed

• Delays in decision-making at senior levels
• Lack of coordination between business and technology teams
• Inconsistent internal communication

Cultural Observations

• Strong technical capability but weak cross-functional alignment
• Decision-making heavily centralised, causing delays
• Limited empowerment at operational levels

Cultural Turning Point

Following the incident, the organisation:

• Introduced cross-functional crisis simulations
• Decentralised decision-making authority
• Embedded resilience into leadership KPIs

This marked a shift from technology-driven BCM to behaviour-driven resilience.

Government-Linked Organisations (GLCs): Balancing Scale and Complexity

Government-linked organisations (GLCs) in Malaysia often operate large, complex infrastructures and deliver essential public services. Their resilience is critical not only for business continuity but also for national stability.

Case Insight: Nationwide Service Disruption

A large GLC faced a disruption impacting multiple service channels due to a systems integration failure.

What Worked

• Strong governance framework and escalation structure
• Availability of documented recovery plans
• Commitment from senior leadership

What Failed

• Slow execution despite clear plans
• Limited familiarity with procedures at operational levels
• Communication bottlenecks across departments

Cultural Observations

• High reliance on formal processes and approvals
• Risk-averse culture leading to delayed action
• Silos between departments are limiting coordination

Cultural Turning Point

Post-incident, the organisation:

• Shifted focus from documentation to execution capability
• Introduced regular, high-pressure scenario testing
• Empowered middle management to act independently

The transformation moved the organisation from a bureaucratic response to agile coordination.

Regional Disruption: The COVID-19 Pandemic

The COVID-19 pandemic was a defining moment for organisations across ASEAN. It tested not only business continuity plans but also organisational adaptability and culture.

Case Insight: Workforce Disruption and Remote Operations

Many organisations were forced to transition rapidly to remote working environments.

What Worked

• Pre-existing digital infrastructure enabled continuity
• Strong leadership communication reassured employees
• Flexible policies supported workforce adaptation

What Failed

• Inadequate preparedness for prolonged disruptions
• Gaps in remote work processes and controls
• Employee fatigue and reduced engagement over time

Cultural Observations

• Organisations with adaptive cultures transitioned more smoothly
• Those reliant on rigid processes struggled to adjust
• Trust and empowerment became critical success factors

Cultural Turning Point

The pandemic forced organisations to:

• Embrace flexible working models
• Trust employees to operate independently
• Redefine resilience beyond physical infrastructure

This marked a shift from control-based management to a trust-based culture.

Regional Disruption: Supply Chain Shocks

Global supply chain disruptions—driven by geopolitical tensions, logistics constraints, and pandemic-related impacts—have affected many ASEAN organisations.

Case Insight: Manufacturing and Logistics Disruption

A regional organisation experienced delays in critical components due to supplier disruptions.

What Worked

• Existing supplier diversification strategies
• Strong relationships with key vendors
• Quick identification of alternative sources

What Failed

• Overreliance on a limited number of suppliers
• Lack of visibility into upstream dependencies
• Slow internal coordination across procurement and operations

Cultural Observations

• Reactive rather than proactive risk management
• Limited integration between procurement and BCM teams
• Insufficient emphasis on third-party resilience

Cultural Turning Point

The organisation responded by:

• Embedding third-party risk management into BCM
• Strengthening cross-functional collaboration
• Promoting proactive risk identification

This led to a shift from cost-focused procurement to resilience-focused sourcing.

Key Lessons Learned

Across these case studies, several consistent lessons emerge:

9.5.1 What Worked

• Strong leadership engagement during crises
• Clear and timely communication across stakeholders
• Pre-existing capability in critical areas (e.g., IT, digital infrastructure)
• Collaborative culture enabling cross-functional coordination

9.5.2 What Failed

• Overreliance on documented plans without real execution capability
• Delayed decision-making due to hierarchical structures
• Lack of ownership at operational levels
• Poor integration across functions and teams

Cultural Turning Points: From Failure to Transformation

A key insight from these examples is that disruptions often act as catalysts for cultural change.

Common cultural turning points include:

From Centralised Control to Empowered Decision-Making

• Delegating authority to frontline teams
• Enabling faster and more effective responses

From Siloed Functions to Integrated Collaboration

• Breaking down barriers between departments
• Promoting shared accountability

From Compliance to Capability

• Shifting focus from documentation to execution
• Emphasising real-world performance

From Reactive to Proactive Mindset

• Anticipating risks rather than responding to them
• Embedding resilience into daily operations

From Technology-Centric to People-Centric Resilience

• Recognising the role of behaviour and decision-making
• Investing in training and cultural development

Regional Insights for ASEAN Organisations

The Malaysian and ASEAN context highlights several broader insights:

• Regulatory expectations are evolving, with increased focus on operational resilience
• Interconnected risks require integrated responses, not siloed solutions
• Cultural alignment is a key differentiator between successful and unsuccessful organisations
• Resilience is becoming a competitive advantage, not just a compliance requirement

The experiences of organisations across Malaysia and ASEAN demonstrate that resilience is not defined by the existence of plans, but by the ability to execute under pressure. While frameworks and technologies are essential, it is culture that ultimately determines outcomes.

Case studies across financial institutions, government-linked organisations, and regional disruptions reveal a consistent pattern: failures are rarely due to missing plans—they are due to cultural gaps. Conversely, successful responses are driven by strong leadership, empowered teams, and collaborative behaviours.

Perhaps most importantly,  disruptions often serve as turning points, forcing organisations to rethink their approach and strengthen their culture. Those who embrace these moments as opportunities for transformation emerge stronger and more resilient.

As organisations continue to navigate an increasingly complex risk landscape, the lessons from Malaysia and ASEAN underscore a critical truth:

Culture is not just part of resilience—it is what makes resilience possible.

 

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.