---
title: [OR] [MAS] [E2] [C5] Business Continuity and Crisis Management Integration
description: [OR] [MAS] [E2] [C5] Business Continuity and Crisis Management Integration
image: https://blog.bcm-institute.org/hubfs/MAS%20Graphic%20Folder/MAS%20E2%20Morepost/%5BOR%5D%20%5BMAS%5D%20%5BE2%5D%20%5BC5%5D%20Business%20Continuity%20and%20Crisis%20Management%20Integration.jpg
---

. .

[![BCMIWhiteLogo.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogo.png?width=556&name=BCMIWhiteLogo.png "BCMIWhiteLogo.png")](http://www.bcm-institute.org/)

- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/) 
    - [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
    - [Our History](https://www.bcm-institute.org/about-us/our-history/)
    - [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
    - [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
    - [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog) 
    - [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
    - [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
    - [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
    - [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
    - [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
    - [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
    - [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered) 
    - [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
    - [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
    - [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
    - [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
    - [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
    - [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
    - [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)

- <https://www.facebook.com/BCMInstitute/>
- <https://www.linkedin.com/company/business-continuity-management-institute-bcm-institute>

###### Achieving Operational Resilience in Singapore’s Financial Sector: A Practical Guide to MAS Compliance and Implementation

![BB OR \[D\] 6](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/OR%20Pictures%20A/BB%20OR%20Folder%20D/BB%20OR%20%5BD%5D%206.jpg?width=2000&height=1333&name=BB%20OR%20%5BD%5D%206.jpg "BB OR [D] 6")

# \[OR\] \[MAS\] \[E2\] \[C5\] Business Continuity and Crisis Management Integration

[![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/23a20024-f0ef-49c9-b977-9368b9e21491.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/23a20024-f0ef-49c9-b977-9368b9e21491)

This chapter examines the **governance and accountability structures** required to support operational resilience in Singapore’s financial institutions, guided by expectations from the Monetary Authority of Singapore (MAS).

Operational resilience is not merely a technical or operational function—it is fundamentally a **leadership and governance responsibility**. MAS emphasises that effective resilience depends on **clear accountability, strong oversight, and well-defined roles across the organisation**.

This chapter covers:

- The role of the **Board and Senior Management**
- The application of the **Three Lines of Defence model**
- Risk ownership and accountability structures
- MAS regulatory expectations on governance and oversight

[![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/af4e7abf-3775-4632-811f-7d71e11f8bca.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/af4e7abf-3775-4632-811f-7d71e11f8bca)

[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Apr 28, 2026

###### Operational Resilience Certified Planner-Specialist-Expert

### [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/97502c2e-fa28-4958-9771-0b307990443a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/97502c2e-fa28-4958-9771-0b307990443a)

### eBook 2: Chapter 5

###  Business Continuity and Crisis Management Integration

#### **Introduction**

Operational resilience requires organisations to move beyond standalone  [![\[OR\] \[MAS\] \[E2\] \[C7\] Business Continuity and Crisis Management Integration](https://no-cache.hubspot.com/cta/default/3893111/097ab46a-648b-44c3-b0f6-105f78983bb5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/097ab46a-648b-44c3-b0f6-105f78983bb5) Business Continuity Management (BCM) and Crisis Management (CM) frameworks and instead **integrate them into a unified response capability**. The Monetary Authority of Singapore emphasises that financial institutions must be able not only to recover from disruptions, but to **respond effectively, escalate appropriately, and maintain service continuity throughout the disruption lifecycle**.

This chapter explains how **Incident Management, Crisis Management, and Business Continuity** form a seamless, integrated lifecycle that supports operational resilience. It focuses on:

- The **Incident → Crisis → Recovery lifecycle**
- **Crisis governance and escalation structures**
- **Communication frameworks** that enable coordinated response

 

#### **The Incident → Crisis → Recovery Lifecycle**

A resilient organisation must manage disruptions through a structured lifecycle that ensures timely response and effective recovery.

##### **Incident Management – Tactical Response**

An **incident** is any event that disrupts or threatens operations, such as system failures, cyberattacks, or process breakdowns.

Incident management focuses on:

- **Detection and identification of events**
- **Initial containment and mitigation**
- **Rapid restoration of normal operations**

Effective incident management requires:

- Clearly defined response teams
- Predefined procedures and playbooks
- Real-time monitoring and escalation triggers

Without structured incident management, disruptions can escalate rapidly and affect critical services.

Outcome: **Stabilisation of the situation at an operational level**

##### **Crisis Management – Strategic Response**

A **crisis** occurs when an incident escalates beyond operational control and threatens:

- Critical Business Services (CBS)
- Customers or stakeholders
- The organisation’s reputation or financial stability

Crisis management involves:

- **Strategic decision-making by senior leadership**
- **Coordination across business units**
- **External stakeholder engagement (regulators, media, customers)**

MAS guidelines highlight the need for:

- Defined **roles and responsibilities**
- Structured **escalation procedures**
- Clear **command and control mechanisms**

Outcome: **Containment of impact and protection of organisational and systemic interests**

##### **Business Continuity and Recovery – Service Restoration**

Business Continuity Management ensures that **critical services continue or are restored within acceptable thresholds**.

Key objectives:

- Maintain delivery of CBS within **impact tolerance**
- Execute **recovery strategies** (alternate sites, redundancy, manual workarounds)
- Restore full operations in a controlled manner

MAS emphasises that financial institutions must:

- Resume critical services **promptly after disruption**
- Ensure continuity plans are **tested and effective**

Outcome: **Sustained or restored service delivery**

##### **Integrated Lifecycle View**

The three components must function as a **single, coordinated lifecycle**:

 

| Phase | Focus | Ownership |
| --- | --- | --- |
| Incident | Detection and containment | Operational teams |
| Crisis | Strategic coordination | Senior management |
| Recovery | Service restoration | BCM and business units |

Integration ensures:

- Smooth transition between phases
- No gaps in response
- Alignment with operational resilience objectives

 

#### **Crisis Governance and Escalation**

Effective crisis response depends on **clear governance structures and escalation mechanisms**.

##### **Crisis Governance Structure**

MAS expects financial institutions to establish:

- **Crisis Management Team (CMT)**
- **Incident Management Team (IMT)**
- **Business Continuity Teams**

Governance must define:

- Roles and responsibilities
- Decision-making authority
- Reporting lines

Strong governance ensures **rapid, coordinated response across the organisation**

##### **Escalation Framework**

An escalation framework defines:

- **When an incident becomes a crisis**
- **Who must be notified**
- **What actions must be taken**

Key elements include:

- **Escalation triggers**
- **Escalation levels**
- **Decision thresholds**

MAS emphasises that institutions must have:

- **Clear escalation procedures**
- **Timely reporting to senior management and regulators**

##### **Regulatory and External Engagement**

During crises, organisations must:

- Notify regulators such as the Monetary Authority of Singapore
- Coordinate with:

Timely escalation and reporting are critical to maintaining **system-wide stability**.

 

#### **Communication Frameworks**

Communication is a critical success factor in managing incidents and crises.

##### **Internal Communication**

Internal communication ensures alignment across teams.

Key components:

- **Situation reporting (SITREP)**
- **Real-time updates**
- **Command centre coordination**

Objectives:

- Ensure all stakeholders have a **common operating picture**
- Enable **informed decision-making**

##### **External Communication**

External communication manages stakeholder expectations and trust.

Key stakeholders:

- Customers
- Regulators
- Media
- Partners and vendors

Key principles:

- **Timeliness** – communicate early and regularly
- **Accuracy** – provide verified information
- **Consistency** – ensure unified messaging

##### **Crisis Communication Strategy**

An effective crisis communication framework includes:

- **Pre-approved communication templates**
- **Designated spokespersons**
- **Media handling protocols**
- **Customer notification mechanisms**

MAS expects institutions to establish:

- Clear **communication protocols**
- Defined **responsibilities for stakeholder engagement**

 

#### **Integration with Operational Resilience**

##### **Supporting Critical Business Services**

Integrated BCM and CM frameworks ensure that:

- Disruptions are **detected and contained early**
- Escalation occurs **before impact exceeds tolerance**
- Recovery actions prioritise **critical services**

##### **Alignment with Scenario Testing**

Integrated response capabilities must be validated through:

- **Scenario testing**
- **Crisis simulation exercises**
- **End-to-end CBS testing**

Testing ensures:

- Governance structures are effective
- Communication flows are efficient
- Escalation thresholds are appropriate

##### **Continuous Improvement**

Post-incident and post-exercise reviews should:

- Identify gaps in:

- Governance
- Escalation
- Communication
- Update:

MAS emphasises continuous improvement through:

- **Lessons learned processes**
- **Regular review and enhancement of frameworks**

 

#### **Key Challenges**

Organisations often face:

- **Fragmentation between incident, crisis, and BCM teams**
- **Delayed escalation due to unclear thresholds**
- **Ineffective communication during crises**
- **Lack of coordination with third parties**
- **Insufficient testing of integrated response**

 

#### **Key Success Factors**

To achieve effective integration:

- Establish **clear governance and accountability**
- Define **well-structured escalation frameworks**
- Implement **robust communication protocols**
- Conduct **regular integrated exercises**
- Align response capabilities with **CBS and impact tolerance**

 

**[![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/5404effa-ac11-44ba-a782-31a19cc7ef69.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5404effa-ac11-44ba-a782-31a19cc7ef69)**

The integration of Business Continuity Management and Crisis Management is essential for achieving operational resilience.

By aligning **incident response, crisis governance, and recovery capabilities**, organisations can ensure that disruptions are managed effectively from detection through recovery.

Guided by the expectations of the Monetary Authority of Singapore, financial institutions must build **cohesive, well-governed, and communication-driven response frameworks** that:

- Enable rapid detection and escalation
- Support effective decision-making during crises
- Ensure continuity of Critical Business Services

Ultimately, resilience is demonstrated not by avoiding disruptions, but by the organisation’s ability to **respond, adapt, and sustain operations seamlessly across the entire Incident → Crisis → Recovery lifecycle**.

 

 

[![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/d09e7f6d-fff9-4f07-9537-51e4ac8189d8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d09e7f6d-fff9-4f07-9537-51e4ac8189d8)

| **eBook 1** | **C1** | **C2** | **C3** | **C4** | **C5** |
| --- | --- | --- | --- | --- | --- |
| [![\[OR\] \[MAS\] \[E1\] ebook Cover](https://no-cache.hubspot.com/cta/default/3893111/727b3faf-7a0f-4839-a05e-ba6681ad3b49.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/727b3faf-7a0f-4839-a05e-ba6681ad3b49) | [![\[OR\] \[MAS\] \[E2\] \[C1\] Operational Resilience Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/06bae8e4-3f57-43a8-ab4d-154c91c8dd92.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/06bae8e4-3f57-43a8-ab4d-154c91c8dd92) | [![\[OR\] \[MAS\] \[E2\] \[C2\] Identifying Critical Business Services (CBS)](https://no-cache.hubspot.com/cta/default/3893111/58eeaec5-b393-4a0a-9f3e-e349eb5375f7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/58eeaec5-b393-4a0a-9f3e-e349eb5375f7) | [![\[OR\] \[MAS\] \[E2\] \[C3\] Mapping Dependencies and Interconnections](https://no-cache.hubspot.com/cta/default/3893111/6a2725b8-a928-4726-a249-2207a01557c5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6a2725b8-a928-4726-a249-2207a01557c5) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/20b5f50c-4818-484d-b90e-b42e00527163.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/20b5f50c-4818-484d-b90e-b42e00527163) | [![\[OR\] \[MAS\] \[E2\] \[C7\] Business Continuity and Crisis Management Integration](https://no-cache.hubspot.com/cta/default/3893111/097ab46a-648b-44c3-b0f6-105f78983bb5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/097ab46a-648b-44c3-b0f6-105f78983bb5) |
|  **eBook 1**  | **C6** | **C7** | **C8** | **C9** | **C10** |
|  [![\[OR\] \[MAS\] \[E2\] ebook Cover](https://no-cache.hubspot.com/cta/default/3893111/29bf59e4-024e-4ce8-9af2-7d831cefaf6b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/29bf59e4-024e-4ce8-9af2-7d831cefaf6b)  |  [![\[OR\] \[MAS\] \[E2\] \[C8\] Technology and Cyber Resilience](https://no-cache.hubspot.com/cta/default/3893111/b8d4c094-f2b8-489e-939c-b6f2f66f3cd9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b8d4c094-f2b8-489e-939c-b6f2f66f3cd9)  |  [![\[OR\] \[MAS\] \[E2\] \[C9\] Third-Party Risk Management (TPRM)](https://no-cache.hubspot.com/cta/default/3893111/976e1c6d-9adb-4342-af1c-79978500ec45.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/976e1c6d-9adb-4342-af1c-79978500ec45)  |  [![\[OR\] \[MAS\] \[E2\] \[C10\] Challenges in Implementation](https://no-cache.hubspot.com/cta/default/3893111/eacd1df5-a9b7-4b7a-85b0-3d925e4ea8cc.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/eacd1df5-a9b7-4b7a-85b0-3d925e4ea8cc)  | [![\[OR\] \[MAS\] \[E2\] \[C11\] Case Study – Singapore Financial Institution](https://no-cache.hubspot.com/cta/default/3893111/870cb2bb-36ac-4ecf-9f20-bd31f2b2c67b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/870cb2bb-36ac-4ecf-9f20-bd31f2b2c67b) | [![\[OR\] \[MAS\] \[E2\] \[C12\] Key Takeaways](https://no-cache.hubspot.com/cta/default/3893111/0738f681-d810-42f9-9e89-6978c31be8e6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0738f681-d810-42f9-9e89-6978c31be8e6) |

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

 

#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

| [![BL-OR-3 Register Now](https://no-cache.hubspot.com/cta/default/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [![BL-OR-3_Tell Me More](https://no-cache.hubspot.com/cta/default/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [![BL-OR-3_View Schedule](https://no-cache.hubspot.com/cta/default/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [![BL-OR-5_Register Now](https://no-cache.hubspot.com/cta/default/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [![BL-OR-5_Tell Me More](https://no-cache.hubspot.com/cta/default/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [![FAQ BL-OR-5 OR-5000](https://no-cache.hubspot.com/cta/default/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [![OR Implementer Landing Page](https://no-cache.hubspot.com/cta/default/3893111/74b1e556-8cd2-4a74-8821-db1804534955.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |

 

#### **Comments:**

 

![CTA Banner_OR](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_OR.jpg "CTA Banner_OR")

---

![CTA Banner_ORA](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_ORA.jpg "CTA Banner_ORA")

---

![CTA Banner_BCM](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_BCM.jpg "CTA Banner_BCM")

---

![CTA Banner_ITDR](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_ITDR.jpg "CTA Banner_ITDR")

---

![CTA Banner_CM](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_CM.jpg "CTA Banner_CM")

![BCMIWhiteLogoSmall.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogoSmall.png?width=72&name=BCMIWhiteLogoSmall.png "BCMIWhiteLogoSmall.png")

All rights reserved. Copyright 2026

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Moh Heng Goh",
    "url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
  },
  "dateModified" : "2026-04-30T09:40:45.042Z",
  "datePublished" : "2026-04-28T09:36:42.000Z",
  "headline" : "[OR] [MAS] [E2] [C5] Business Continuity and Crisis Management Integration",
  "mainEntityOfPage" : {
    "@id" : "https://blog.bcm-institute.org/ebook-or/or-mas-e2-c5-business-continuity-and-crisis-management-integration",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
    },
    "name" : "BCMI Pte Ltd"
  }
}
```