[BCM] [GRA] [E3] [RAR] [T1] List of Threats

Category of Threats

Types of Threats

Description of Threats

Country Level Impact

Organisation Level Impact

Denial of Access – Natural Disaster

Flood

Severe flooding is affecting transportation networks, buildings, utilities, and access routes.

Localised disruption to transportation and public services.

Employees unable to access GRA offices and regulatory facilities.

Pandemic / Infectious Disease Outbreak

Widespread illness affecting workforce availability and public movement.

National public health emergency affecting the government and private sectors.

Reduced workforce availability and increased remote working requirements.

Severe Haze Incident

Regional haze is causing poor air quality and health concerns.

Reduced outdoor activities and public health impacts.

Staff absenteeism and restricted workplace operations.

Extreme Weather Event

Severe storms, lightning, and heavy rainfall are affecting infrastructure.

Disruption to transportation and utilities.

Temporary closure of facilities and disruption of operations.

Earthquake in Regional Countries

Regional seismic events affecting infrastructure and telecommunications.

Supply chain and telecommunications disruptions.

Disruption to cloud services, telecommunications, and vendor support.

Fire

Fire affecting office buildings or critical facilities.

Localised impact.

Evacuation, facility closure, and operational disruption.

Terrorist Incident

Attack targeting public infrastructure or government facilities.

National security impact and public disruption.

Restricted access to premises and activation of crisis management procedures.

Civil Disturbance

Public disorder affecting transportation and public safety.

Localised disruption to public services.

Employees are unable to access the workplace safely.

Building Structural Failure

Structural defects render facilities unsafe.

Limited external impact.

Relocation of staff and disruption of operations.

Hazardous Material Incident

Chemical spill or contamination affecting the surrounding area.

Emergency response activation.

Temporary closure of premises and evacuation.

Unavailability of People

Pandemic-Related Staff Absenteeism

A significant portion of the workforce is unavailable due to illness.

National workforce shortages.

Inability to perform critical regulatory functions.

Loss of Key Personnel

Sudden departure, illness, or incapacity of critical staff.

Minimal national impact.

Loss of specialised regulatory knowledge and leadership.

Industrial Action

Labour disputes affecting service providers or contractors.

Potential sector-wide impact.

Disruption to outsourced services supporting GRA operations.

Travel Restrictions

Restrictions affecting the movement of personnel.

National or international travel disruption.

Inability to attend meetings, inspections, or conferences.

Mass Casualty Incident

Significant event affecting employees or stakeholders.

Major public safety impact.

Reduced workforce capacity and emotional distress.

Disruption to the Supply Chain

Telecommunications Provider Failure

Failure of telecommunications infrastructure.

National communications disruption.

Loss of connectivity to systems and stakeholders.

Cloud Service Provider Outage

Failure of cloud-hosted platforms and services.

Multiple organisations affected.

Loss of access to critical regulatory applications and data.

Power Supply Failure

An extended electricity outage is affecting facilities and infrastructure.

Widespread operational disruption.

Inability to operate offices and technology systems.

Vendor Failure

Critical supplier unable to provide products or services.

Industry-specific impact.

Disruption to technology, facilities, or outsourced functions.

Data Centre Outage

Failure of primary or secondary hosting facilities.

Multiple organisations affected.

Loss of access to critical regulatory systems.

Cyberattack on Service Provider

Service provider compromised by a cyber threat.

Sector-wide impact possible.

Indirect disruption to GRA operations and services.

Equipment and IT-Related Disruption

Cyberattack / Ransomware

Malicious attack encrypting or disabling systems.

Widespread cyber risk across sectors.

Loss of critical regulatory systems and sensitive data.

Data Breach

Unauthorised access to confidential information.

Public trust and regulatory implications.

Exposure of regulatory information and reputational damage.

Network Failure

Failure of internal or external network infrastructure.

Limited national impact.

Loss of communication and access to applications.

Hardware Failure

Failure of servers, storage devices, or network equipment.

Minimal national impact.

Interruption of business processes and services.

Software Failure

Application malfunction or corruption.

Limited impact.

Disruption to licensing, monitoring, and enforcement activities.

Database Corruption

Loss or corruption of critical regulatory data.

Limited external impact.

Loss of operational information and recovery challenges.

Insider Threat

Deliberate or accidental actions by authorised personnel.

Minimal national impact.

Data compromise, fraud, or service disruption.

Artificial Intelligence (AI)-Enabled Threats

Use of AI to conduct fraud, phishing, impersonation, or cyberattacks.

Increasing national cyber threat landscape.

Manipulation of systems, misinformation, and security breaches.

Distributed Denial of Service (DDoS) Attack

Flooding systems with traffic to make services unavailable.

Public-facing service disruption.

Inaccessibility of regulatory portals and online services.

Failure of Regulatory Information Systems

Outage affecting licensing, compliance, investigation, or intelligence systems.

Limited external impact.

Inability to perform core regulatory functions.