[BCM] [KKH] [E3] [RAR] [P1] List of Threats

Category of Threats

Types of Threats

Description of Threat

Country-Level Relevance

Organisation-Level Relevance

Denial of Access – Natural Disaster

Flash Flood

Intense rainfall causes localised flooding that restricts access to hospital entrances, roads and transport routes.

Occasionally encountered due to Singapore's tropical climate and intense rainfall events.

Delays staff reporting, ambulance arrivals, patient access and supplier deliveries.

Severe Storm / Thunderstorm

Heavy rain, strong winds and lightning disrupt transport, utilities and outdoor operations.

Common seasonal weather event.

May interrupt access, damage external infrastructure and affect emergency operations.

Lightning Strike

Direct or nearby strikes damage electrical infrastructure or communication systems.

Common in Singapore due to high lightning density.

May affect power systems, ICT infrastructure and medical equipment.

Extreme Heat

Prolonged high temperatures affect facilities, equipment and workforce wellbeing.

Emerging concern due to climate change.

Increased cooling demand, equipment stress and staff fatigue.

Haze

Regional transboundary haze reduces air quality and visibility.

Occasional regional occurrence.

Increased respiratory cases, staff health concerns and possible reduction in outdoor activities.

Pandemic Movement Restrictions

Public health restrictions limit travel and workforce mobility.

Credible based on recent global experience.

Reduces staffing availability and affects suppliers, contractors and patient access.

Earthquake (Regional Effects)

Distant regional earthquakes cause tremors affecting infrastructure.

Low historical occurrence but credible due to regional seismic activity.

May require precautionary inspections and temporary suspension of clinical activities.

Denial of Access – Man-made Disaster

Fire

Fire within or adjacent to hospital premises requires evacuation or closure of affected areas.

Common risk for large facilities.

Disrupts patient care, operating theatres, wards and essential support services.

Explosion

Explosion involving utilities, medical gases or nearby facilities.

Low occurrence but credible.

Causes immediate evacuation, infrastructure damage and clinical disruption.

Chemical Spill

Hazardous material release within or near the hospital.

Occasional due to industrial transport and healthcare operations.

May contaminate facilities and require isolation of affected areas.

Medical Gas Leak

Leakage of oxygen or other medical gases affecting patient care areas.

Credible within healthcare environments.

Directly affects critical care, operating theatres and emergency services.

Structural Failure

Failure of building components requiring closure of clinical areas.

Low historical occurrence.

Interrupts healthcare delivery and necessitates relocation of services.

Bomb Threat

Threat requiring precautionary evacuation and security response.

Credible although infrequent.

Disrupts patient care and emergency operations.

Terrorism

Deliberate attack targeting public infrastructure or healthcare facilities.

Low occurrence but remains a national security consideration.

Could affect patients, staff, infrastructure and public confidence.

Active Assailant

Violent individual entering hospital premises.

Credible but infrequent.

Immediate threat to life requiring emergency lockdown and response.

Public Transport Disruption

Failure of MRT or bus services affecting workforce mobility.

Occasionally encountered.

Delays staff reporting and shift changes.

Major Traffic Incident

Major road accident blocks access routes.

Common in urban environments.

Delays emergency vehicles, patients, suppliers and staff.

Unavailability of People

Pandemic

Widespread infectious disease affecting workforce availability.

Established national planning scenario.

Reduces availability of clinicians and support personnel.

Infectious Disease Outbreak

Local outbreak affecting healthcare workers or patients.

Recurring healthcare risk.

Increased absenteeism and surge in patient demand.

Mass Illness

Simultaneous illness affecting multiple employees.

Credible in healthcare settings.

Reduces staffing below safe operating levels.

Loss of Key Personnel

Sudden absence of critical specialists or leaders.

Occasional organisational risk.

Delays clinical decisions and continuity of specialised services.

Skills Shortage

Insufficient specialist clinicians or technical staff.

Emerging challenge in healthcare sector.

Limits delivery of highly specialised services such as NICU and emergency obstetrics.

Staff Fatigue

Extended emergency operations result in physical and mental exhaustion.

Common during prolonged incidents.

Increases likelihood of clinical errors and reduced productivity.

Psychological Stress

Traumatic events affect workforce wellbeing.

Increasing area of concern across healthcare.

Impacts decision-making, retention and operational effectiveness.

Mandatory Quarantine

Staff isolated following exposure to infectious diseases.

Credible under public health legislation.

Rapid reduction in available workforce.

Family Emergencies

Employees unavailable due to personal or family crises.

Common organisational occurrence.

Reduces staffing flexibility during incidents.

Disruption to the Supply Chain

Supplier Failure

Critical supplier unable to fulfil contractual obligations.

Credible across all sectors.

Interrupts supply of medicines, consumables or equipment.

Cloud Service Provider Failure

Failure of hosted healthcare platforms.

Emerging concern due to cloud adoption.

Impacts clinical applications and business systems.

Telecommunications Failure

Loss of external telecommunications services.

Occasional infrastructure disruption.

Interrupts voice, internet and remote connectivity.

Utility Failure

External disruption to electricity, water or gas supplies.

Credible although national infrastructure is resilient.

Directly affects clinical operations and patient safety.

Logistics Disruption

Transport delays affecting medical deliveries.

Common during regional disruptions.

Delays essential supplies and pharmaceuticals.

Fuel Supply Disruption

Reduced availability of transport fuel.

Low occurrence but credible.

Affects emergency transport and backup generators.

Vendor Insolvency

Key supplier ceases operations.

Occasional commercial risk.

Interrupts maintenance, support and equipment availability.

Third-Party Cyber Incident

Supplier experiences cyber attack affecting services delivered to KKH.

Increasing concern globally.

May interrupt outsourced ICT or healthcare support services.

Single Source Dependency

Essential product available from only one supplier.

Common within specialised healthcare procurement.

Increases operational vulnerability during supply disruption.

Regulatory Import Restrictions

Controls affecting import of medicines or medical devices.

Credible during global crises.

May reduce availability of specialised clinical supplies.

Equipment and IT-Related Disruption

Cyber Attack

Malicious attack targeting hospital ICT infrastructure.

Increasing concern across Singapore's critical sectors.

Interrupts clinical systems and hospital operations.

Ransomware

Malware encrypts systems and data, preventing access.

Significant threat to healthcare organisations globally.

Loss of access to EMR, laboratory and imaging systems.

Malware Infection

Malicious software compromises endpoints or servers.

Common cybersecurity threat.

Degrades system performance and compromises clinical operations.

Distributed Denial of Service (DDoS)

External traffic overwhelms internet-facing systems.

Credible for public-facing services.

Disrupts patient portals and online services.

Insider Threat

Authorised user intentionally or accidentally compromises systems or information.

Increasing organisational concern.

Data loss, service disruption or regulatory non-compliance.

Data Breach

Unauthorised disclosure of sensitive health information.

Significant concern due to digital healthcare.

Impacts patient confidentiality, trust and legal obligations.

Network Failure

Failure of hospital network infrastructure.

Occasional technical risk.

Prevents access to clinical systems across departments.

Server Failure

Failure of critical application servers.

Credible within any ICT environment.

Interrupts multiple clinical and business applications.

Database Corruption

Corruption of patient or operational databases.

Low occurrence but high operational significance.

Loss of critical clinical information affecting patient care.

Cloud Service Outage

Hosted services become temporarily unavailable.

Emerging technology dependency.

Interrupts cloud-based collaboration and healthcare applications.

Power Failure

Electrical interruption affecting ICT and medical equipment.

Credible despite resilient national infrastructure.

Requires backup power to sustain critical healthcare services.

Hardware Failure

Failure of medical devices or ICT equipment.

Common operational issue.

Interrupts diagnostics, monitoring or communications.

Software Failure

Application malfunction or upgrade failure.

Common technology risk.

Affects clinical workflows and patient management.

Backup Failure

Data backup cannot be restored successfully.

Credible technology risk.

Compromises disaster recovery and business continuity.

Data Centre Failure

Failure of primary data centre infrastructure.

Low historical occurrence but credible.

Interrupts multiple enterprise applications simultaneously.

Identity and Access Management Failure

Authentication services unavailable or compromised.

Increasing dependency in digital environments.

Prevents authorised staff from accessing critical clinical systems.

Artificial Intelligence System Failure

Failure or incorrect output from AI-assisted diagnostic or decision-support tools.

Emerging risk as AI adoption increases.

May delay clinical decision-making and require manual validation processes.