---
title: [CM] [BDCB] [E2] [C1] Implementing CM Planning Methodology
description: [CM] [BDCB] [E2] [C1] Implementing CM Planning Methodology
image: https://blog.bcm-institute.org/hubfs/BDCB%20Graphic%20Folder/BDCB%20CM%20Graphic%20Folder/BDCB%20CM%20E2%20Morepost/%5BCM%5D%20%5BBDCB%5D%20%5BE2%5D%20%5BC1%5D%20Implementing%20CM%20Planning%20Methodology.jpg
---
.
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Crisis Management in Action: A Practical Implementation Guide for BDCB
# \[CM\] \[BDCB\] \[E2\] \[C1\] Implementing CM Planning Methodology
[![\[CM\] \[BDCB\] \[Full Banner\] Crisis Management in Action\_ A Practical Implementation Guide for BDCB](https://no-cache.hubspot.com/cta/default/3893111/399bc296-6bd2-4c03-8819-8bfe517a3e07.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/399bc296-6bd2-4c03-8819-8bfe517a3e07)
**Implementing Crisis Management for Brunei Darussalam Central Bank (BDCB)** is the second eBook in the series **“Crisis Management in Action: A Practical Implementation Guide for BDCB.”**
**It moves from understanding BDCB's organisational and operating context to establishing a structured methodology for developing, implementing, validating, and sustaining its crisis management capability.**
Crisis management is more than the preparation of a Crisis Management Plan.
It is an organisational capability that enables senior management to recognise an emerging crisis, establish strategic direction, make decisions under conditions of uncertainty, coordinate multiple stakeholders, communicate effectively, and guide the organisation from disruption through stabilisation and recovery.
This approach is consistent with **ISO 22361:2022, Security and resilience — Crisis management — Guidelines**. ISO 22361 guides organisations to **plan, establish, maintain, review, and continually improve a strategic crisis management capability**.
### [![CM \[E2\] \[C1\] Implementing CM Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/c3c5c5c4-74ee-4ad6-9062-0e82dd57f7e7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c3c5c5c4-74ee-4ad6-9062-0e82dd57f7e7)
[Moh Heng Goh](https://blog.bcm-institute.org/en/ebook-cm/author/moh-heng-goh) Oct 7, 2026
###### Crisis Management Certified Planner-Specialist-Expert
##### [![\[CM\] \[BDCB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/062c8304-1699-4f7b-a38d-f128d9815304.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/062c8304-1699-4f7b-a38d-f128d9815304)
### Chapter 1
### [![CM \[E2\] \[C1\] Implementing CM Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/c3c5c5c4-74ee-4ad6-9062-0e82dd57f7e7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c3c5c5c4-74ee-4ad6-9062-0e82dd57f7e7)
### Implementing Crisis Management for Brunei Darussalam Central Bank
#### **Introduction**
[![\[CM\] \[BDCB\] \[E2\] \[C1\] Implementing CM Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/5e9ed23a-590c-49f3-ac27-fbd30dc8dfed.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5e9ed23a-590c-49f3-ac27-fbd30dc8dfed)[![eBook Cover \[CM\] \[BDCB\] \[E2\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/b1dad569-0e0d-4f8c-8746-d9edfb0e4d96.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b1dad569-0e0d-4f8c-8746-d9edfb0e4d96)**Implementing Crisis Management for Brunei Darussalam Central Bank (BDCB)** is the second eBook in the series **“Crisis Management in Action: A Practical Implementation Guide for BDCB.”**
**It moves from understanding BDCB's organisational and operating context to establishing a structured methodology for developing, implementing, validating, and sustaining its crisis management capability.**
Crisis management is more than preparing a Crisis Management Plan.
It is an organisational capability that enables senior management to recognise an emerging crisis, set strategic direction, make decisions under uncertainty, coordinate multiple stakeholders, communicate effectively, and guide the organisation from disruption through stabilisation and recovery.
This approach is consistent with **ISO 22361:2022, Security and resilience — Crisis management — Guidelines**. ISO 22361 guides organisations to **plan, establish, maintain, review, and continually improve a strategic crisis management capability**.
It addresses organisational context, development of crisis-management capability, crisis leadership, decision-making, crisis communication, training, validation, and learning.
For BDCB, this capability is particularly important because a significant crisis may extend beyond internal organisational disruption.
BDCB operates Brunei Darussalam's National Payment and Settlement Systems (NPSS), comprising the **Real-Time Gross Settlement (RTGS), Automated Clearing House (ACH), and Central Securities Depository (CSD)**.
BDCB describes safe, reliable, and efficient financial-market infrastructures as key components supporting financial stability and economic growth.
The implementation methodology used in this eBook translates these principles into a practical **seven-phase Crisis Management Planning Methodology**:
Implement the methodology as a continuous management cycle rather than a one-time planning project.
[![\[GR\] \[3\_4\] \[CM\] \[PM\] Banners for Crisis Management Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/1f719624-b884-428c-b3d9-9381a080e0e9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1f719624-b884-428c-b3d9-9381a080e0e9)
#### **Purpose of the Crisis Management Planning Methodology**
The methodology provides BDCB with a structured route from **understanding its crisis exposure** to establishing a **validated and sustainable strategic crisis-management capability**.
Each phase answers a different management question:
| Phase | Management Question |
| --- | --- |
| PM — CM Project Management | How should BDCB organise and govern crisis management implementation? |
| CAR — Crisis Scenario Risk Analysis and Review | What threats could escalate into crises, and which crisis scenarios should BDCB prepare for? |
| BIA — Business Impact Analysis | What could be seriously affected, and what must BDCB protect or prioritise during a crisis? |
| BCS — CM Strategy | How should BDCB prevent, respond to and strategically manage different crisis scenarios? |
| PD — CM Plan Development | How will the Crisis Management Team actually operate when a crisis occurs? |
| TE — CM Testing and Exercising | Can the arrangements work effectively under realistic crisis conditions? |
| PgM — CM Program Management | How will BDCB maintain, review and continually improve the capability? |
Together, the seven phases move BDCB from **planning** to **capability**.
#### [![\[GR\] \[CM\] \[PM\] \[P1\] CM Project Management](https://no-cache.hubspot.com/cta/default/3893111/d91f1d0e-20c7-4b8f-a4dd-1d2a1d2e5089.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d91f1d0e-20c7-4b8f-a4dd-1d2a1d2e5089)
#### **Phase 1 — CM Project Management (PM)**
##### **Establishing the Crisis Management Implementation Programme**
The first phase establishes the organisational foundation for implementing crisis management.
A crisis-management initiative can fail even when individual plans are well written if governance, authority, ownership, resources, and management sponsorship have not been established.
BDCB should therefore begin by defining the **scope, objectives, governance, and implementation structure** for its crisis-management programme.
Key activities should include:
- securing senior-management sponsorship;
- defining the scope of the crisis-management programme;
- appointing a CM project sponsor and project manager;
- identifying business and functional representatives;
- establishing the Crisis Management Team governance framework;
- identifying internal and external stakeholders;
- agreeing implementation milestones and deliverables;
- defining roles and responsibilities;
- determining resource and competency requirements;
- establishing reporting and escalation arrangements; and
- defining how crisis management interfaces with BCM, operational risk, cybersecurity, technology recovery, physical security and other relevant disciplines.
This phase establishes **who is responsible for building the capability and how implementation will be governed**.
##### **BDCB Example**
BDCB could establish a cross-functional CM implementation team involving representatives from senior management, risk, monetary operations, financial supervision, technology, cybersecurity, corporate communications, facilities, security, human resources, legal functions, and business continuity.
The purpose would not be to transfer ownership of every crisis to a single department. Rather, it would establish a common framework through which the appropriate specialists can support strategic crisis leadership.
[![\[GR\] \[CM\] \[PM\] \[P2\] Crisis Scenario Risk Assessment](https://no-cache.hubspot.com/cta/default/3893111/07d61b49-f65b-4524-a52f-36b3f79dba69.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/07d61b49-f65b-4524-a52f-36b3f79dba69)
#### **Phase 2 — Crisis Scenario Risk Analysis and Review (CAR)**
##### **Understanding What Could Become a Crisis**
The second phase identifies threats and develops severe but plausible crisis scenarios that BDCB should be able to manage.
The analysis should extend beyond conventional operational risks. Crisis scenarios should consider events capable of producing:
- significant uncertainty;
- threats to life and safety;
- loss of critical technology;
- information-integrity concerns;
- financial-sector disruption;
- payment and settlement disruption;
- widespread stakeholder concern;
- media and reputational pressure;
- financial contagion;
- loss of public confidence; or
- strategic decisions requiring senior management intervention.
For the BDCB case study, CAR should include scenarios such as:
- **Natural crises:** flooding, severe weather, infectious disease, and other environmental disruptions.
- **Technological crises:** cyberattack, ransomware, data corruption, data-centre failure, and major system outages.
- **Confrontation:** demonstrations, stakeholder disputes, or organised campaigns.
- **Malevolence:** terrorism, sabotage, cyber espionage, or deliberate attacks.
- **Organisational misdeeds:** deception, misconduct, fraud, or governance failures.
- **Workplace violence:** physical assault, armed intruder, or threats against employees.
- **Rumours and misinformation:** false information concerning BDCB, currency, financial institutions, or payment infrastructure.
- **Financial crises:** liquidity stress, solvency concerns, bank runs, settlement-liquidity problems, or financial contagion.
The objective is not to predict the exact crisis that will occur. It is to understand the **characteristics and consequences of different crisis classes** so that BDCB can develop adaptable response capabilities.
#### [![\[GR\] \[CM\] \[PM\] \[P3\] Business Impact Analysis](https://no-cache.hubspot.com/cta/default/3893111/f6d0d657-7c39-4666-b4d4-fc5d1177f949.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f6d0d657-7c39-4666-b4d4-fc5d1177f949)
#### **Phase 3 — Business Impact Analysis (BIA)**
##### **Understanding What Must Be Protected**
The BIA phase determines the potential consequences of disruption and identifies the functions, resources, dependencies, and stakeholders requiring priority attention.
In crisis management, the BIA should not be viewed only as an operational recovery exercise.
It also provides senior management with information required to understand **what is at stake when strategic decisions are made during a crisis**.
For BDCB, impact assessment could consider:
- employee safety and welfare;
- monetary operations;
- currency-related activities;
- financial supervision;
- payment and settlement systems;
- technology and information;
- financial institutions;
- consumers and businesses;
- regulatory and legal obligations;
- government and other authorities;
- reputation and institutional credibility; and
- financial-system stability.
BDCB's NPSS provides a useful example.
BDCB operates RTGS for large-value and urgent interbank payments; ACH facilitates bulk clearing, with payment obligations submitted to RTGS for settlement; and CSD maintains electronic records for government debt securities and supports securities-related activities.
The BIA should therefore identify not only direct system impacts but also **interdependencies and cascading consequences**.
#### [![\[GR\] \[CM\] \[PM\] \[P4\] Crisis Management Strategy](https://no-cache.hubspot.com/cta/default/3893111/31431a1e-9e67-4e30-ac7b-0415d2099d09.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/31431a1e-9e67-4e30-ac7b-0415d2099d09)
#### **Phase 4 — CM Strategy (BCS)**
##### **Deciding How BDCB Will Manage Crisis Exposure**
Once BDCB understands its crisis scenarios and their potential impacts, it can determine appropriate crisis-management strategies.
The strategy phase should consider two complementary questions.
##### **Crisis Prevention Strategy**
What can BDCB do **before the crisis** to prevent an adverse event from escalating?
Preventive measures could include:
- physical-security controls;
- cyber controls;
- technology redundancy;
- preventive maintenance;
- employee screening and awareness;
- prudential surveillance;
- supplier risk management;
- stakeholder monitoring;
- information-integrity controls;
- early-warning indicators; and
- management escalation thresholds.
##### **Crisis Response Strategy**
What strategic posture should BDCB adopt **once a crisis has emerged**?
Depending on the scenario, response could involve protecting personnel, containing the event, preserving evidence, maintaining critical functions, coordinating financial institutions, managing public communication, activating alternate arrangements, or taking proactive measures to prevent systemic escalation.
The strategy phase, therefore, converts risk and impact analysis into **management choices**.
#### [![\[GR\] \[CM\] \[PM\] \[P5\] CM Plan Development](https://no-cache.hubspot.com/cta/default/3893111/b45d1b39-b0e0-4496-8cb1-817bde7afb61.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b45d1b39-b0e0-4496-8cb1-817bde7afb61)
#### **Phase 5 — CM Plan Development (PD)**
##### **Turning Strategy into an Executable Crisis Management Plan**
The Crisis Management Plan translates strategy into an operational framework that senior management can use under pressure.
A BDCB Crisis Management Plan should provide sufficient structure to support decision-making without attempting to prescribe every possible crisis.
The plan should address areas such as:
- crisis definition and activation criteria;
- Crisis Management Team structure;
- roles, responsibilities and authorities;
- notification and mobilisation;
- crisis assessment;
- situational awareness;
- strategic objectives;
- decision-making;
- information management;
- stakeholder mapping;
- crisis communications;
- employee and family communications;
- coordination with authorities;
- financial-sector coordination;
- meeting structure and battle rhythm;
- action and decision logging;
- transition to recovery;
- stand-down; and
- post-crisis review.
Scenario-specific playbooks can supplement the core plan for events such as cyberattack, financial institution stress, severe natural disruption, payment system outage, or workplace violence.
The plan should support leadership, not replace it.
#### [![\[GR\] \[CM\] \[PM\] \[P6\] Testing and Exercising](https://no-cache.hubspot.com/cta/default/3893111/3309f5bb-74e0-464c-bf15-6b8d13520e5a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3309f5bb-74e0-464c-bf15-6b8d13520e5a)
#### **Phase 6 — CM Testing and Exercising (TE)**
##### **Validating the Capability Before It Is Needed**
A crisis-management capability cannot be considered effective simply because a plan exists.
ISO 22361 explicitly includes **training, validation, and learning from crises** among the elements of strategic crisis-management capability.
BDCB should therefore progressively validate its arrangements through activities such as:
- plan walkthroughs;
- notification tests;
- Crisis Management Team call-tree exercises;
- tabletop exercises;
- scenario-based simulations;
- communication exercises;
- technology and operational recovery exercises;
- cross-functional exercises;
- exercises involving financial institutions or external stakeholders, where appropriate; and
- post-exercise reviews.
Exercises should deliberately introduce **uncertainty, incomplete information, competing priorities, and time pressure**. These characteristics distinguish a meaningful crisis-management exercise from a simple procedural walkthrough.
#### [![\[GR\] \[CM\] \[PM\] \[P7\] CM Program Management](https://no-cache.hubspot.com/cta/default/3893111/86250a21-9695-418c-9a9d-7c09dd48cf81.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/86250a21-9695-418c-9a9d-7c09dd48cf81)
#### **Phase 7 — CM Program Management (PgM)**
##### **Sustaining and Continually Improving Crisis Management**
The final phase converts crisis management from a project into an enduring organisational capability.
ISO 22361 describes crisis management as a capability that organisations should plan, establish, maintain, review, and **continually improve**.
BDCB's programme-management activities should therefore include:
- governance and management oversight;
- periodic review of crisis risks;
- maintenance of Crisis Management Team membership;
- plan reviews and updates;
- training and competency development;
- exercise scheduling;
- corrective-action tracking;
- lessons from actual incidents;
- stakeholder and contact-list maintenance;
- integration with organisational change;
- review of critical third parties;
- performance indicators;
- independent review where appropriate; and
- periodic management reporting.
Significant changes to technology, financial infrastructure, organisational structure, regulation, suppliers, or the external environment should trigger corresponding reviews of the crisis-management capability.
#### **Integrating the Seven Phases**
The seven phases should not operate as independent workstreams.
They form an integrated implementation journey:
For the eBook, this should be converted into a **standalone professional diagram** titled **“Seven-Phase Crisis Management Planning Methodology”**, rather than retaining the text-arrow version.
The outputs of one phase become inputs to the next. Equally important, lessons from testing, exercises, and actual crises should feed back into earlier phases. The methodology is therefore **iterative rather than strictly linear**.
#### **Specific BDCB Example — Major RTGS Disruption**
A major disruption to the **Real-Time Gross Settlement (RTGS) system** illustrates how all seven phases can work together.
BDCB describes RTGS as the heart of a modern national payment system.
The system enables large-value and urgent payments between banks to be settled individually in real time, using settlement accounts held directly with BDCB; settled payments are final and irrevocable.
BDCB has also stated that, as a systemically important payment system, RTGS should be reliable, robust, and resilient even during market crises.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/1523c8d2-c2d8-4f84-9dff-3882b7f9b239)
##### **Phase 1 — PM**
BDCB establishes governance for crisis-management implementation and identifies Monetary Operations, technology, cybersecurity, communications, financial supervision, risk, and senior management as relevant stakeholders for a severe RTGS scenario.
[![\[GR\] \[3/4\] \[CM\] \[PM\] \[P2\] Crisis Scenario Risk Assessment](https://no-cache.hubspot.com/cta/default/3893111/80d7ef59-8902-4f2d-aa8f-84c7232ada79.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/80d7ef59-8902-4f2d-aa8f-84c7232ada79)
##### **Phase 2 — CAR**
A scenario is developed in which a major technology or cyber event makes RTGS unavailable during a critical settlement period.
The assessment considers that the event may extend beyond an IT incident because financial institutions cannot normally process urgent interbank settlements.
##### **[![\[GR\] \[3/4\] \[CM\] \[PM\] \[P3\] Business Impact Analysis](https://no-cache.hubspot.com/cta/default/3893111/96e91f38-3360-4af2-9138-1ac196b90ff0.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/96e91f38-3360-4af2-9138-1ac196b90ff0)Phase 3 — BIA**
BDCB evaluates the potential impact on:
- settlement activity;
- participating financial institutions;
- liquidity management;
- dependent payment processes;
- government or securities-related activities where relevant;
- consumers and businesses through downstream effects;
- BDCB operations;
- stakeholder confidence; and
- financial stability.
##### **[![\[GR\] \[3/4\] \[CM\] \[PM\] \[P4\] Crisis Management Strategy](https://no-cache.hubspot.com/cta/default/3893111/8d02ee0a-0b96-4000-a5c3-f266e6e1231a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8d02ee0a-0b96-4000-a5c3-f266e6e1231a)Phase 4 — CMS**
Prevention strategies could include resilient architecture, cybersecurity, controlled technology changes, capacity management, and continuous monitoring.
Response strategies could include rapid technical containment, failover, transaction-integrity verification, participant coordination, prioritisation of critical settlement activities, and authoritative stakeholder communication.
##### **[![\[GR\] \[3/4\] \[CM\] \[PM\] \[P5\] CM Plan Development](https://no-cache.hubspot.com/cta/default/3893111/179d9aab-c721-4229-b7eb-df43ef5ee062.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/179d9aab-c721-4229-b7eb-df43ef5ee062)Phase 5 — PD**
The Crisis Management Plan establishes:
- escalation thresholds;
- CMT activation;
- technical and business representation;
- financial-institution coordination;
- situation-reporting requirements;
- strategic decision authority;
- communication responsibilities; and
- recovery and stand-down criteria.
##### **[![\[GR\] \[3/4\] \[CM\] \[PM\] \[P6\] Testing and Exercising](https://no-cache.hubspot.com/cta/default/3893111/eedeb7b0-bcd0-424d-a0bc-46cce59ae97f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/eedeb7b0-bcd0-424d-a0bc-46cce59ae97f)Phase 6 — TE**
BDCB conducts a simulation in which RTGS becomes unavailable and technical recovery is delayed. Additional injectables could include:
- uncertainty regarding transaction integrity;
- simultaneous telecommunications problems;
- liquidity concerns at a participant;
- enquiries from financial institutions;
- media reports claiming a wider payment-system failure; and
- social-media misinformation.
The exercise tests whether the Crisis Management Team can distinguish **technical recovery decisions from strategic crisis decisions**.
##### **[![\[GR\] \[3/4\] \[CM\] \[PM\] \[P7\] CM Program Management](https://no-cache.hubspot.com/cta/default/3893111/fbcd8658-493a-4343-b354-829931189dba.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fbcd8658-493a-4343-b354-829931189dba)Phase 7 — PgM**
The exercise assigns owners and completion dates to findings.
The team updates plans, escalation thresholds, contact lists, communication templates, and recovery arrangements. Outstanding actions remain subject to management oversight until closed.
This example demonstrates that the crisis-management methodology is not merely about restoring RTGS.
It enables BDCB's senior management to manage the strategic consequences of **the disruption**.
#### **Crisis Management and Related Disciplines**
Crisis management should not replace incident management, business continuity, disaster recovery, cybersecurity, emergency management, or operational risk management.
ISO 22361 recognises relationships and interdependencies with other disciplines while treating crisis management as distinct.
For BDCB, the distinction can be understood as follows:
| Discipline | Primary Focus |
| --- | --- |
| Incident Management | Control and resolve the immediate operational incident. |
| Emergency Management | Protect life, safety, property, and the immediate environment. |
| Cyber Incident Response | Contain, eradicate, and investigate cyber threats. |
| IT Disaster Recovery | Restore technology services and infrastructure. |
| Business Continuity Management | Continue and recover priority business activities. |
| Crisis Communication | Manage strategic communication with internal and external stakeholders. |
| Crisis Management | Provide strategic leadership, direction, decisions, and coordination when the event exceeds normal management arrangements. |
During a major crisis, several of these disciplines may operate simultaneously.
#### **From Operational Incident to Strategic Crisis**
An important implementation objective is to define **when operational management should escalate to strategic crisis management**.
For example:
For the eBook, this sequence should be converted into a standalone diagram titled **“From Operational Incident to Strategic Crisis.”**
The escalation decision should consider severity, uncertainty, duration, cross-functional impact, stakeholder concern, reputational consequences, potential financial-system implications, and the need for decisions beyond normal operational teams' authority.
#### **ISO 22361 Alignment**
The seven-phase methodology provides a practical implementation structure supporting the broader objectives of ISO 22361. It should not be interpreted as reproducing the ISO standard clause by clause.
Rather, it operationalises relevant crisis-management principles within a structured implementation process.
The relationship can be summarised as follows:
| Seven-Phase Methodology | ISO 22361 Alignment |
| --- | --- |
| PM | Organisational context, governance, and development of crisis-management capability |
| CAR | Understanding context, challenges, and potential crisis conditions |
| BIA | Understanding consequences, dependencies, and decision priorities |
| BCS | Developing organisational crisis-management capability and strategic approaches |
| PD | Crisis leadership, decision-making, and communication arrangements |
| TE | Training, exercising, validation, and learning |
| PgM | Maintenance, review, learning, and continual improvement |
ISO 22361 specifically covers the development of crisis-management capability, crisis leadership, decision-making challenges, crisis communication, and training, validation, and learning.
This makes the seven-phase approach a useful implementation methodology that supports ISO 22361-aligned crisis-management capability, rather than treating compliance as simply producing documentation.
#### **Key Implementation Principle**
The central implementation principle for BDCB is:
**Crisis management is a strategic organisational capability, not merely a Crisis Management Plan.**
The plan is important, but effective crisis management also depends on:
These components collectively determine whether BDCB can manage a crisis effectively when established procedures alone are insufficient.
[![\[Summary\] \[CM\] \[E1\] \[C8\] Implementing the CM Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/451995aa-9b9c-46d0-9f29-cbc289c968f0.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/451995aa-9b9c-46d0-9f29-cbc289c968f0)
**eBook 2, Chapter 1 — Implementing Crisis Management for Brunei Darussalam Central Bank** establishes the implementation framework for eBook 2 of **“Crisis Management in Action: A Practical Implementation Guide for BDCB.”**
****
The methodology consists of seven interconnected phases:
CM Project Management (PM), Crisis Scenario Risk Analysis and Review (CAR), Business Impact Analysis (BIA), CM Strategy (BCS), CM Plan Development (PD), CM Testing and Exercising (TE), and CM Program Management (PgM).
Together, these phases provide a structured journey from establishing governance and understanding crisis exposure to developing strategies, producing executable plans, validating capability, and embedding continual improvement.
This approach supports the intent of ISO 22361:2022, which guides organisations to plan, establish, maintain, review, and continually improve a strategic crisis-management capability, and specifically addresses crisis leadership, decision-making, communication, training, validation, and learning.
For BDCB, implementation needs to recognise that a crisis can extend beyond the organisation itself. BDCB's operation of RTGS, ACH, and CSD creates important connections between the resilience of its operations and Brunei Darussalam's financial infrastructure.
The RTGS example illustrates the practical importance of this distinction.
A technology team may be able to restore a failed system, but a severe RTGS disruption could simultaneously raise questions about settlement, financial institution liquidity, stakeholder communication, transaction integrity, public confidence, and financial stability.
Those wider consequences require **strategic crisis leadership and coordination**.
This eBook therefore aims not simply to help BDCB write a Crisis Management Plan.
It provides a systematic methodology through which BDCB can develop and sustain the **people, governance, strategies, plans, decision-making arrangements, communications, exercises, and learning mechanisms required for an effective crisis-management capability**.
The subsequent chapters of **Implementing Crisis Management for Brunei Darussalam Central Bank** can progressively work through these seven phases and translate the methodology into practical BDCB implementation requirements, templates, assessments, and management decisions.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/3aefb2d2-3110-47c1-ad4f-d3e6e5381066)
[![\[CM\] \[BDCB\] \[3/4 Banner\] Crisis Management in Action\_ A Practical Implementation Guide for BDCB](https://no-cache.hubspot.com/cta/default/3893111/b3d8c34f-d579-45e8-aba7-c04de5f90bb2.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b3d8c34f-d579-45e8-aba7-c04de5f90bb2)
| **eBook 2: Implementing Crisis Management for Brunei Darussalam Central Bank** | | | | |
| --- | --- | --- | --- | --- |
| **C1** | **C2 \[x\]** | **C3 \[x\]** | **C4 \[x\]** | **C5 \[x\]** |
| [![\[CM\] \[BDCB\] \[E2\] \[C1\] Implementing CM Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/5e9ed23a-590c-49f3-ac27-fbd30dc8dfed.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5e9ed23a-590c-49f3-ac27-fbd30dc8dfed) | [![\[CM\] \[BDCB\] \[E2\] \[C2\] CM Project Management](https://no-cache.hubspot.com/cta/default/3893111/95250210-247e-4610-902a-562ffe1d4774.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/95250210-247e-4610-902a-562ffe1d4774) | [![\[CM\] \[BDCB\] \[E2\] \[C3\] Crisis Scenario Risk Assessment](https://no-cache.hubspot.com/cta/default/3893111/574201d8-6e7a-484a-bed3-80d123950c9b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/574201d8-6e7a-484a-bed3-80d123950c9b) | [![\[CM\] \[BDCB\] \[E2\] \[C4\] Business Impact Analysis](https://no-cache.hubspot.com/cta/default/3893111/ae85d047-8840-47b3-84c8-13626a5beebf.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ae85d047-8840-47b3-84c8-13626a5beebf) | [![\[CM\] \[BDCB\] \[E2\] \[C5\] Crisis Management Strategy](https://no-cache.hubspot.com/cta/default/3893111/489d61c5-de00-4559-afd4-ff01360c775f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/489d61c5-de00-4559-afd4-ff01360c775f) |
| **C6 \[x\]** | **C7 \[x\]** | **C8 \[x\]** | **C9 \[x\]** | **C10 \[x\]** |
| [![\[CM\] \[BDCB\] \[E2\] \[C6\] CM Plan Development](https://no-cache.hubspot.com/cta/default/3893111/fcac6d59-029c-4d16-a54a-5be4f443070c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fcac6d59-029c-4d16-a54a-5be4f443070c) | [![\[CM\] \[BDCB\] \[E2\] \[C7\] CM Testing and Exercising](https://no-cache.hubspot.com/cta/default/3893111/49464599-73a4-42fc-8d01-2b69b917df80.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/49464599-73a4-42fc-8d01-2b69b917df80) | [![\[CM\] \[BDCB\] \[E2\] \[C8\] CM Program Management](https://no-cache.hubspot.com/cta/default/3893111/78db1aba-ccf6-4607-a12c-e29f539a5316.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/78db1aba-ccf6-4607-a12c-e29f539a5316) | [![\[CM\] \[BDCB\] \[E2\] \[C9\] Summary](https://no-cache.hubspot.com/cta/default/3893111/31ac4c46-9761-4d1c-8582-9560a74acf39.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/31ac4c46-9761-4d1c-8582-9560a74acf39) | [![\[CM\] \[BDCB\] \[E2\] \[C10\] \[Back Cover\] CM eBook 2](https://no-cache.hubspot.com/cta/default/3893111/f751a3cf-22bc-4ea7-ae7f-67414802f395.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f751a3cf-22bc-4ea7-ae7f-67414802f395) |
| | | | | |
#### More Information About Crisis Management Blended/ Hybrid Learning Courses
To learn more about the course and schedule, click the buttons below for the CM-300 Crisis Management Implementer \[CM-3\] and the CM-5000 Crisis Management Expert Implementer \[CM-5\].
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/5ffecd2d-8000-4805-b5e3-e9ead2e259cc) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c3546220-6c76-4a10-8c76-4040b94e09e5) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/03294547-1df3-435c-9243-971c3d9bb6ce) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/b29594fe-d44a-4ff8-8160-03f7ce454385) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/dd120e7f-9fe2-49ed-ad24-489b81c06739) | [![\[BL-CM\] \[5\] Register](https://no-cache.hubspot.com/cta/default/3893111/82024308-16f4-4491-98be-818a882c6286.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/82024308-16f4-4491-98be-818a882c6286) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c8aaf76b-4c0b-402a-ad12-c8aff24eb911) | Please feel free to send us a note if you have any questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/30bcbbbf-c8ea-48d8-8643-da2638f3f0f8) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/83d00c12-c51c-4476-9902-69f9b7667a91) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/672d2949-6233-4b26-ad42-ae0dd0a1a3ac) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3ca6f50d-a3c5-41b8-8da2-26feb8a7613e) |
### Your Comments Here:
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/en/ebook-cm/author/moh-heng-goh"
},
"dateModified" : "2026-10-08T07:47:05.320Z",
"datePublished" : "2026-10-07T08:51:08.000Z",
"headline" : "[CM] [BDCB] [E2] [C1] Implementing CM Planning Methodology",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/en/ebook-cm/cm-bdcb-e2-c1-implementing-cm-planning-methodology",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```