---
title: [CM] [BDCB] [E3] [C1] Starting Your CM Implementation
description: [CM] [BDCB] [E3] [C1] Starting Your CM Implementation
image: https://blog.bcm-institute.org/hubfs/BDCB%20Graphic%20Folder/BDCB%20CM%20Graphic%20Folder/BDCB%20CM%20E3%20Morepost/%5BCM%5D%20%5BBDCB%5D%20%5BE3%5D%20%5BC1%5D%20Starting%20Your%20CM%20Implementation.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Crisis Management in Action: A Practical Implementation Guide for BDCB
# \[CM\] \[BDCB\] \[E3\] \[C1\] Starting Your CM Implementation
[![\[CM\] \[BDCB\] \[Full Banner\] Crisis Management in Action\_ A Practical Implementation Guide for BDCB](https://no-cache.hubspot.com/cta/default/3893111/399bc296-6bd2-4c03-8819-8bfe517a3e07.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/399bc296-6bd2-4c03-8819-8bfe517a3e07)
[![eBook Cover \[CM\] \[BDCB\] \[E3\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/77f3104a-2f3b-4e2b-a101-9e72c37001c2.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/77f3104a-2f3b-4e2b-a101-9e72c37001c2)Crisis Management (CM) becomes effective when an organisation moves beyond policies and conceptual frameworks and develops practical arrangements that can be activated when a severe event threatens its people, operations, statutory responsibilities, stakeholders, reputation, or strategic objectives.
For Brunei Darussalam Central Bank (BDCB), this requirement is particularly significant.
BDCB is responsible for conducting Brunei Darussalam's monetary policy, issuing the Brunei currency, regulating and supervising banks and other financial institutions, supporting efficient payment systems, and fostering a sound and progressive financial-services sector.
These responsibilities mean a serious disruption affecting BDCB may have consequences beyond the organisation itself and could undermine confidence in the wider financial system.
BDCB also operates within Brunei Darussalam's Currency Board Arrangement, under which the Brunei dollar is pegged at par to the Singapore dollar and supported by the Currency Interchangeability Agreement between Brunei Darussalam and Singapore.
[![\[CM\] \[E3\] \[C1\] Starting Your CM Implementation Banner](https://no-cache.hubspot.com/cta/default/3893111/1bf08c12-b11b-44cc-a7a5-3bd25c740d4c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1bf08c12-b11b-44cc-a7a5-3bd25c740d4c)
[Moh Heng Goh](https://blog.bcm-institute.org/en/ebook-cm/author/moh-heng-goh) Oct 7, 2026
###### Crisis Management Certified Planner-Specialist-Expert
### [![\[CM\] \[BDCB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/062c8304-1699-4f7b-a38d-f128d9815304.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/062c8304-1699-4f7b-a38d-f128d9815304)
### eBook 3: Chapter 1
### [![\[CM\] \[E3\] \[C1\] Starting Your CM Implementation Banner](https://no-cache.hubspot.com/cta/default/3893111/1bf08c12-b11b-44cc-a7a5-3bd25c740d4c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1bf08c12-b11b-44cc-a7a5-3bd25c740d4c)
#### **Introduction**
*[![eBook Cover \[CM\] \[BDCB\] \[E3\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/77f3104a-2f3b-4e2b-a101-9e72c37001c2.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/77f3104a-2f3b-4e2b-a101-9e72c37001c2)*
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/df0f5f56-faed-4a31-bbf2-b179293ee699)Crisis Management (CM) becomes effective when an organisation moves beyond policies and conceptual frameworks and develops practical arrangements that can be activated when a severe event threatens its people, operations, statutory responsibilities, stakeholders, reputation, or strategic objectives.
For Brunei Darussalam Central Bank (BDCB), this requirement is particularly significant. BDCB is responsible for conducting Brunei Darussalam's monetary policy, issuing the Brunei currency, regulating and supervising banks and other financial institutions, supporting efficient payment systems, and fostering a sound and progressive financial-services sector.
These responsibilities mean a serious disruption affecting BDCB may have consequences beyond the organisation itself and could undermine confidence in the wider financial system.
BDCB also operates within Brunei Darussalam's Currency Board Arrangement, under which the Brunei dollar is pegged at par to the Singapore dollar and supported by the Currency Interchangeability Agreement between Brunei Darussalam and Singapore.
This operating context reinforces the importance of disciplined crisis assessment, timely executive decision-making, stakeholder coordination, and effective crisis communications.
This third eBook, **Starting Your Crisis Management Implementation**, moves from understanding Crisis Management to its practical implementation.
It helps BDCB translate the concepts and methodology covered in the first two eBooks into organisation-specific Crisis Scenario Risk Assessment (CRA) and Crisis Management Strategy (CMS) outputs.
#### **Position of eBook 3 in the Series**
The three eBooks form a progressive implementation journey.
| eBook | Title | Primary Purpose |
| --- | --- | --- |
| eBook 1 | Understanding Your Organisation for Brunei Darussalam Central Bank | Establish the organisational, operational, and crisis-management context of BDCB. |
| eBook 2 | Implementing Crisis Management for Brunei Darussalam Central Bank | Explain the Crisis Management Planning Methodology and how its components should be implemented. |
| eBook 3 | Starting Your Crisis Management Implementation for Brunei Darussalam Central Bank | Apply the methodology using completed, organisation-specific CRA and CMS working templates. |
eBooks 1 and 2, therefore, serve as **pre-reading and implementation guidance**.
eBook 3 is different. It drills down into selected stages of the Crisis Management Planning Methodology and shows how the organisation can begin populating its implementation documents with practical content.
The emphasis changes from:
**Understanding what Crisis Management requires** to **develop the actual working outputs needed to implement it**.
#### **Purpose of eBook 3**
[![eBook Cover \[CM\] \[BDCB\] \[E3\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/77f3104a-2f3b-4e2b-a101-9e72c37001c2.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/77f3104a-2f3b-4e2b-a101-9e72c37001c2)This eBook is designed as an **implementation workbook and reference guide**, not just a narrative publication.
It compiles practical submissions developed for BDCB during a Crisis Management implementation exercise.
These submissions follow the templates used in the BCM Institute training-led implementation methodology.
The intention is to give BDCB a practical starting point, not an empty template.
Each section provides contextualised draft content that can be:
- reviewed by relevant BDCB stakeholders;
- challenged during workshops;
- amended to reflect actual organisational arrangements;
- validated against current threats and controls;
- assigned to accountable owners;
- approved through the appropriate governance process; and
- incorporated into the organisation's Crisis Management programme.
The content should therefore not be treated as automatically approved BDCB policy.
It is implementation material for the organisation to validate and refine.
#### **Why BDCB Requires a Structured CM Implementation Approach**
A central bank can encounter crises that differ considerably in origin but produce overlapping strategic consequences.
An incident may begin as a technology failure, cyberattack, building emergency, personnel issue, financial-sector event, external threat, or reputational issue.
What turns the incident into a crisis is not merely the initiating event but the scale of its consequences, uncertainty, urgency, stakeholder attention, and potential impact on the organisation's objectives.
For BDCB, crisis-management planning should therefore consider consequences affecting areas such as:
- monetary and financial stability;
- currency issuance and management;
- financial-sector supervision;
- payment-system oversight;
- critical technology and information;
- employees and facilities;
- regulated financial institutions;
- government and institutional stakeholders;
- public and market confidence; and
- BDCB's credibility as Brunei Darussalam's central bank and financial regulator.
BDCB's statutory objectives include domestic price stability, financial-system stability, support for efficient payment systems, and development of a sound financial-services sector.
BDCB's 2025 Financial Stability Report and Annual Report were published in June 2026, illustrating the continuing institutional emphasis on financial stability and central-bank mandates.
Crisis Management implementation should consequently be integrated with these responsibilities rather than treated as an isolated emergency-management activity.
#### **From Crisis Management Methodology to Implementation**
The Crisis Management Planning Methodology provides the structure for developing the organisation's capability.
eBook 3 concentrates particularly on two key phases:
##### **Phase 2 — Crisis Scenario Risk Assessment (CRA)**
This phase establishes what could escalate into a crisis, how to assess relevant scenarios, and what existing controls or treatments are available.
##### **Phase 4 — Crisis Management Strategy (CMS)**
This phase determines how the organisation should seek to prevent a potential crisis from escalating and how it should respond strategically when a crisis nevertheless occurs.
Together, the two phases establish an important connection:
Rather than beginning with a Crisis Management Plan and trying to anticipate every possible emergency, the methodology first develops a structured understanding of the organisation's crisis exposure.
#### **Implementation Requirements Covered in eBook 3**
The practical implementation content is organised into seven principal working components.
| Reference | Implementation Component | Primary Output |
| --- | --- | --- |
| CRA 1-1 | List of Threats | Structured catalogue of threats that can create significant disruption or crisis conditions. |
| CRA 1-2 | List of Crisis Scenarios | Organisation-specific scenarios describing how threats could develop into significant crises. |
| CRA 1-3 | List of Technology Threats | Detailed technology and cyber-related threats require specific consideration. |
| CRA 2-1 | Treatment and Control | Existing and proposed measures for preventing, reducing, or controlling identified crisis exposures. |
| CRA 3-1 | Risk Impact and Likelihood Assessment | Structured assessment of the likelihood and potential consequences of relevant crisis scenarios. |
| CMS 1-1 | Crisis Prevention Strategy | Strategic measures designed to prevent an emerging situation from developing into a crisis or reduce its potential severity. |
| CMS 1-2 | Crisis Response Strategy | Strategic arrangements for managing a crisis after activation, including leadership, coordination, decision-making, and stakeholder management. |
These components are interconnected and should not be completed as independent administrative templates.
#### **[![\[Banner\] \[Title\] \[CM\] \[E3\] Part 1-1\_ List of Threats](https://no-cache.hubspot.com/cta/default/3893111/92df076e-1b01-46d4-bf41-d49c0428deb4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/92df076e-1b01-46d4-bf41-d49c0428deb4)CRA 1-1 — List of Threats**
Start by identifying credible threats.
A threat is a potential source of disruption that could create serious consequences for BDCB if it interacts with organisational vulnerabilities, dependencies, or external conditions.
The threat-identification process should consider broad categories such as:
| Threat Category | BDCB Examples |
| --- | --- |
| Natural and environmental | Flood, severe weather, haze, public-health emergency |
| Physical and facility | Fire, building damage, loss of access, and failure of utilities |
| People | Loss of key personnel, widespread illness, and workforce disruption |
| Technology | Major ICT failure, cyberattack, ransomware, telecommunications outage |
| Information | Data corruption, loss of sensitive information, and unauthorised disclosure |
| Third party | Critical provider failure, cloud-service disruption, telecommunications provider failure |
| Financial sector | Distress affecting a supervised institution, payment-system disruption, and broader financial instability |
| Security | Physical security incident, malicious act, bomb threat |
| Reputation | Serious allegation, misinformation, stakeholder confidence issue |
| External environment | Regional disruption, geopolitical event, supply-chain disruption |
The objective is not initially to decide which threat is the "worst". The purpose is to establish a sufficiently comprehensive threat universe from which credible crisis scenarios can subsequently be developed.
#### **[![\[Banner\] \[Title\] \[CM\] \[E3\] Part 1-2\_ List of Crisis Scenarios](https://no-cache.hubspot.com/cta/default/3893111/6b07e8ef-f126-443b-bcbf-3a51c3748227.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6b07e8ef-f126-443b-bcbf-3a51c3748227)CRA 1-2 — List of Crisis Scenarios**
Threat identification alone is insufficient for Crisis Management.
A **threat** describes what could happen. A **crisis scenario** describes how that threat could develop into a situation requiring strategic management.
For example:
**Threat:** Cyberattack.
A corresponding BDCB crisis scenario might involve a sophisticated cyberattack that compromises critical systems while uncertainty remains about the integrity of sensitive information.
Operational disruption expands, financial institutions require guidance, media interest increases, and senior management must make time-critical decisions despite incomplete information.
The scenario is therefore much richer than the threat itself.
CRA 1-2 should develop **severe but credible scenarios** relevant to BDCB's operating environment, including potential combinations of:
- operational disruption;
- strategic consequences;
- stakeholder concern;
- regulatory implications;
- information uncertainty;
- public confidence;
- media attention;
- time pressure; and
- difficult management decisions.
This scenario-based approach provides much stronger input into strategy development, Crisis Management Plan design, and exercises.
#### **[![\[Banner\] \[Title\] \[CM\] \[E3\] Part 1-3\_ List of Crisis Scenarios \[Technology\]](https://no-cache.hubspot.com/cta/default/3893111/89fff399-1f2d-4c97-ab4e-5af735da307d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/89fff399-1f2d-4c97-ab4e-5af735da307d)CRA 1-3 — List of Technology Threats**
Technology threats warrant dedicated treatment because modern central-bank operations depend extensively on ICT, telecommunications, information, digital services, and external technology providers.
Technology-related crisis scenarios may include:
- ransomware;
- destructive malware;
- data corruption;
- cyber intrusion;
- distributed denial-of-service attack;
- critical application failure;
- identity and authentication failure;
- telecommunications disruption;
- network failure;
- data-centre outage;
- cloud-service disruption;
- failed technology change;
- third-party technology compromise;
- sensitive information disclosure;
- backup or restoration failure; and
- simultaneous cyber and operational disruption.
The objective of CRA 1-3 is not to duplicate routine IT risk management. It identifies technology events that can escalate beyond technical incident management and require **enterprise-level Crisis Management**.
For example, an application outage that is resolved rapidly by ICT may remain an operational incident.
The same outage, accompanied by data-integrity concerns, financial-sector implications, external scrutiny, and uncertainty about restoration, may require escalation to the Crisis Management Team.
#### **[![\[Banner\] \[Title\] \[CM\] \[E3\] Part 2\_ Treatment and Control](https://no-cache.hubspot.com/cta/default/3893111/dede0e40-256a-42a9-acb3-9070c3498147.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/dede0e40-256a-42a9-acb3-9070c3498147)CRA 2-1 — Treatment and Control**
Once BDCB has identified relevant threats and scenarios, it should determine what controls already exist and where additional treatment may be required.
Treatment and control measures can include:
For example, a cyber-related scenario may involve technical security controls, monitoring, incident-response procedures, backups, recovery arrangements, communications protocols and executive escalation mechanisms.
The assessment should distinguish between the existence of a documented control and evidence that the control is **effective, current, and capable of operating under crisis conditions**.
#### **[![\[Banner\] \[Title\] \[CM\] \[E3\] Part 3\_ Risk Impact and Likelihood Assessment](https://no-cache.hubspot.com/cta/default/3893111/d550d6b9-dc02-4d39-814a-705d2362bd77.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d550d6b9-dc02-4d39-814a-705d2362bd77)CRA 3-1 — Risk Impact and Likelihood Assessment**
CRA 3-1 applies a structured assessment to the crisis scenarios.
The purpose is to help management understand which scenarios require stronger prevention, preparedness, response, or exercise arrangements.
Impact considerations for BDCB could include:
| Impact Dimension | Illustrative Consideration |
| --- | --- |
| People | Injury, welfare, or safety consequences |
| Operations | Loss of critical central-bank capability |
| Financial system | Disruption affecting regulated institutions or wider financial stability |
| Technology | Loss of critical systems, connectivity, or information |
| Regulatory/legal | Inability to meet applicable obligations |
| Reputation | Loss of confidence among the government, institutions, financial-sector participants, or the public |
| Financial | Direct loss, recovery expenditure, or wider economic consequence |
| Stakeholders | Significant effects on financial institutions, government agencies, or other critical parties |
| Duration | Escalation caused by prolonged or uncertain disruption |
Assess likelihood and impact using the organisation's approved risk methodology rather than arbitrary scoring.
Importantly, the CRA should not assume that low-frequency scenarios are irrelevant. Some central-bank crises may be rare but have consequences sufficiently serious to justify robust preparedness.
#### **[](https://cta-redirect.hubspot.com/cta/redirect/3893111/4f131fae-9e5f-4aec-ba80-cc5b33fd5831)CMS 1-1 — Crisis Prevention Strategy**
The Crisis Prevention Strategy converts CRA findings into proactive action.
Its central question is:
**What can BDCB do before a crisis occurs—or during its early development—to prevent escalation or materially reduce its consequences?**
Prevention strategies may include:
- stronger monitoring and early-warning indicators;
- escalation thresholds;
- strengthened technology controls;
- improved supplier resilience;
- enhanced physical security;
- alternative operating capability;
- workforce resilience;
- clearer executive decision protocols;
- pre-agreed stakeholder coordination;
- improved regulatory intelligence;
- scenario-specific playbooks; and
- targeted crisis exercises.
The prevention strategy should be directly connected to the scenarios identified through the CRA.
This establishes traceability between **identified crisis exposure and management action**.
#### **[![\[Banner\] \[Title\] \[CM\] \[E3\] Part 2\_ Crisis Response Strategy](https://no-cache.hubspot.com/cta/default/3893111/118cae05-ad59-4fd4-9a2e-d021183d5e97.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/118cae05-ad59-4fd4-9a2e-d021183d5e97)CMS 1-2 — Crisis Response Strategy**
Not every crisis can be prevented.
BDCB therefore requires a defined Crisis Response Strategy that establishes how strategic management will be organised once an event meets the threshold for crisis activation.
The strategy should address:
- crisis escalation and activation;
- Crisis Management Team mobilisation;
- strategic leadership;
- situation assessment;
- establishment of crisis priorities;
- decision-making under uncertainty;
- stakeholder coordination;
- government and institutional liaison, where applicable;
- crisis communications;
- resource prioritisation;
- strategic oversight of operational response teams;
- maintenance of decision and action logs;
- transition to recovery; and
- eventual stand-down.
The Crisis Management Team should focus on strategic consequences and decisions rather than attempting the technical work of specialist response teams.
For example, during a cyber crisis, cybersecurity specialists should investigate and contain the technical incident.
The Crisis Management Team should address wider questions such as organisational priorities, stakeholder consequences, regulatory engagement, public confidence, resource allocation, and strategic recovery decisions.
#### **How the Seven Implementation Components Work Together**
The implementation sequence establishes a traceable path from risk identification to crisis preparedness.
| Stage | Key Question | Output |
| --- | --- | --- |
| CRA 1-1 | What could threaten BDCB? | Threat catalogue |
| CRA 1-2 | How could those threats develop into crises? | Crisis scenario catalogue |
| CRA 1-3 | Which technology threats require specific attention? | Technology threat catalogue |
| CRA 2-1 | What prevents or controls these scenarios? | Treatment and control assessment |
| CRA 3-1 | How significant is the remaining exposure? | Impact and likelihood assessment |
| CMS 1-1 | What should BDCB do to prevent escalation? | Crisis Prevention Strategy |
| CMS 1-2 | How should BDCB manage the crisis if it occurs? | Crisis Response Strategy |
This traceability is important.
A Crisis Response Strategy should not exist without understanding the scenarios it is intended to address.
Likewise, a high-risk crisis scenario should not remain in the CRA without corresponding consideration of prevention and response measures.
#### Training-Led Implementation Approach
This eBook forms part of the **value-added complementary support** provided to organisations undertaking BCM Institute's training-led Crisis Management implementation approach.
The approach recognises a practical implementation challenge: participants may understand Crisis Management concepts during training but still struggle to convert those concepts into completed organisational documents after returning to the workplace.
#### **[![\[OR\] \[BCM\] \[CM\] \[E1\] BCM Institute Training-Led Implementation Approach](https://no-cache.hubspot.com/cta/default/3893111/b5bb56a5-de62-4593-947c-845b2b21f30b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b5bb56a5-de62-4593-947c-845b2b21f30b)**
Instead of providing only blank CRA and CMS templates, the training-led implementation approach combines:
**Learning** — participants develop the required Crisis Management knowledge and competencies.
**Application** — participants apply the methodology to their own organisation during exercises and assignments.
**Contextualisation** — participants populate the working templates with scenarios, threats, controls, and strategies relevant to their organisation.
**Review** — stakeholders can review, challenge, and improve outputs.
**Implementation** — validated outputs provide a foundation for the organisation's formal Crisis Management programme.
For organisations attending BCM Institute's certification or competency-based Crisis Management courses, this approach helps bridge the gap between **training and actual organisational implementation**.
#### **Why Completed Templates Are Provided**
A central feature of this eBook is the provision of **completed CRA and CMS templates containing organisation-contextualised content**.
This is intentional.
An empty template tells a participant **what information to enter**. A contextualised example demonstrates **how the methodology can be applied to the organisation**.
For BDCB, the blogs and implementation materials therefore provide draft content relating to its central-bank environment, rather than generic examples from unrelated industries.
This offers several practical benefits:
| Benefit | Value to BDCB |
| --- | --- |
| Faster implementation | Teams begin with contextualised draft content rather than a blank document. |
| Improved understanding | Participants can see how CM concepts translate into actual CRA and CMS entries. |
| Greater consistency | Different teams apply a common methodology and terminology. |
| Better workshop discussions | Stakeholders can challenge specific proposed content rather than discussing CM only at a conceptual level. |
| Knowledge transfer | Training outputs become practical organisational implementation resources. |
| Implementation continuity | Course exercises can continue into the organisation's formal CM project. |
| Evidence of development | Completed and subsequently approved records demonstrate a structured implementation process. |
The templates are therefore **starting points, not substitutes for management validation**.
BDCB should review all proposed content against its actual organisation structure, risk profile, technology, controls, escalation arrangements, and governance requirements before formal adoption.
#### **Using This eBook During a BDCB CM Project**
The recommended implementation approach is to use each chapter as a working document during facilitated workshops.
The relevant BDCB subject-matter experts should:
- **Review** the proposed entries.
- **Confirm** whether they accurately reflect BDCB.
- **Modify** assumptions that do not reflect actual operating arrangements.
- **Add** missing threats, scenarios, controls or strategies.
- **Assign** appropriate owners.
- **Validate** existing controls and supporting evidence.
- **Assess** impact and likelihood using the approved methodology.
- **Agree** required Crisis Prevention and Response Strategies.
- **Escalate** material gaps requiring management decisions or investment.
- **Approve and maintain** the final outputs through the established CM governance process.
This process converts the eBook from a training resource into a practical implementation aid.
#### **Expected Outputs from eBook 3**
After completing the implementation exercise, BDCB should have a structured set of draft or approved CM artefacts.
| Deliverable | Expected Result |
| --- | --- |
| Threat Register | Organisation-specific catalogue of credible threats |
| Crisis Scenario Register | Defined scenarios requiring strategic Crisis Management consideration |
| Technology Threat Register | Specific cyber and technology-related crisis exposures |
| Treatment and Control Register | Existing and proposed measures mapped to identified exposures |
| CRA Assessment | Impact and likelihood evaluation of relevant crisis scenarios |
| Crisis Prevention Strategy | Measures for reducing the likelihood or severity of crisis escalation |
| Crisis Response Strategy | Strategic framework for managing an activated crisis |
| Gap and Action Register | Identified deficiencies requiring remediation |
| Implementation Evidence | Workshop outputs, decisions, approvals, and supporting records |
These outputs can subsequently support the development or enhancement of the **Crisis Management Plan, crisis communications arrangements, scenario exercises, Crisis Management Team training, and continuous improvement programme**.
#### **Important Implementation Principle**
The objective of eBook 3 is not to create a Crisis Management programme that exists only in documentation.
Effective Crisis Management requires BDCB to demonstrate that:
- relevant threats have been identified;
- credible crisis scenarios have been developed;
- controls are understood and validated;
- significant exposures are assessed;
- prevention strategies are actionable;
- response strategies are understood by decision-makers;
- the Crisis Management Team can mobilise;
- stakeholders can be coordinated;
- strategic decisions can be made under pressure; and
- the arrangements can be demonstrated through exercises.
The programme's quality is therefore determined not by the number of completed templates, but by whether BDCB can use them effectively when confronted with an uncertain and rapidly evolving crisis.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/f30f87c8-3f40-4c34-aa24-a9d3bbab9443)
**Starting Your Crisis Management Implementation for Brunei Darussalam Central Bank** is the practical implementation component of the three-eBook series *Crisis Management in Action: A Practical Implementation Guide for BDCB*.
eBook 1 establishes an understanding of BDCB and its organisational context. eBook 2 explains how to implement the Crisis Management Planning Methodology.
eBook 3 converts that foundation into practical working outputs, focusing particularly on **Phase 2 — Crisis Scenario Risk Assessment** and **Phase 4 — Crisis Management Strategy**.
This implementation focus is especially relevant to BDCB because its responsibilities extend beyond its internal operations.
Its official mandate encompasses monetary policy, currency issuance, financial-sector regulation and supervision, payment-system oversight, financial stability, and development of the financial-services sector.
The completed CRA and CMS templates provided through this eBook are intended to accelerate implementation.
They give BDCB participants contextualised content to review and refine, rather than requiring implementation to begin with blank templates.
This reflects the purpose of BCM Institute's **training-led implementation approach**: connecting professional training with practical organisational implementation.
The desired outcome is not simply a completed Crisis Management document.
It is a **validated, exercised, and sustainable Crisis Management capability** that enables BDCB's leadership to recognise an emerging crisis, understand its potential consequences, make timely strategic decisions, coordinate the required response, and protect the institution's critical responsibilities and stakeholder confidence.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/3aefb2d2-3110-47c1-ad4f-d3e6e5381066)
[![\[CM\] \[BDCB\] \[3/4 Banner\] Crisis Management in Action\_ A Practical Implementation Guide for BDCB](https://no-cache.hubspot.com/cta/default/3893111/b3d8c34f-d579-45e8-aba7-c04de5f90bb2.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b3d8c34f-d579-45e8-aba7-c04de5f90bb2)
| **eBook 3: Starting Your Crisis Management Implementation** | | | |
| --- | --- | --- | --- |
| **\[E3\] \[C1\]** | **\[CRA\] \[P1-1\]** | **\[CRA\] \[P1-2\]** | **\[CRA\] \[P1-3\]** |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/df0f5f56-faed-4a31-bbf2-b179293ee699) | [![\[CM\] \[BDCB\] \[E3\] \[CRA\] \[P1-1\] List of Threats](https://no-cache.hubspot.com/cta/default/3893111/aca43cda-9319-49d4-81cf-9ec36c6c6ab6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/aca43cda-9319-49d4-81cf-9ec36c6c6ab6) | [![\[CM\] \[BDCB\] \[E3\] \[CRA\] \[P1-3\] List of Crisis Scenarios \[Technology\] ](https://no-cache.hubspot.com/cta/default/3893111/883a9c65-15e5-408d-a406-3835732e8f16.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/883a9c65-15e5-408d-a406-3835732e8f16) | [![\[CM\] \[BDCB\] \[E3\] \[CRA\] \[P1-3\] List of Crisis Scenarios \[Technology\] ](https://no-cache.hubspot.com/cta/default/3893111/883a9c65-15e5-408d-a406-3835732e8f16.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/883a9c65-15e5-408d-a406-3835732e8f16) |
| **\[CRA\] \[P2\]** | **\[CRA\] \[P3\]** | **\[CMS\] \[P1\]** | **\[CMS\] \[P2\]** |
| [![\[CM\] \[BDCB\] \[E3\] \[RAR\] \[P2\] Treatment and Control](https://no-cache.hubspot.com/cta/default/3893111/a122225c-4e8c-435a-8268-4e24d1d834bf.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a122225c-4e8c-435a-8268-4e24d1d834bf) | [![\[CM\] \[BDCB\] \[E3\] \[CRA\] \[P3\] Risk Impact and Likelihood Assessment](https://no-cache.hubspot.com/cta/default/3893111/7a44ac98-15cf-427b-b8fa-011061502369.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7a44ac98-15cf-427b-b8fa-011061502369) | [![\[CM\] \[BDCB\] \[E3\] \[CMS\] \[P1\] Crisis Prevention Strategy](https://no-cache.hubspot.com/cta/default/3893111/8e764d9a-b2ac-4551-b953-7f5bec6e662d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8e764d9a-b2ac-4551-b953-7f5bec6e662d) | [![\[CM\] \[BDCB\] \[E3\] \[CMS\] \[P2\] Crisis Response Strategy](https://no-cache.hubspot.com/cta/default/3893111/0dacc52b-d723-44a2-999f-66752a10d897.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0dacc52b-d723-44a2-999f-66752a10d897) |
| | | | |
More Information About Crisis Management Blended/ Hybrid Learning Courses
To learn more about the course and schedule, click the buttons below for CM-300 Crisis Management Implementer \[CM-3\] and CM-5000 Crisis Management Expert Implementer \[CM-5\].
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/5ffecd2d-8000-4805-b5e3-e9ead2e259cc) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c3546220-6c76-4a10-8c76-4040b94e09e5) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/03294547-1df3-435c-9243-971c3d9bb6ce) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/b29594fe-d44a-4ff8-8160-03f7ce454385) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/dd120e7f-9fe2-49ed-ad24-489b81c06739) | [![\[BL-CM\] \[5\] Register](https://no-cache.hubspot.com/cta/default/3893111/82024308-16f4-4491-98be-818a882c6286.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/82024308-16f4-4491-98be-818a882c6286) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c8aaf76b-4c0b-402a-ad12-c8aff24eb911) | Please feel free to send us a note if you have any questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/30bcbbbf-c8ea-48d8-8643-da2638f3f0f8) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/83d00c12-c51c-4476-9902-69f9b7667a91) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/672d2949-6233-4b26-ad42-ae0dd0a1a3ac) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3ca6f50d-a3c5-41b8-8da2-26feb8a7613e) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/en/ebook-cm/author/moh-heng-goh"
},
"dateModified" : "2026-10-08T11:16:14.204Z",
"datePublished" : "2026-10-07T08:25:04.000Z",
"headline" : "[CM] [BDCB] [E3] [C1] Starting Your CM Implementation",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/en/ebook-cm/cm-bdcb-e3-c1-starting-your-cm-implementation",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```