---
title: [CM] [BDCB] [E3] [CRA] [P1-2] List of Crisis Scenarios [Natural and Man-made]
description: [CM] [BDCB] [E3] [CRA] [P1-2] List of Crisis Scenarios [Natural and Man-made]
image: https://blog.bcm-institute.org/hubfs/BDCB%20Graphic%20Folder/BDCB%20CM%20Graphic%20Folder/BDCB%20CM%20E3%20Morepost/%5BCM%5D%20%5BBDCB%5D%20%5BE3%5D%20%5BCRA%5D%20%5BP1-2%5D%20List%20of%20Crisis%20Scenarios%20%5BNatural%20and%20Man-made%5D.jpg
---
.
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Crisis Management in Action: A Practical Implementation Guide for BDCB
# \[CM\] \[BDCB\] \[E3\] \[CRA\] \[P1-2\] List of Crisis Scenarios \[Natural and Man-made\]
[![\[CM\] \[BDCB\] \[Full Banner\] Crisis Management in Action\_ A Practical Implementation Guide for BDCB](https://no-cache.hubspot.com/cta/default/3893111/399bc296-6bd2-4c03-8819-8bfe517a3e07.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/399bc296-6bd2-4c03-8819-8bfe517a3e07)
**CRA Part 1-2 — List of Crisis Scenarios \[Natural and Man-made\] for Brunei Darussalam Central Bank (BDCB)** builds on **CRA Part 1-1 — List of Threats** by translating individual threats into defined crisis scenarios for crisis risk assessment, preparedness, response planning, and exercises.
The distinction is important.
A **threat** is a potential source of disruption or harm, such as flooding, cyberattack, workplace violence, or financial distress.
A **crisis scenario** describes how that initiating threat could develop into a situation requiring strategic management intervention because of its severity, uncertainty, cross-functional consequences, stakeholder pressure, or wider implications.
BDCB needs this broader perspective because it conducts monetary policy, issues and manages Brunei currency, and regulates and supervises banks and other financial institutions.
[![\[Banner\] \[Title\] \[CM\] \[E3\] Part 1-2: List of Crisis Scenarios \[Natural and Man-made\]](https://no-cache.hubspot.com/cta/default/3893111/fda49fd7-aa89-4a17-a128-69ea6f19f9d2.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fda49fd7-aa89-4a17-a128-69ea6f19f9d2)
[Moh Heng Goh](https://blog.bcm-institute.org/en/ebook-cm/author/moh-heng-goh) Oct 7, 2026
###### Crisis Management Certified Planner-Specialist-Expert
##### [![\[CM\] \[BDCB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/062c8304-1699-4f7b-a38d-f128d9815304.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/062c8304-1699-4f7b-a38d-f128d9815304)
**[![\[Banner\] \[Title\] \[CM\] \[E3\] Part 1-2: List of Crisis Scenarios \[Natural and Man-made\]](https://no-cache.hubspot.com/cta/default/3893111/fda49fd7-aa89-4a17-a128-69ea6f19f9d2.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fda49fd7-aa89-4a17-a128-69ea6f19f9d2)**
### **List of Crisis Scenarios \[Natural and Man-made\] for Brunei Darussalam Central Bank**
#### **Introduction**
**[![\[CM\] \[BDCB\] \[E3\] \[CRA\] \[P1-2\] List of Crisis Scenarios \[Natural and Man-made\]](https://no-cache.hubspot.com/cta/default/3893111/029d6134-feb9-446e-884c-562eb4fd8e70.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/029d6134-feb9-446e-884c-562eb4fd8e70)CRA Part 1-2 — List of Crisis Scenarios \[Natural and Man-made\] for Brunei Darussalam Central Bank (BDCB)** builds on **CRA Part 1-1 — List of Threats** by translating individual threats into defined crisis scenarios for crisis risk assessment, preparedness, response planning, and exercises.
The distinction is important.
A **threat** is a potential source of disruption or harm, such as flooding, cyberattack, workplace violence, or financial distress.
A **crisis scenario** describes how that initiating threat could develop into a situation requiring strategic management intervention because of its severity, uncertainty, cross-functional consequences, stakeholder pressure, or wider implications.
BDCB needs this broader perspective because it conducts monetary policy, issues and manages Brunei's currency, and regulates and supervises banks and other financial institutions.
Its objectives also include financial system stability and establishing and running efficient payment systems.
BDCB operates Brunei Darussalam's National Payment and Settlement Systems (NPSS), comprising the **Real-Time Gross Settlement (RTGS), Automated Clearing House (ACH), and Central Securities Depository (CSD)**.
BDCB describes safe, reliable, and efficient financial-market infrastructures as key components that support financial stability and economic growth.
Consequently, this chapter's scenarios consider not only direct disruption to BDCB but also circumstances that could affect financial institutions, payment and settlement activities, market confidence, consumers, and the wider financial system.
The scenarios are divided into two broad groups:
**Natural Crisis Scenarios** — originating primarily from natural, environmental, or biological events.
**Man-made Crisis Scenarios** — originating from human action, organisational behaviour, malicious activity, technology, infrastructure, financial-system events, or third-party failure.
The scenarios are **illustrative planning scenarios**, not statements that these events have occurred at BDCB.
#### **Natural Crisis Scenarios**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Natural Disaster | Major Flood | Prolonged flooding affects roads, utilities, and telecommunications, preventing employees, suppliers, or emergency services from accessing BDCB premises. | Yes | Yes |
| Natural Disaster | Flash Flood | Rapid flooding creates immediate life-safety concerns, restricts access, and potentially damages BDCB facilities or supporting infrastructure. | Yes | Yes |
| Severe Weather | Severe Rain / Thunderstorm | Intense rainfall and thunderstorms can disrupt transport, electricity, telecommunications, and workplace operations at the same time. | Yes | Yes |
| Severe Weather | Lightning Event | Lightning damages electrical or communications infrastructure and causes technology or power disruptions that affect critical BDCB operations. | Yes | Yes |
| Severe Weather | Strong Wind / Windstorm | Strong winds damage facilities, utilities, or telecommunications and make travel or workplace access unsafe. | Yes | Yes |
| Severe Weather | Tropical Storm / Severe Weather System | A regional weather event produces combined wind, rain, flooding, infrastructure, and workforce disruption over an extended period. | Yes | Yes |
| Environmental | Severe Haze / Poor Air Quality | Air quality deteriorates sufficiently to affect employee health and require reduced on-site operations or remote working. | Yes | Yes |
| Geophysical | Earthquake / Regional Seismic Event | Significant regional seismic activity creates structural concerns, evacuation requirements, and disruption of supporting infrastructure. | Yes | Yes |
| Geophysical | Landslide | Ground movement disrupts roads, utilities, or other infrastructure required to access or support BDCB facilities. | Yes | Yes |
| Environmental | Extreme Heat | Abnormally high temperatures place prolonged pressure on power and cooling infrastructure and affect employee health and technology operations. | Yes | Yes |
| Natural Disaster | Natural Fire / Wildfire | A significant external fire creates smoke, poor air quality, road closures, evacuations, or infrastructure disruptions that affect BDCB. | Yes | Yes |
| Biological | Infectious Disease Outbreak | A significant communicable disease outbreak causes substantial employee absenteeism or requires workplace restrictions. | Yes | Yes |
| Biological | Pandemic | A widespread disease simultaneously affects BDCB, financial institutions, suppliers, public agencies, and national workforce availability. | Yes | Yes |
| Regional Natural Disaster | Cross-Border Natural Disaster | A major disaster outside Brunei disrupts international telecommunications, technology providers, logistics, or other dependencies supporting BDCB and the financial sector. | Yes | Yes |
#### **Man-made Crisis Scenarios — Confrontation**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Confrontation | Public Protest Outside BDCB | A significant protest develops around the BDCB premises, affecting access, employee safety, and normal operations. | Yes | Yes |
| Confrontation | Picketing / Blockade | Protesters obstruct entrances or transport routes, preventing employees, visitors, or suppliers from accessing BDCB. | Limited | Yes |
| Confrontation | Occupation / Sit-in | Protesters occupy or refuse to leave BDCB-controlled premises, requiring security and senior-management intervention. | Limited | Yes |
| Confrontation | Confrontation Following Regulatory Action | A financial institution or affected stakeholder strongly challenges BDCB supervisory, enforcement, or regulatory action. | Limited | Yes |
| Confrontation | Consumer / Public Backlash | Public dissatisfaction concerning a financial-sector issue escalates into sustained criticism, complaints, demonstrations, or demands for BDCB intervention. | Yes | Yes |
| Confrontation | Coordinated Online Campaign | Organised digital activism targets BDCB's policies, reputation, or communications and escalates into a significant stakeholder-management issue. | Yes | Yes |
#### **Man-made Crisis Scenarios — Malevolence**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Malevolence | Terrorist / Hostile Attack | A deliberate hostile act targets BDCB, the financial sector, or supporting national infrastructure, causing casualties or major disruption. | Yes | Yes |
| Malevolence | Bomb Threat | A credible explosive threat requires evacuation and security cordons and interrupts critical operations. | Yes | Yes |
| Malevolence | Explosion | A deliberate explosion causes casualties, physical damage, denial of access, and major stakeholder concern. | Yes | Yes |
| Malevolence | Physical Sabotage | A malicious actor deliberately damages BDCB facilities, equipment, or infrastructure. | Limited | Yes |
| Malevolence | Major Cyberattack | A malicious actor compromises critical technology, resulting in significant operational, information-security, or financial-sector consequences. | Yes | Yes |
| Malevolence | Ransomware / Cyber Extortion | Attackers encrypt systems, steal information, or threaten disclosure, resulting in prolonged technology disruption and extortion demands. | Yes | Yes |
| Malevolence | Cyber Espionage | A sophisticated actor gains unauthorised access to sensitive supervisory, financial, monetary, or strategic information. | Yes | Yes |
| Malevolence | Malicious Data Manipulation | A sophisticated actor gains unauthorised access to sensitive supervisory, financial, monetary, or strategic information. | Yes | Yes |
| Malevolence | Threat Against Senior Management / Employees | A credible threat against BDCB personnel requires protective measures and may affect organisational decision-making or operations. | Limited | Yes |
| Malevolence | Extortion / Blackmail | A malicious party threatens harm, disruption, or disclosure of sensitive information unless demands are satisfied. | Limited | Yes |
#### **Man-made Crisis Scenarios — Organisational Misdeeds**
##### **Skewed Management Values**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Organisational Misdeeds — Skewed Management Values | Failure to Consider Stakeholder Interests | Significant decisions inadequately consider consequences for employees, financial institutions, consumers, or other stakeholders, resulting in escalating criticism or loss of confidence. | Limited | Yes |
| Organisational Misdeeds — Skewed Management Values | Resilience Neglected in Decision-Making | Management decisions result in insufficient resilience of critical functions and contribute to a preventable major disruption. | No | Yes |
| Organisational Misdeeds — Skewed Management Values | Public Interest Concerns | A significant decision is perceived as inconsistent with BDCB's public-interest or financial-system responsibilities. | Yes | Yes |
| Organisational Misdeeds — Skewed Management Values | Risk Culture Breakdown | Employees become reluctant to escalate material risks or challenge decisions, allowing a significant problem to develop into a crisis. | No | Yes |
##### **Deception**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Organisational Misdeeds — Deception | Concealment of Material Information | Significant risk, incident, or governance information is intentionally withheld from decision-makers or legitimate stakeholders. | Limited | Yes |
| Organisational Misdeeds — Deception | Misrepresentation of Information | Material information is deliberately presented inaccurately, creating governance and credibility consequences. | Limited | Yes |
| Organisational Misdeeds — Deception | Manipulation of Reports / Records | Financial, operational, supervisory, or management information is deliberately altered or falsified. | Limited | Yes |
| Organisational Misdeeds — Deception | Misleading Public Communication | An inaccurate or misleading official communication creates significant public, financial-sector, or reputational consequences. | Yes | Yes |
| Organisational Misdeeds — Deception | Concealment of Major Incident | An organisation intentionally withholds a significant operational, cyber, financial, or conduct event until consequences escalate. | Limited | Yes |
##### **Management Misconduct**
| **Crisis Type** | **Type of Crisis Scenario** | **Description of Crisis Scenario** | **Country Level** | **Organisation Level** |
| --- | --- | --- | --- | --- |
| **Organisational Misdeeds — Management Misconduct** | **Major Fraud** | Serious fraudulent activity involving personnel or associated parties causes financial, governance, or reputational consequences. | Limited | Yes |
| **Organisational Misdeeds — Management Misconduct** | **Corruption / Bribery** | Allegations or evidence of improper influence create legal, governance, and institutional confidence consequences. | Yes | Yes |
| **Organisational Misdeeds — Management Misconduct** | **Abuse of Authority** | Serious misuse of official authority creates employee, governance, legal or stakeholder consequences. | Limited | Yes |
| **Organisational Misdeeds — Management Misconduct** | **Conflict-of-Interest Crisis** | Undisclosed or improperly managed interests undermine the credibility of important organisational decisions. | Limited | Yes |
| **Organisational Misdeeds — Management Misconduct** | **Misuse of Confidential Information** | Sensitive information is deliberately disclosed or exploited without authority, creating significant legal or reputational consequences. | Limited | Yes |
#### **Man-made Crisis Scenarios — Workplace Violence**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Workplace Violence | Physical Assault | An employee, contractor, visitor, or member of the public physically attacks an individual at BDCB premises. | Limited | Yes |
| Workplace Violence | Armed Intruder | An armed individual enters or attempts to enter BDCB premises, creating an immediate life-safety crisis. | Limited | Yes |
| Workplace Violence | Credible Threat of Violence | A credible threat against employees, management, or BDCB facilities requires emergency security measures. | Limited | Yes |
| Workplace Violence | Employee-on-Employee Violence | An internal dispute escalates into serious threats or physical violence. | No | Yes |
| Workplace Violence | Violent Visitor / Member of Public | A dissatisfied or unstable visitor becomes violent or threatening within BDCB premises. | Limited | Yes |
| Workplace Violence | Hostage Situation | Employees or visitors are unlawfully detained, requiring police intervention and strategic crisis management. | Limited | Yes |
#### **Man-made Crisis Scenarios — Rumours and Misinformation**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Rumours / Misinformation | False Rumour About BDCB | False information concerning BDCB's operations, leadership, or stability spreads and damages stakeholder confidence. | Yes | Yes |
| Rumours / Misinformation | False Rumour About Financial System Stability | Misinformation alleges serious instability across Brunei's financial sector and causes public concern. BDCB has an explicit objective to ensure financial system stability. | Yes | Yes |
| Rumours / Misinformation | False Rumour About Currency | False information concerning the Brunei Dollar, currency availability, or monetary arrangements generates public concern. | Yes | Yes |
| Rumours / Misinformation | False Rumour About Bank Failure | Unverified claims that a financial institution is failing trigger customer concern or abnormal withdrawal behaviour. | Yes | Yes |
| Rumours / Misinformation | False Rumour About Payment-System Failure | Misinformation alleges that the national payment infrastructure is unavailable, compromised, or unsafe. | Yes | Yes |
| Rumours / Misinformation | Deepfake of BDCB Official | AI-generated or manipulated content falsely portrays a BDCB official making a significant policy or crisis announcement. | Yes | Yes |
| Rumours / Misinformation | Fake BDCB Announcement / Impersonation | Fraudulent websites, social-media accounts, notices, or messages imitate official BDCB communications. | Yes | Yes |
#### **Man-made Crisis Scenarios — Lack of Funds and Financial-System Stress**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Lack of Funds | Liquidity Stress at a Financial Institution | A supervised institution experiences serious funding pressure requiring heightened BDCB monitoring and possible intervention within its authority. | Yes | Yes |
| Lack of Funds | Solvency Crisis at a Financial Institution | Severe financial deterioration raises concerns regarding an institution's ability to meet its obligations. | Yes | Yes |
| Lack of Funds | Bank Run / Rapid Withdrawal Event | Customers rapidly withdraw or transfer funds because of actual or perceived concerns regarding a financial institution. | Yes | Yes |
| Lack of Funds | Multiple Financial Institutions Under Stress | Financial difficulties affect several institutions simultaneously, creating broader financial-stability concerns. | Yes | Yes |
| Lack of Funds | Market Liquidity Disruption | Financial-market conditions impair normal access to funding or liquidity. | Yes | Yes |
| Lack of Funds | Settlement Liquidity Shortage | A participant has insufficient settlement liquidity to meet time-sensitive payment obligations. | Yes | Yes |
| Lack of Funds | Financial Contagion | Financial distress or loss of confidence spreads from one institution or market segment to others. | Yes | Yes |
| Lack of Funds | Critical Supplier Financial Failure | Financial failure of a strategically important supplier threatens the continued delivery of services BDCB requires. | Limited | Yes |
BDCB's published objectives include financial-system stability, while its monetary operations include facilities supporting banks' liquidity management.
#### **Man-made Crisis Scenarios — Facilities and Critical Infrastructure**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Facilities / Infrastructure | Major Building Fire | Fire causes evacuation, casualties, facility damage, and prolonged denial of access. | Limited | Yes |
| Facilities / Infrastructure | Hazardous Material Incident | A chemical, gas, or other hazardous release requires evacuation or shelter-in-place. | Yes | Yes |
| Facilities / Infrastructure | Major Transport Accident Near BDCB | A serious transport incident results in casualties, road closures, or an emergency exclusion zone affecting BDCB. | Yes | Yes |
| Facilities / Infrastructure | Prolonged Power Failure | Electricity remains unavailable beyond the effective duration of backup-power arrangements. | Yes | Yes |
| Facilities / Infrastructure | Water / Utility Failure | Failure of an essential utility makes the BDCB premises unsuitable for continued occupation. | Yes | Yes |
| Facilities / Infrastructure | Telecommunications Infrastructure Failure | Major telecommunications failure disrupts communications between BDCB, employees, financial institutions, and other stakeholders. | Yes | Yes |
| Facilities / Infrastructure | Building Structural Failure | Structural damage or engineering concerns require immediate evacuation and prolonged closure. | Limited | Yes |
#### **Man-made Crisis Scenarios — Technology and Cyber**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Technology / Cyber | Critical Hardware Failure | Failure of servers, storage, network, or other infrastructure disrupts one or more critical BDCB services. | Limited | Yes |
| Technology / Cyber | Critical Application Failure | A major application becomes unavailable or produces unreliable results. | Limited | Yes |
| Technology / Cyber | Network Failure | BDCB loses critical internal, external, or inter-site connectivity. | Limited | Yes |
| Technology / Cyber | Major Cyberattack | Malicious activity compromises multiple systems or critical services and requires senior management coordination. | Yes | Yes |
| Technology / Cyber | Ransomware Crisis | Malware encrypts systems or steals information and prevents critical services from operating normally. | Yes | Yes |
| Technology / Cyber | DDoS Crisis | Internet-facing systems or communications are overwhelmed and become unavailable. | Yes | Yes |
| Technology / Cyber | Data Integrity Crisis | Critical information is corrupted or manipulated, and BDCB cannot confidently rely upon systems or transaction records. | Limited | Yes |
| Technology / Cyber | Major Data Breach | Sensitive financial, supervisory, operational, or personnel information is exposed. | Limited | Yes |
| Technology / Cyber | Data Centre Failure | The failure of a technology facility makes multiple systems unavailable simultaneously. | Limited | Yes |
| Technology / Cyber | Disaster Recovery / Failover Failure | Primary technology fails, and the designated recovery environment cannot restore the required services. | Limited | Yes |
| Technology / Cyber | Failed Technology Change | A major system, software, infrastructure, or configuration change causes widespread disruption. | Limited | Yes |
| Technology / Cyber | Authentication / Identity Failure | Employees cannot access critical applications because authentication or identity services are unavailable. | Limited | Yes |
| Technology / Cyber | Capacity / Performance Crisis | Exceptional processing volumes severely degrade critical systems. | Limited | Yes |
#### **Man-made Crisis Scenarios — Payment and Settlement Systems**
Payment and settlement scenarios warrant separate treatment because BDCB operates the NPSS.
RTGS handles large-value and urgent interbank payments, ACH provides bulk clearing, and CSD supports electronic registration and maintenance of government debt securities and associated settlement activities.
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Payment / Settlement | RTGS System Crisis | RTGS becomes unavailable or unreliable, disrupting large-value and urgent interbank payments. | Yes | Yes |
| Payment / Settlement | ACH System Crisis | ACH becomes unavailable, delaying bulk clearing and associated settlement activity. | Yes | Yes |
| Payment / Settlement | CSD System Crisis | CSD disruption affects securities records, transfers, auctions, settlement, or collateral-management functionality. | Yes | Yes |
| Payment / Settlement | Combined RTGS and ACH Failure | Simultaneous or cascading failures prevent normal clearing and settlement across multiple payment processes. | Yes | Yes |
| Payment / Settlement | Payment Data Integrity Crisis | Transaction or settlement records become unreliable, requiring processing to be suspended until integrity is confirmed. | Yes | Yes |
| Payment / Settlement | Participant Connectivity Crisis | Multiple financial institutions cannot connect reliably to the critical payment infrastructure. | Yes | Yes |
| Payment / Settlement | Settlement Liquidity Crisis | One or more participants cannot meet settlement obligations, creating wider payment-flow concerns. | Yes | Yes |
| Payment / Settlement | Prolonged National Payment Disruption | A combination of technology, telecommunications, liquidity, or participant problems materially disrupts payment and settlement activity. | Yes | Yes |
BDCB describes RTGS as the heart of a modern national payment system and notes that, as a systemically important payment system, it must remain reliable, robust, and resilient even during market crises.
#### **Man-made Crisis Scenarios — Supply Chain and Third Parties**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| Supply Chain / Third Party | Critical Technology Vendor Failure | A specialist technology provider can no longer maintain or restore services essential to BDCB. | Limited | Yes |
| Supply Chain / Third Party | Telecommunications Provider Crisis | A major provider outage interrupts the connectivity required for BDCB operations. | Yes | Yes |
| Supply Chain / Third Party | Critical ICT / Cloud Provider Outage | A major externally provided technology service becomes unavailable for an extended period. | Yes | Yes |
| Supply Chain / Third Party | Cyberattack on Critical Supplier | A third-party cyber incident disrupts BDCB services or compromises information. | Yes | Yes |
| Supply Chain / Third Party | Critical Equipment Supplier Failure | Essential replacement equipment or specialist technical resources cannot be obtained. | Limited | Yes |
| Supply Chain / Third Party | Logistics Disruption | Transportation problems prevent the delivery of critical equipment, supplies, or other resources. | Yes | Yes |
| Supply Chain / Third Party | Supplier Financial Failure | A critical supplier becomes financially unable to continue providing essential services. | Limited | Yes |
| Supply Chain / Third Party | Common Supplier / Concentration Crisis | A shared provider fails, disrupting BDCB and several financial institutions. | Yes | Yes |
#### **Man-made Crisis Scenarios — People**
| Crisis Type | Type of Crisis Scenario | Description of Crisis Scenario | Country Level | Organisation Level |
| --- | --- | --- | --- | --- |
| People | Loss of Key Appointment Holder | A senior executive or specialist suddenly becomes unavailable, affecting critical decisions or operations. | No | Yes |
| People | Multiple Critical Employees Unavailable | A critical function falls below its minimum staffing requirement. | Limited | Yes |
| People | Loss of Specialist Capability | Critical institutional knowledge or technical expertise becomes unavailable without adequate replacement. | No | Yes |
| People | Transport Disruption Affecting Workforce | Large numbers of employees cannot reach the BDCB premises. | Yes | Yes |
| People | Major Workplace Accident | A serious workplace incident results in casualties and operational disruption. | Limited | Yes |
| People | Mass Casualty / National Emergency | A national emergency simultaneously affects employee availability, welfare, and supporting services. | Yes | Yes |
#### **From Threat to Crisis Scenario**
CRA Part 1-1 and CRA Part 1-2 perform related but different functions.
**CRA Part 1-1 — List of Threats** identifies the initiating threats: flood, cyberattack, power failure, workplace violence, liquidity stress, and similar hazards.
**CRA Part 1-2 — List of Crisis Scenarios** considers how those threats could escalate into situations requiring strategic crisis management.
For example, a cyberattack is initially a threat. It becomes a crisis scenario when the consequences begin to affect critical operations, payment infrastructure, information integrity, financial institutions, stakeholders or public confidence.
Similarly, flooding becomes more than a facilities incident when widespread disruption affects employees, telecommunications, technology, financial institutions, and BDCB's ability to perform critical responsibilities.
#### **Cascading Crisis Scenarios**
For a central bank, the most useful scenarios often test **cascading consequences rather than a single isolated event**.
##### **Natural Crisis Escalation**
**Severe Flooding → Premises and Transport Disruption → Workforce and Telecommunications Constraints → Critical BDCB Functions Affected → Financial Institutions Affected → Payment or Currency Availability Concerns → Public and Media Attention → Multi-Dimensional Crisis**
##### **Cyber Crisis Escalation**
**Cyberattack → Critical Systems Compromised → Operational Disruption → Data Integrity Uncertainty → Payment / Supervisory Activities Affected → Financial-Institution Concern → Public and Media Attention → Confidence Impact → Strategic Crisis**
##### **Financial Crisis Escalation**
**Financial Institution Under Severe Stress → Customer Concern → Rapid Withdrawals → Liquidity Pressure → Market and Media Attention → Potential Contagion → Financial-Stability Concern → BDCB Strategic Crisis Management**
##### **Rumour Crisis Escalation**
**False Information Appears Online → Rapid Social-Media Distribution → Public Concern → Increased Financial-Institution Enquiries → Changes in Customer Behaviour → Media Attention → Confidence Risk → BDCB Crisis Communication and Strategic Response**
Convert these four sequences into **four separate professional diagrams** for the eBook rather than retaining the text-arrow versions.
#### **Selecting Scenarios for Crisis Preparedness**
Not every scenario requires an individual crisis-management plan. BDCB should instead identify representative, severe but plausible scenarios that can test multiple capabilities simultaneously.
Scenario selection should consider the potential for:
- loss of life or serious employee-safety consequences;
- prolonged disruption of critical central-bank functions;
- disruption of payment or settlement activities;
- loss of access to critical technology or information;
- uncertainty concerning data or transaction integrity;
- simultaneous disruption of several financial institutions;
- financial contagion or loss of market confidence;
- significant media and public attention;
- major stakeholder communication requirements;
- cross-government or multi-agency coordination; and
- strategic decisions requiring senior-management authority.
The objective is not to predict the exact next crisis. It is to ensure that BDCB develops **adaptable decision-making, coordination, communication, and recovery capabilities** that remain effective across different crisis types.
#### **Relationship with CRA Part 1-1, Part 2, and Part 3**
CRA Part 1-2 sits between basic threat identification and detailed risk analysis.
The overall CRA process can therefore be represented as:
**CRA Part 1-1 — Identify Threats → CRA Part 1-2 — Develop Crisis Scenarios → CRA Part 2 — Determine Treatment and Controls → CRA Part 3 — Assess Impact and Likelihood → Determine Residual Risk → Prioritise Improvements → Exercise Severe but Plausible Scenarios → Review and Improve**
Present this sequence as a standalone professional CRA lifecycle diagram rather than as text arrows.
[![Banner \[CM\] \[Summing Up\] \[E3\] \[CRA\] \[P1-2\] List of Crisis Scenarios](https://no-cache.hubspot.com/cta/default/3893111/0b39136b-caa1-43ea-bd65-cd33b90c2bfc.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0b39136b-caa1-43ea-bd65-cd33b90c2bfc)
**CRA Part 1-2 — List of Crisis Scenarios \[Natural and Man-made\] for Brunei Darussalam Central Bank** converts the threat inventory established in CRA Part 1-1 into scenarios that can be analysed, treated, planned for, and exercised.
The catalogue separates scenarios into **Natural** and **Man-made** origins while recognising that a real crisis may cross several categories.
Natural scenarios include severe weather, flooding, environmental events, seismic events, and biological emergencies.
Man-made scenarios encompass confrontation, malevolence, organisational misdeeds, workplace violence, misinformation, financial-system stress, facilities and infrastructure, technology and cyber, payment and settlement systems, supply-chain failures, and people-related events.
This broader approach is especially important for BDCB. Its responsibilities include monetary policy, currency issuance and management, supervision of financial institutions, financial system stability, and efficient payment systems.
BDCB also operates RTGS, ACH, and CSD as part of Brunei Darussalam's National Payment and Settlement Systems.
The central question for CRA Part 1-2 is therefore:
**“How could an initiating threat escalate into a crisis that requires strategic management by BDCB?”**
For each scenario, BDCB should consider not only the immediate event but also its potential **secondary and cascading consequences**. A natural disaster could become a workforce, technology and payment crisis.
A cyberattack could become an information-integrity and confidence crisis. Financial stress at one institution could evolve into wider contagion. False information could alter public behaviour before the underlying facts are established.
Once validated, the scenarios in CRA Part 1-2 bridge **threat identification to crisis preparedness** and feed into **CRA Part 2 — Treatment and Control, CRA Part 3 — Risk Impact and Likelihood Assessment, crisis escalation criteria, response playbooks, crisis communication planning, and scenario exercises**.
**[![\[CM\] \[BDCB\] \[3/4 Banner\] Crisis Management in Action\_ A Practical Implementation Guide for BDCB](https://no-cache.hubspot.com/cta/default/3893111/b3d8c34f-d579-45e8-aba7-c04de5f90bb2.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b3d8c34f-d579-45e8-aba7-c04de5f90bb2)**
| **eBook 3: Starting Your CM Implementation** | | | |
| --- | --- | --- | --- |
| \[RAR\] \[P1-1\] | \[RAR\] \[P1-2\] | \[RAR\] \[P1-3\] | \[RAR\] \[P2\] |
| [![\[CM\] \[BDCB\] \[E3\] \[CRA\] \[P1-1\] List of Threats](https://no-cache.hubspot.com/cta/default/3893111/aca43cda-9319-49d4-81cf-9ec36c6c6ab6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/aca43cda-9319-49d4-81cf-9ec36c6c6ab6) | [![\[CM\] \[BDCB\] \[E3\] \[CRA\] \[P1-2\] List of Crisis Scenarios \[Natural and Man-made\]](https://no-cache.hubspot.com/cta/default/3893111/029d6134-feb9-446e-884c-562eb4fd8e70.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/029d6134-feb9-446e-884c-562eb4fd8e70) | [![\[CM\] \[BDCB\] \[E3\] \[CRA\] \[P1-3\] List of Crisis Scenarios \[Technology\] ](https://no-cache.hubspot.com/cta/default/3893111/883a9c65-15e5-408d-a406-3835732e8f16.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/883a9c65-15e5-408d-a406-3835732e8f16) | [![\[CM\] \[BDCB\] \[E3\] \[RAR\] \[P2\] Treatment and Control](https://no-cache.hubspot.com/cta/default/3893111/a122225c-4e8c-435a-8268-4e24d1d834bf.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a122225c-4e8c-435a-8268-4e24d1d834bf) |
| \[RAR\] \[P3\] | \[CMS\] \[P1\] | \[CMS\] \[P2\] | eBook 3 |
| [![\[CM\] \[BDCB\] \[E3\] \[CRA\] \[P3\] Risk Impact and Likelihood Assessment](https://no-cache.hubspot.com/cta/default/3893111/7a44ac98-15cf-427b-b8fa-011061502369.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7a44ac98-15cf-427b-b8fa-011061502369) | [![\[CM\] \[BDCB\] \[E3\] \[CMS\] \[P1\] Crisis Prevention Strategy](https://no-cache.hubspot.com/cta/default/3893111/8e764d9a-b2ac-4551-b953-7f5bec6e662d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8e764d9a-b2ac-4551-b953-7f5bec6e662d) | [![\[CM\] \[BDCB\] \[E3\] \[CMS\] \[P2\] Crisis Response Strategy](https://no-cache.hubspot.com/cta/default/3893111/0dacc52b-d723-44a2-999f-66752a10d897.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0dacc52b-d723-44a2-999f-66752a10d897) | [![eBook Cover \[CM\] \[BDCB\] \[E3\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/77f3104a-2f3b-4e2b-a101-9e72c37001c2.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/77f3104a-2f3b-4e2b-a101-9e72c37001c2) |
| | | | |
#### More Information About Crisis Management Blended/ Hybrid Learning Courses
To learn more about the course and schedule, click the buttons below for the CM-300 Crisis Management Implementer \[CM-3\] and the CM-5000 Crisis Management Expert Implementer \[CM-5\].
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/5ffecd2d-8000-4805-b5e3-e9ead2e259cc) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c3546220-6c76-4a10-8c76-4040b94e09e5) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/03294547-1df3-435c-9243-971c3d9bb6ce) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/b29594fe-d44a-4ff8-8160-03f7ce454385) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/dd120e7f-9fe2-49ed-ad24-489b81c06739) | [![\[BL-CM\] \[5\] Register](https://no-cache.hubspot.com/cta/default/3893111/82024308-16f4-4491-98be-818a882c6286.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/82024308-16f4-4491-98be-818a882c6286) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c8aaf76b-4c0b-402a-ad12-c8aff24eb911) | Please feel free to send us a note if you have any questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/30bcbbbf-c8ea-48d8-8643-da2638f3f0f8) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/83d00c12-c51c-4476-9902-69f9b7667a91) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/672d2949-6233-4b26-ad42-ae0dd0a1a3ac) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3ca6f50d-a3c5-41b8-8da2-26feb8a7613e) |
### Your Comments Here:
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/en/ebook-cm/author/moh-heng-goh"
},
"dateModified" : "2026-10-09T08:54:20.457Z",
"datePublished" : "2026-10-07T08:19:32.000Z",
"headline" : "[CM] [BDCB] [E3] [CRA] [P1-2] List of Crisis Scenarios [Natural and Man-made]",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/en/ebook-cm/cm-bdcb-e3-cra-p1-2-list-of-crisis-scenarios-natural-and-man-made",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```