---
title: [CM] [OCBC] [E1] [C9] Pre-Crisis - Risk Identification and Crisis Preparedness
description: [CM] [OCBC] [E1] [C9] Pre-Crisis - Risk Identification and Crisis Preparedness
image: https://blog.bcm-institute.org/hubfs/OCBC%20CM%20Graphic%20Folder/OCBC%20CM%20E1%20Morepost/%5BCM%5D%20%5BOCBC%5D%20%5BE1%5D%20%5BC9%5D%20Pre-Crisis%20-%20Risk%20Identification%20and%20Crisis%20Preparedness.jpg
---
.
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Ebook Series
# \[CM\] \[OCBC\] \[E1\] \[C9\] Pre-Crisis - Risk Identification and Crisis Preparedness
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/638c0235-8e02-44a4-8263-3e69c648c706)
The pre-crisis phase is the foundation of an effective crisis management framework for OCBC Bank. It focuses on anticipating, identifying, and preparing for potential crises that could threaten the Bank’s operations, reputation, and regulatory compliance.
Aligned with ISO 22361:2022, this phase emphasises proactive measures — such as risk identification, crisis assessment, scenario planning, and establishing early warning mechanisms — that enable OCBC Bank to respond effectively when a crisis unfolds.
Through structured risk management, OCBC ensures resilience by embedding crisis preparedness into its enterprise-wide governance and operational culture.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/981cfdd3-4d91-4cec-b657-2b6feaa7ef76)
[Moh Heng Goh](https://blog.bcm-institute.org/en/ebook-cm/author/moh-heng-goh) Nov 14, 2025
###### Crisis Management Certified Planner-Specialist-Expert
##### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/93d7fcf1-0d3a-47b4-86fd-b3f5952d2cd9)
### Chapter 9
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/981cfdd3-4d91-4cec-b657-2b6feaa7ef76)
#### Introduction
[![\[CM\] \[OCBC\] \[E1\] \[C9\] Pre-Crisis - Risk Identification and Crisis Preparedness](https://no-cache.hubspot.com/cta/default/3893111/13e83667-454e-4a17-8cd2-50273d2f86df.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/13e83667-454e-4a17-8cd2-50273d2f86df)
The pre-crisis phase is the foundation of an effective crisis management framework for OCBC Bank. It focuses on anticipating, identifying, and preparing for potential crises that could threaten the Bank’s operations, reputation, and regulatory compliance.
Aligned with ISO 22361:2022, this phase emphasises proactive measures — such as risk identification, crisis assessment, scenario planning, and establishing early warning mechanisms — that enable OCBC Bank to respond effectively when a crisis unfolds.
Through structured risk management, OCBC ensures resilience by embedding crisis preparedness into its enterprise-wide governance and operational culture.
#### 1. Identifying Potential Crises Affecting OCBC Bank
The first step in the pre-crisis phase is the systematic identification of potential crises that could disrupt OCBC Bank’s ability to operate or maintain stakeholder confidence.
Given OCBC’s size, regional presence, and diversified financial services, the Bank faces a wide range of potential crises spanning internal and external sources. These include operational disruptions, cyber incidents, reputational risks, regulatory breaches, and macroeconomic shocks.
##### 1.1 Categories of Potential Crises
OCBC Bank classifies potential crises into major categories for effective monitoring and management:
| Category | Examples of Potential Crises |
| --- | --- |
| Natural | Pandemics (e.g., COVID-19), floods, earthquakes, or regional haze affecting branch operations and staff safety. |
| Technological | Cyberattacks, core banking system failures, data breaches, or prolonged IT service outages. |
| Operational | Payment system failures, ATM cash shortages, or disruptions to key business services. |
| Reputational | Negative media coverage, customer data leakage, or social media backlash. |
| Regulatory and Compliance | Non-compliance with MAS or international financial regulations, AML/CFT breaches, or governance failures. |
| Security and Physical Threats | Terrorism, physical security breaches at branches or data centers, and theft. |
| Financial and Economic | Market volatility, liquidity crises, or global financial instability are impacting investor confidence. |
##### 1.2 Continuous Identification Mechanisms
- Enterprise Risk Management (ERM) integration – linking crisis identification to OCBC’s overall risk management processes.
- Regular horizon scanning – using intelligence from regulators, industry associations, and global partners to detect emerging risks.
- Stakeholder engagement – gathering input from business units, compliance, IT security, and corporate communications to identify weak points.
#### 2. Crisis Risk Assessment and Categorisation
Once potential crises are identified, OCBC Bank performs a Crisis Risk Assessment (CRA) to determine which events could escalate into full-scale crises.
This assessment aligns with ISO 22361’s guidance on risk-based crisis management and involves evaluating both likelihood and impact severity.
##### 2.1 Risk Assessment Criteria
| Criterion | Description |
| --- | --- |
| Likelihood | The probability that a given crisis will occur, based on historical data, trend analysis, and intelligence. |
| Impact Severity | The potential effect on OCBC’s critical business services, financial stability, customer trust, and reputation. |
| Speed of Onset | How quickly a crisis may unfold once triggered. |
| Duration and Recovery Complexity | The expected length and difficulty of restoring normal operations. |
| Stakeholder Impact | The degree to which customers, employees, regulators, and investors will be affected. |
##### 2.2 Crisis Risk Categorisation
Following the assessment, potential crises are categorized into priority levels for preparedness planning:
| Crisis Category | Impact Level | Preparedness Action |
| --- | --- | --- |
| High-Risk (Critical) | Severe financial, reputational, or regulatory damage | Comprehensive contingency plans, leadership simulations, and resource allocation. |
| Medium-Risk | Moderate disruption to operations | Functional-level response plans and staff awareness programs. |
| Low-Risk | Minimal or localized effect | Basic mitigation measures and monitoring. |
This categorisation ensures that OCBC allocates resources proportionately, focusing on high-impact crises that could threaten its strategic objectives and regulatory obligations.
#### 3. Scenario Planning and Contingency Planning
Scenario planning allows OCBC Bank to anticipate how various crises might unfold and evaluate its capacity to respond effectively. It goes beyond traditional risk analysis by exploring “what-if” situations that stress-test OCBC’s resilience.
##### 3.1 Scenario Planning Objectives
- Understand potential chain reactions and interdependencies across business units.
- Test decision-making under uncertainty and stress.
- Identify critical thresholds where incidents escalate into crises.
- Strengthen preparedness across functional areas (e.g., technology, treasury, communications).
##### 3.2 Developing Crisis Scenarios
OCBC Bank develops detailed crisis scenarios for simulation and readiness exercises. Examples include:
- Cybersecurity Breach Scenario: A major data exfiltration incident compromising customer data.
- Regulatory Non-Compliance Scenario: MAS-imposed sanctions due to reporting errors.
- Liquidity Shock Scenario: A sudden withdrawal surge triggered by market rumors.
- Reputational Crisis Scenario: Viral misinformation affecting customer trust.
##### 3.3 Contingency Planning
For each crisis scenario, OCBC develops Crisis Contingency Plans (CCPs) that define:
- Activation criteria (when to escalate from incident to crisis).
- Roles and responsibilities of the Crisis Management Team (CMT).
- Alternative communication channels and decision-making protocols.
- Resource and vendor support plans for critical dependencies (e.g., IT vendors, telecommunications).
These plans are reviewed periodically and tested through crisis simulation exercises to ensure operational readiness.
#### 4. Early Warning Systems and Crisis Indicators
Early warning systems form OCBC’s first line of defense in detecting anomalies before they evolve into crises. ISO 22361 emphasizes the need for early detection, monitoring, and escalation mechanisms within the organization’s crisis management system.
##### 4.1 Establishing Early Warning Indicators (EWIs)
OCBC Bank identifies and monitors Crisis Indicators that signal the potential onset of a crisis. These include:
- Operational Indicators: Repeated system downtime, ATM outages, or failed transactions.
- Financial Indicators: Unusual liquidity fluctuations, significant credit defaults, or sudden market volatility.
- Reputational Indicators: Negative spikes in social media sentiment, customer complaints, or press coverage.
- Compliance Indicators: Regulatory inquiries, audit findings, or breach reports.
- Cybersecurity Indicators: Unauthorized network access attempts or alerts from threat intelligence systems.
##### 4.2 Detection and Escalation Mechanisms
- Automated Monitoring Systems: Real-time dashboards in IT and risk departments track anomalies.
- Incident Escalation Protocols: Clear escalation paths from operational units to the Crisis Management Team.
- Crisis Communication Alerts: Internal and external communication protocols triggered when thresholds are breached.
- Cross-Functional Coordination: Integration of information from Risk, Compliance, IT, and Corporate Communications for faster situational awareness.
##### 4.3 Review and Continuous Improvement
The effectiveness of early warning systems is reviewed through:
- Periodic audits and after-action reviews post-incident.
- Feedback loops between operational teams and crisis leaders.
- Benchmarking against MAS regulatory requirements and industry standards.
### [![\[Summary\] \[CM\] \[E1\] \[C9\] Pre-Crisis - Risk Identification and Crisis Preparedness](https://no-cache.hubspot.com/cta/default/3893111/d9982046-32d9-47ce-a0d4-990cca0e43f0.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d9982046-32d9-47ce-a0d4-990cca0e43f0)
The Pre-Crisis Phase of OCBC Bank’s Crisis Management Framework lays the groundwork for organizational resilience by embedding foresight, structured planning, and proactive detection into daily operations.
By integrating risk identification, assessment, scenario planning, and early warning mechanisms, OCBC Bank ensures that it remains prepared to face crises swiftly, decisively, and in full alignment with ISO 22361 and Monetary Authority of Singapore (MAS) expectations.
In essence, crisis preparedness is not a one-time activity but a continuous discipline — one that strengthens OCBC Bank’s capacity to protect its stakeholders and sustain trust even in the face of uncertainty.
| ###### Leading Through Crisis: Implementing Crisis Management at OCBC Bank | | | | | | |
| --- | --- | --- | --- | --- | --- | --- |
| **eBook 1: Understanding Your Organisation** | | | | | | |
| **C1** | **C2** | **C3** | **C4** | **C5** | **C5A** | ** C6** |
| [![\[CM\] \[OCBC\] \[E1\] \[C1\] Overview of Case Study](https://no-cache.hubspot.com/cta/default/3893111/f8733ff5-aa7d-4021-91d0-3187963e8991.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f8733ff5-aa7d-4021-91d0-3187963e8991) | [![\[CM\] \[OCBC\] \[E1\] \[C2\] Understanding Your Organisation](https://no-cache.hubspot.com/cta/default/3893111/8e12bafd-9f43-4ed0-8864-06baadffc179.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8e12bafd-9f43-4ed0-8864-06baadffc179) | [![\[CM\] \[OCBC\] \[E1\] \[C3\] Establishing CM Goals](https://no-cache.hubspot.com/cta/default/3893111/fce8c7bd-339f-41ff-bd42-c61e08dc636d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fce8c7bd-339f-41ff-bd42-c61e08dc636d) | [![\[CM\] \[OCBC\] E1\] \[C4\] CM Vs BCM](https://no-cache.hubspot.com/cta/default/3893111/ffeb2d19-1f8a-4465-8f8a-d935814a4cb5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ffeb2d19-1f8a-4465-8f8a-d935814a4cb5) | [![\[CM\] \[OCBC\] E1\] \[C12\] Identifying the Types of Crisis Scenarios](https://no-cache.hubspot.com/cta/default/3893111/f3a161a9-d1a0-49e9-b862-d822a00f5cbd.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f3a161a9-d1a0-49e9-b862-d822a00f5cbd) | [![\[CM\] \[OCBC\] \[E1\] \[C5A\] Technological Crisis Scenarios](https://no-cache.hubspot.com/cta/default/3893111/9b85bc45-98cb-4018-9fb5-59950e8b30c1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9b85bc45-98cb-4018-9fb5-59950e8b30c1) | [![\[CM\] \[OCBC\] \[E1\] \[C6\] Assessing Risks and Threats](https://no-cache.hubspot.com/cta/default/3893111/b033e0c2-3734-4ca5-9d74-608f08e665fb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b033e0c2-3734-4ca5-9d74-608f08e665fb) |
| **C7** | **C8** | **C9** | **C10** | **C11** | **C12** | **C13** |
| [![\[CM\] \[OCBC\] \[E1\] \[C7\] Composing the CM Team](https://no-cache.hubspot.com/cta/default/3893111/87753afa-e9d3-440f-923c-b20fc4099da1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/87753afa-e9d3-440f-923c-b20fc4099da1) | [![\[CM\] \[OCBC\] \[E1\] \[C8\] Implementing the CM Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/e52524db-7b68-4fe5-8318-0d9db0adcc83.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/e52524db-7b68-4fe5-8318-0d9db0adcc83) | [![\[CM\] \[OCBC\] \[E1\] \[C9\] Pre-Crisis - Risk Identification and Crisis Preparedness](https://no-cache.hubspot.com/cta/default/3893111/13e83667-454e-4a17-8cd2-50273d2f86df.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/13e83667-454e-4a17-8cd2-50273d2f86df) | [![\[CM\] \[OCBC\] \[E1\] \[C10\] During Crisis - Crisis Response and Decision-Making](https://no-cache.hubspot.com/cta/default/3893111/3230fad3-54bf-48de-b64a-3f234825bbfc.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3230fad3-54bf-48de-b64a-3f234825bbfc) | [![\[CM\] \[OCBC\] \[E1\] \[C11\] Post Crisis - Crisis Recovery](https://no-cache.hubspot.com/cta/default/3893111/b654ecbb-f54d-45ac-9b1b-f32b420f6da1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b654ecbb-f54d-45ac-9b1b-f32b420f6da1) | [![\[CM\] \[OCBC\] E1\] \[C12\] Summary and Strategic Outlook](https://no-cache.hubspot.com/cta/default/3893111/3d091197-bf80-4d70-9068-7c2405469b37.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3d091197-bf80-4d70-9068-7c2405469b37) | [![\[CM\] \[OCBC\] \[E1\] \[C13\] \[Back Cover\] CM eBook 1](https://no-cache.hubspot.com/cta/default/3893111/dcc396cb-a1cc-4346-a387-05f80915d949.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/dcc396cb-a1cc-4346-a387-05f80915d949) |
| | | | | | | |
#### More Information About Crisis Management Blended/ Hybrid Learning Courses
To learn more about the course and schedule, click the buttons below for the CM-300 Crisis Management Implementer \[CM-3\] and the CM-5000 Crisis Management Expert Implementer \[CM-5\].
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/5ffecd2d-8000-4805-b5e3-e9ead2e259cc) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c3546220-6c76-4a10-8c76-4040b94e09e5) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/03294547-1df3-435c-9243-971c3d9bb6ce) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/b29594fe-d44a-4ff8-8160-03f7ce454385) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/dd120e7f-9fe2-49ed-ad24-489b81c06739) | [![\[BL-CM\] \[5\] Register](https://no-cache.hubspot.com/cta/default/3893111/82024308-16f4-4491-98be-818a882c6286.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/82024308-16f4-4491-98be-818a882c6286) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c8aaf76b-4c0b-402a-ad12-c8aff24eb911) | Please feel free to send us a note if you have any questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/30bcbbbf-c8ea-48d8-8643-da2638f3f0f8) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/83d00c12-c51c-4476-9902-69f9b7667a91) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/672d2949-6233-4b26-ad42-ae0dd0a1a3ac) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3ca6f50d-a3c5-41b8-8da2-26feb8a7613e) |
### Your Comments Here:
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/en/ebook-cm/author/moh-heng-goh"
},
"dateModified" : "2025-11-14T06:46:26.352Z",
"datePublished" : "2025-11-14T03:10:57.000Z",
"headline" : "[CM] [OCBC] [E1] [C9] Pre-Crisis - Risk Identification and Crisis Preparedness",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/en/ebook-cm/cm-ocbc-e1-c9-pre-crisis-risk-identification-and-crisis-preparedness",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```