[CM] [SIT] [E3] [CRA] [P2] Treatment and Control

Introduction

For the Singapore Institute of Technology (SIT), effective crisis readiness requires not only identifying threats but also implementing structured risk treatment and control measures.

In alignment with the BCM methodology referenced in BCMpedia, risk treatment strategies are categorised as Risk Avoidance, Risk Reduction, Risk Transference, and Risk Acceptance, and are supported by existing and planned controls.

As a higher learning institution with distributed campuses, digital learning platforms, industry partnerships, and critical IT infrastructure, SIT must adopt a multi-layered control framework to manage operational disruptions.

Table Below: Notes for BCM Institute's Course Participants: This is the template for completing the "[CRA] Part 2: Treatment and Control."

RAR Risk Treatment and Evaluation of Existing Controls

Part 2: CRA – Treatment and Control for SIT

The table below translates identified threats into actionable treatments and controls tailored to SIT’s academic, administrative, and digital ecosystem.

Table: Risk Treatment and Control

Type of Threats / Crisis Scenarios	Existing Risk Treatment - Risk Avoidance	Existing Risk Treatment - Risk Reduction	Existing Risk Treatment - Risk Transference	Existing Risk Treatment - Risk Acceptance	Existing Controls	Additional (Planned) Controls
Flood (Campus / Facility)	Avoid building critical facilities in flood-prone zones	Installation of drainage systems, flood barriers	Insurance coverage for property damage	Accept minor localised flooding risks	Campus drainage, facility monitoring systems	Smart flood detection sensors, climate risk modelling
Pandemic / Infectious Disease Outbreak	Avoid high-density physical events during outbreaks	Hybrid learning, safe distancing, health protocols	Health insurance, outsourced medical services	Accept manageable absenteeism	Remote learning platforms, health advisories	AI-driven health monitoring, pandemic playbooks
Fire (Campus Buildings / Labs)	Avoid hazardous material mismanagement	Fire suppression systems, drills	Property and liability insurance	Accept residual fire risk	Fire alarms, extinguishers, and evacuation plans	Smart fire detection (IoT), enhanced lab safety controls
Cyberattack (Ransomware / Data Breach)	Avoid the use of insecure systems	Network security, MFA, endpoint protection	Cyber insurance, managed security services	Accept low-level phishing attempts	SOC monitoring, firewalls, and user awareness training	Zero-trust architecture, AI threat detection
IT System Failure (LMS / ERP outage)	Avoid reliance on a single system	System redundancy, backups, and failover systems	Vendor SLAs and outsourcing agreements	Accept short-duration outages	Backup systems, IT support teams	Cloud-native architecture, resilience testing
Power Outage	Avoid reliance on a single power source	Backup generators, UPS systems	Utility service agreements	Accept short disruption	Backup power systems, facility management	Renewable energy integration, microgrid solutions
Supply Chain Disruption (IT equipment / lab materials)	Avoid single supplier dependency	Multi-vendor sourcing, stockpiling critical items	Supplier contracts with penalties	Accept minor delays	Approved vendor list, procurement policies	Supplier risk monitoring, digital supply chain visibility
Loss of Key Personnel (Faculty / IT Staff)	Avoid a single point of dependency	Cross-training, succession planning	Outsourcing / contract staffing	Accept temporary capability gaps	HR policies, training programs	Talent resilience planning, knowledge management systems
Public Transport Disruption (Access to Campus)	Avoid reliance on a single transport route	Flexible schedules, remote work/learning	N/A	Accept commuting delays	Online learning systems, communication channels	Campus decentralisation, digital campus expansion
Laboratory Equipment Failure	Avoid outdated or unsupported equipment	Preventive maintenance, calibration	Vendor maintenance contracts	Accept minor downtime	Maintenance logs, equipment redundancy	Predictive maintenance (IoT), digital twins
Data Centre Outage	Avoid single-site hosting	Geographic redundancy, cloud backup	Cloud service agreements	Accept minimal downtime risk	DR site, data replication	Multi-cloud strategy, automated failover
Terror Threat / Security Incident	Avoid unsecured campus access	Security screening, surveillance systems	Insurance coverage	Accept low probability events	Security personnel, CCTV, access control	Smart surveillance analytics, integrated command centre

Legend

Risk Avoidance: A Strategy to prevent risk from occurring entirely.
Risk Reduction: Minimise the likelihood or impact through controls.
Risk Transference: Shift impact to third parties (e.g., insurers).
Risk Acceptance: Tolerating the risk as part of the business strategy.
Existing Controls: Measures already implemented.
Additional Controls: Planned improvements and new initiatives.

The treatment and control strategies outlined above demonstrate how the Singapore Institute of Technology can systematically strengthen its resilience against a broad spectrum of threats.

By aligning each crisis scenario with appropriate risk treatment options, SIT ensures that risks are either avoided, mitigated, transferred, or consciously accepted within defined tolerance levels.

Importantly, the integration of existing controls with forward-looking planned controls—such as AI-driven monitoring, predictive analytics, and cloud-based resilience—reflects a shift towards proactive and adaptive crisis management.

This approach is essential for SIT as it evolves into a digitally enabled, distributed campus environment.

Ultimately, this structured treatment framework supports SIT’s goal of maintaining operational continuity, safeguarding stakeholders, and sustaining academic excellence, even in the face of increasingly complex and interconnected risks.

eBook 3: Starting Your Crisis Management Implementation
[E3] [C1]	[CRA] [P1-1]	[CRA] [P1-2]	[CRA] [P1-3]

[CRA] [P2]	[CRA] [P3]	[CMS] [P1]	[CMS] [P2]

More Information About Crisis Management Blended/ Hybrid Learning Courses

To learn more about the course and schedule, click the buttons below for the CM-300 Crisis Management Implementer [CM-3] and the CM-5000 Crisis Management Expert Implementer [CM-5].



	Please feel free to send us a note if you have any questions.

Crisis-Ready Campus: A Strategic Framework for Crisis Management at Singapore Institute of Technology

[CM] [SIT] [E3] [CRA] [P2] Treatment and Control

Business Continuity Management Certified Planner-Specialist-Expert

Introduction

Part 2: CRA – Treatment and Control for SIT

More Information About Crisis Management Blended/ Hybrid Learning Courses

Your Comments Here:

More Posts

Crisis-Ready Campus: A Strategic Framework for Crisis Management at Singapore Institute of Technology

[CM] [SIT] [E3] [CRA] [P2] Treatment and Control

Business Continuity Management Certified Planner-Specialist-Expert

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, '7cd96343-be69-4196-84d6-73f1153f1d2f', {"useNewLoader":"true","region":"na1"});

Introduction

Part 2: CRA – Treatment and Control for SIT

More Information About Crisis Management Blended/ Hybrid Learning Courses

Your Comments Here:

More Posts