[BCM] [SJ] [E3] [RAR] [T2] Treatment and Control

Part 2: RAR – Treatment and Control

Surbana Jurong Group

This chapter presents the structured approach undertaken by Surbana Jurong (SJ) in identifying, treating, and controlling the risks that may impact its critical business functions.

Building upon the threats identified in Part 1: RAR – List of Threats, this section outlines the corresponding risk treatment strategies, existing controls, and planned measures adopted to ensure the continuity and resilience of operations.

Aligned with ISO 22301 principles and best practices in enterprise risk management, each threat is assessed through the lens of four primary risk treatment methods—risk avoidance, risk reduction, risk transference, and risk acceptance.

The analysis also includes a review of the existing controls that are currently mitigating risks, as well as additional (planned) controls to enhance Surbana Jurong’s risk posture further.

By formalising this treatment and control framework, Surbana Jurong aims to ensure that potential disruptions—from natural disasters to technological failures—are managed systematically, and that proactive measures are in place to reduce business impact and recovery time.

Table: Risk Treatment and Control for Surbana Jurong Group

Threat	Existing Risk Treatment – Risk Avoidance	Existing Risk Treatment – Risk Reduction	Existing Risk Treatment – Risk Transference	Existing Risk Treatment – Risk Acceptance	Existing Controls	Additional (Planned) Controls
Denial of Access – Natural Disaster	Use of resilient‑sustainability design to anticipate environmental changes	Flood‑resilient planning in urban master plans	—	—	Infrastructure designed for robustness and redundancy	Could include backup access routes and alternate sites
Denial of Access – Man‑made Disaster	Designing for physical security and resilience	Incorporating multi‑layered infrastructure protection strategies (deter, detect, deny)	—	—	Security & resilience systems embedded in planning.	Could include enhanced surveillance or tighter access controls
Unavailability of People	—	Use of smart digital spaces and real‑time analytics to reduce dependency on physical staff	—	—	Remote operations and automated facility systems	Could add remote work protocols and cross‑training
Disruption to the Supply Chain	—	Sustainable procurement and design optimising resource availability	—	—	Integrated sustainability and procurement standards	Could include dual sourcing and supplier resilience assessments
Equipment and IT‑Related Disruption	—	Real‑time data analytics for predictive maintenance and operational monitoring	—	—	Smart digital building infrastructure; IoT and sensor‑based FM	Expand IT redundancy and digital failover capabilities

Summary of Inferences

Risk Avoidance: SJ applies principles such as resilient sustainability and climate-adaptive design to sidestep threats from natural disasters.
Risk Reduction: Embedded resilience in infrastructure design, smart monitoring, and sustainability efforts reduces potential impacts across multiple threat categories.
Existing Controls: Across all threat categories, SJ demonstrates controls through digital transformation (e.g., predictive analytics, IoT-based facility management), resilience-focused design, and sustainability-driven procurement.
Missing Elements: There’s no direct public evidence of Risk Transference (e.g., insurance strategies) or Risk Acceptance frameworks—these would need to be confirmed internally.
Planned Controls: Suggested enhancements include access route alternatives, remote staffing strategies, supplier networks, IT redundancy, and risk-sharing mechanisms.

Notes to Populate the Table

Threat: Use the exact wording from your "Part 1: RAR – List of Threats."
Existing Risk Treatment (Avoidance / Reduction / Transference / Acceptance): Mark each treatment that’s already being applied (e.g., you might denote with "Yes" or brief notes).
Existing Controls: Describe what’s already implemented (like systems, protocols, physical controls).
Additional (Planned) Controls: Propose enhancements or future controls that would further mitigate the threat, aligning with strategic goals.

Summing Up ...

The treatment and control of risks are essential components of Surbana Jurong’s business continuity strategy.

Through a comprehensive and methodical risk treatment approach, SJ demonstrates its commitment to safeguarding its people, assets, operations, and clients’ interests across all project and service domains.

This chapter not only highlights the maturity of existing controls but also underscores the importance of continuous improvement.

The additional controls identified serve as a roadmap for strengthening resilience and adapting to the evolving threat landscape.

Ultimately, these measures reinforce Surbana Jurong’s ability to maintain operational stability and service delivery even in the face of adversity.

Business Continuity Planning at Surbana Jurong: A Strategic Approach
eBook 3: Starting Your BCM Implementation
MBCO	P&S	RAR T1	RAR T2	RAR T3	BCS T1	CBF

CBF 1: Project Design and Engineering Services
DP	BIAQ T1	BIAQ T2	BIAQ T3	BCS T2	BCS T3	PD

More Information About Business Continuity Management Courses

To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].