[BCM] [SJ] [E3] [RAR] [T2] Treatment and Control

Part 2: RAR – Treatment and Control

Surbana Jurong Group

This chapter presents the structured approach undertaken by Surbana Jurong (SJ) in identifying, treating, and controlling the risks that may impact its critical business functions.

Building upon the threats identified in Part 1: RAR – List of Threats, this section outlines the corresponding risk treatment strategies, existing controls, and planned measures adopted to ensure the continuity and resilience of operations.

Aligned with ISO 22301 principles and best practices in enterprise risk management, each threat is assessed through the lens of four primary risk treatment methods—risk avoidance, risk reduction, risk transference, and risk acceptance.

The analysis also includes a review of the existing controls that are currently mitigating risks, as well as additional (planned) controls to enhance Surbana Jurong’s risk posture further.

By formalising this treatment and control framework, Surbana Jurong aims to ensure that potential disruptions—from natural disasters to technological failures—are managed systematically, and that proactive measures are in place to reduce business impact and recovery time.

Table: Risk Treatment and Control for Surbana Jurong Group

Summary of Inferences

• Risk Avoidance: SJ applies principles such as resilient sustainability and climate-adaptive design to sidestep threats from natural disasters.
• Risk Reduction: Embedded resilience in infrastructure design, smart monitoring, and sustainability efforts reduces potential impacts across multiple threat categories.
• Existing Controls: Across all threat categories, SJ demonstrates controls through digital transformation (e.g., predictive analytics, IoT-based facility management), resilience-focused design, and sustainability-driven procurement.
• Missing Elements: There’s no direct public evidence of Risk Transference (e.g., insurance strategies) or Risk Acceptance frameworks—these would need to be confirmed internally.
• Planned Controls: Suggested enhancements include access route alternatives, remote staffing strategies, supplier networks, IT redundancy, and risk-sharing mechanisms.

Notes to Populate the Table

• Threat: Use the exact wording from your "Part 1: RAR – List of Threats."
• Existing Risk Treatment (Avoidance / Reduction / Transference / Acceptance): Mark each treatment that’s already being applied (e.g., you might denote with "Yes" or brief notes).
• Existing Controls: Describe what’s already implemented (like systems, protocols, physical controls).
• Additional (Planned) Controls: Propose enhancements or future controls that would further mitigate the threat, aligning with strategic goals.

Summing Up ...

The treatment and control of risks are essential components of Surbana Jurong’s business continuity strategy.

Through a comprehensive and methodical risk treatment approach, SJ demonstrates its commitment to safeguarding its people, assets, operations, and clients’ interests across all project and service domains.

This chapter not only highlights the maturity of existing controls but also underscores the importance of continuous improvement.

The additional controls identified serve as a roadmap for strengthening resilience and adapting to the evolving threat landscape.

Ultimately, these measures reinforce Surbana Jurong’s ability to maintain operational stability and service delivery even in the face of adversity.