Operational Readiness: Crisis Management Implementation for Woodlands Health
BCM_BB_Marymount_with Cert Logo 15

[CM] [WH] [E3] [CRA] [T3] Risk Impact and Likelihood Assessment

New call-to-action

The Risk Impact and Likelihood Assessment (RAR) builds upon the threats identified in Part 1: CRA – List of Threats/ Crisis Scenarios by evaluating the potential consequences and probability of each scenario.

For Woodland's Health, this process is essential to determine which threats pose the most significant risk to service continuity, patient safety, and organisational resilience.

By assessing each crisis scenario across multiple impact areas—finance, operations, legal and regulatory compliance, reputation, social responsibility, people, and assets/IT systems—this chapter provides a quantitative basis for prioritising preparedness and response measures.

Each risk is scored on its potential severity and likelihood, producing a Risk Rating and Risk Level classification. The assessment also considers the expected period of disruption, enabling more precise contingency planning.

This structured analysis ensures that resources are allocated to the most critical vulnerabilities, supports decision-making at both operational and leadership levels, and aligns with the National Healthcare Group’s risk management framework as well as Singapore’s broader national resilience objectives.

Moh Heng Goh
Crisis Management Certified Planner-Specialist-Expert
New call-to-action

[CM] [E3] [Risk Assessment] Risk Impact and Likelihood Assessment

Introduction

[CM] [WH] [E3] [RAR] [T3] Risk Impact and Likelihood Assessment

The Risk Impact and Likelihood Assessment (RAR) builds upon the threats identified in Part 1: CRA – List of Threats/ Crisis Scenarios by evaluating the potential consequences and probability of each scenario.

For Woodland's Health, this process is essential to determine which threats pose the most significant risk to service continuity, patient safety, and organisational resilience.

By assessing each crisis scenario across multiple impact areas—finance, operations, legal and regulatory compliance, reputation, social responsibility, people, and assets/IT systems—this chapter provides a quantitative basis for prioritising preparedness and response measures.

Each risk is scored on its potential severity and likelihood, producing a Risk Rating and Risk Level classification. The assessment also considers the expected period of disruption, enabling more precise contingency planning.

This structured analysis ensures that resources are allocated to the most critical vulnerabilities, supports decision-making at both operational and leadership levels, and aligns with the National Healthcare Group’s risk management framework as well as Singapore’s broader national resilience objectives.

GN RAR 3-1 Risk Impact and Likelihood Assessment

Part 3: RAR – Risk Impact and Likelihood Assessment for Woodland's Health (Categorised by Crisis Types)

 

Crisis Type

Type of Crisis Scenario

Finance

Operations

Legal & Regulatory

Reputation & Image

Social Responsibility

People

Assets / IT Systems / Information

Risk Impact Area (Highest Numeric Score)

Risk Likelihood (1–5)

Risk Rating (Impact × Likelihood)

Risk Level

Expected Period of Disruption

Denial of Access – Natural Disaster

Flooding

3

5

3

4

4

4

3

Operations (5)

3

15

High

1–3 days

Denial of Access – Natural Disaster

Severe Haze

3

4

3

4

5

4

2

Social Responsibility (5)

4

20

Extreme

1–2 weeks

Denial of Access – Natural Disaster

Extreme Weather (Storms / Lightning)

2

4

2

3

3

3

3

Operations (4)

3

12

Medium

Hours – 2 days

Denial of Access – Man-made Disaster

Terrorist Attack / Bomb Threat

4

5

5

5

5

5

4

People (5)

2

10

Medium

1–5 days

Denial of Access – Man-made Disaster

Civil Unrest

3

4

3

4

4

4

3

Operations (4)

2

8

Medium

1–3 days

Unavailability of People

Pandemic / Infectious Disease

4

5

4

5

5

5

3

People (5)

5

25

Extreme

Weeks – Months

Unavailability of People

Mass Casualty Event in the Region

3

5

4

4

5

5

3

People (5)

3

15

High

Days – Weeks

Disruption to the Supply Chain

Medical Supplies Shortage

4

5

4

4

5

4

3

Operations (5)

4

20

Extreme

1–4 weeks

Disruption to the Supply Chain

Food Supply Interruption

3

4

3

4

5

4

2

Social Responsibility (5)

3

15

High

1–5 days

Equipment and IT-Related Disruption

Power Outage

4

5

4

4

4

4

5

Assets/IT (5)

3

15

High

Hours – 2 days

Equipment and IT-Related Disruption

IT System Failure / Cyberattack

4

5

5

4

4

4

5

Assets/IT (5)

4

20

Extreme

1–7 days

Equipment and IT-Related Disruption

Medical Equipment Failure

3

4

3

4

4

4

5

Assets/IT (5)

3

15

High

1–3 days

Risk Rating Guide

Risk Level bands (example guidance notes based on BCM Institute)

  • Very Low: 1–5
  • Low: 6–9
  • Medium: 10–14
  • High: 15–19
  • Very High: ≥20

How to use this template

  1. Impact Area Ratings: Score each of the seven categories from 1 (Very Low) to 5 (Very High).
  2. Highest Impact: Select the highest score among those seven.
  3. Likelihood: Assign a 1–5 rating based on your organisation's experience/frequency
  4. Assign Risk Level based on the rating’s band.
  5. Expected Disruption: Estimate downtime using organisational intelligence and context.

Conclusion

The RAR findings highlight the varied scale and nature of risks facing Woodlands Health—from high-frequency operational disruptions to rare but high-impact events that could significantly affect the organisation’s ability to deliver care.

Scenarios such as pandemics, IT system failures, and critical supply shortages emerged with the highest risk ratings, reinforcing the need for robust mitigation measures, redundancy planning, and crisis response readiness.

By quantifying both impact and likelihood, this chapter transforms the earlier threat list into a prioritised, evidence-based risk register.

This enables Woodlands Health to channel investments, training, and contingency resources toward the areas of greatest vulnerability.

The CAR is not a one-off exercise; it should be reviewed periodically and updated in light of new data, evolving threats, and lessons learned from exercises or real incidents.

Maintaining an up-to-date risk profile is a critical step in ensuring that Woodlands Health remains prepared, responsive, and resilient in the face of emerging challenges.

 

More Information About Crisis Management Blended/ Hybrid Learning Courses

To learn more about the course and schedule, click the buttons below for the  CM-300 Crisis Management Implementer [CM-3] and the CM-5000 Crisis Management Expert Implementer [CM-5].

New call-to-action New call-to-action New call-to-action
New call-to-action New call-to-action [BL-CM] [5] Register
New call-to-action

Please feel free to send us a note if you have any questions.

Email to Sales Team [BCM Institute]

FAQ BL-CM-5 CM-5000
New call-to-action New call-to-action New call-to-action

Your Comments Here:

 

More Posts

New Call-to-action