Introduction
![[CM] [WH] [E3] [RAR] [T3] Risk Impact and Likelihood Assessment](https://no-cache.hubspot.com/cta/default/3893111/b9fb5156-f384-4658-a1f3-7a7b9dcab86d.png)
The Risk Impact and Likelihood Assessment (RAR) builds upon the threats identified in Part 1: CRA – List of Threats/ Crisis Scenarios by evaluating the potential consequences and probability of each scenario.
For Woodland's Health, this process is essential to determine which threats pose the most significant risk to service continuity, patient safety, and organisational resilience.
By assessing each crisis scenario across multiple impact areas—finance, operations, legal and regulatory compliance, reputation, social responsibility, people, and assets/IT systems—this chapter provides a quantitative basis for prioritising preparedness and response measures.
Each risk is scored on its potential severity and likelihood, producing a Risk Rating and Risk Level classification. The assessment also considers the expected period of disruption, enabling more precise contingency planning.
This structured analysis ensures that resources are allocated to the most critical vulnerabilities, supports decision-making at both operational and leadership levels, and aligns with the National Healthcare Group’s risk management framework as well as Singapore’s broader national resilience objectives.
Part 3: RAR – Risk Impact and Likelihood Assessment for Woodland's Health (Categorised by Crisis Types)
Crisis Type |
Type of Crisis Scenario |
Finance |
Operations |
Legal & Regulatory |
Reputation & Image |
Social Responsibility |
People |
Assets / IT Systems / Information |
Risk Impact Area (Highest Numeric Score) |
Risk Likelihood (1–5) |
Risk Rating (Impact × Likelihood) |
Risk Level |
Expected Period of Disruption |
Denial of Access – Natural Disaster |
Flooding |
3 |
5 |
3 |
4 |
4 |
4 |
3 |
Operations (5) |
3 |
15 |
High |
1–3 days |
Denial of Access – Natural Disaster |
Severe Haze |
3 |
4 |
3 |
4 |
5 |
4 |
2 |
Social Responsibility (5) |
4 |
20 |
Extreme |
1–2 weeks |
Denial of Access – Natural Disaster |
Extreme Weather (Storms / Lightning) |
2 |
4 |
2 |
3 |
3 |
3 |
3 |
Operations (4) |
3 |
12 |
Medium |
Hours – 2 days |
Denial of Access – Man-made Disaster |
Terrorist Attack / Bomb Threat |
4 |
5 |
5 |
5 |
5 |
5 |
4 |
People (5) |
2 |
10 |
Medium |
1–5 days |
Denial of Access – Man-made Disaster |
Civil Unrest |
3 |
4 |
3 |
4 |
4 |
4 |
3 |
Operations (4) |
2 |
8 |
Medium |
1–3 days |
Unavailability of People |
Pandemic / Infectious Disease |
4 |
5 |
4 |
5 |
5 |
5 |
3 |
People (5) |
5 |
25 |
Extreme |
Weeks – Months |
Unavailability of People |
Mass Casualty Event in the Region |
3 |
5 |
4 |
4 |
5 |
5 |
3 |
People (5) |
3 |
15 |
High |
Days – Weeks |
Disruption to the Supply Chain |
Medical Supplies Shortage |
4 |
5 |
4 |
4 |
5 |
4 |
3 |
Operations (5) |
4 |
20 |
Extreme |
1–4 weeks |
Disruption to the Supply Chain |
Food Supply Interruption |
3 |
4 |
3 |
4 |
5 |
4 |
2 |
Social Responsibility (5) |
3 |
15 |
High |
1–5 days |
Equipment and IT-Related Disruption |
Power Outage |
4 |
5 |
4 |
4 |
4 |
4 |
5 |
Assets/IT (5) |
3 |
15 |
High |
Hours – 2 days |
Equipment and IT-Related Disruption |
IT System Failure / Cyberattack |
4 |
5 |
5 |
4 |
4 |
4 |
5 |
Assets/IT (5) |
4 |
20 |
Extreme |
1–7 days |
Equipment and IT-Related Disruption |
Medical Equipment Failure |
3 |
4 |
3 |
4 |
4 |
4 |
5 |
Assets/IT (5) |
3 |
15 |
High |
1–3 days |
Risk Rating Guide
Risk Level bands (example guidance notes based on BCM Institute)
How to use this template
- Impact Area Ratings: Score each of the seven categories from 1 (Very Low) to 5 (Very High).
- Highest Impact: Select the highest score among those seven.
- Likelihood: Assign a 1–5 rating based on your organisation's experience/frequency
- Assign Risk Level based on the rating’s band.
- Expected Disruption: Estimate downtime using organisational intelligence and context.
Conclusion
The RAR findings highlight the varied scale and nature of risks facing Woodlands Health—from high-frequency operational disruptions to rare but high-impact events that could significantly affect the organisation’s ability to deliver care.
Scenarios such as pandemics, IT system failures, and critical supply shortages emerged with the highest risk ratings, reinforcing the need for robust mitigation measures, redundancy planning, and crisis response readiness.
By quantifying both impact and likelihood, this chapter transforms the earlier threat list into a prioritised, evidence-based risk register.
This enables Woodlands Health to channel investments, training, and contingency resources toward the areas of greatest vulnerability.
The CAR is not a one-off exercise; it should be reviewed periodically and updated in light of new data, evolving threats, and lessons learned from exercises or real incidents.
Maintaining an up-to-date risk profile is a critical step in ensuring that Woodlands Health remains prepared, responsive, and resilient in the face of emerging challenges.
More Information About Crisis Management Blended/ Hybrid Learning Courses
To learn more about the course and schedule, click the buttons below for the CM-300 Crisis Management Implementer [CM-3] and the CM-5000 Crisis Management Expert Implementer [CM-5].