For Woodlands Hospital, this process is essential to determine which threats pose the greatest risk to service continuity, patient safety, and organisational resilience.
By assessing each crisis scenario across multiple impact areas—finance, operations, legal and regulatory compliance, reputation, social responsibility, people, and assets/IT systems—this chapter provides a quantitative basis for prioritising preparedness and response measures.
Each risk is scored for its potential severity and likelihood, resulting in a Risk Rating and Risk Level classification. The assessment also considers the expected period of disruption, enabling more precise contingency planning.
This structured analysis ensures that resources are allocated to the most critical vulnerabilities, supports decision-making at both operational and leadership levels, and aligns with the National Healthcare Group’s risk management framework and Singapore’s broader national resilience objectives.
Below is the [CRA] Part 3: Risk Impact and Likelihood Assessment table for the Woodlands Hospital, derived from the earlier [CRA] Part 1-1: List of Threats and aligned with BCM Institute / BCMpedia risk analysis methodology.
Table Below: Notes for BCM Institute's Course Participants: This is the template for completing the "[CRA] Part 3: Risk Impact and Likelihood Assessment."
|
Crisis Type |
Type of Crisis Scenario |
Finance |
Operations |
Legal & Regulatory |
Reputation & Image |
Social Responsibility |
People |
Assets / IT Systems / Information |
Risk Impact Area (Highest Numeric Score) |
Risk Likelihood (1–5) |
Risk Rating (Impact × Likelihood) |
Risk Level |
Expected Period of Disruption |
|
Denial of Access – Natural Disaster |
Flooding |
3 |
5 |
3 |
4 |
4 |
4 |
3 |
Operations (5) |
3 |
15 |
High |
1–3 days |
|
Severe Haze |
3 |
4 |
3 |
4 |
5 |
4 |
2 |
Social Responsibility (5) |
4 |
20 |
Extreme |
1–2 weeks |
|
|
Extreme Weather (Storms / Lightning) |
2 |
4 |
2 |
3 |
3 |
3 |
3 |
Operations (4) |
3 |
12 |
Medium |
Hours – 2 days |
|
|
Terrorist Attack / Bomb Threat |
4 |
5 |
5 |
5 |
5 |
5 |
4 |
People (5) |
2 |
10 |
Medium |
1–5 days |
|
|
Civil Unrest |
3 |
4 |
3 |
4 |
4 |
4 |
3 |
Operations (4) |
2 |
8 |
Medium |
1–3 days |
|
|
Unavailability of People
|
Pandemic / Infectious Disease |
4 |
5 |
4 |
5 |
5 |
5 |
3 |
People (5) |
5 |
25 |
Extreme |
Weeks – Months |
|
Mass Casualty Event in the Region |
3 |
5 |
4 |
4 |
5 |
5 |
3 |
People (5) |
3 |
15 |
High |
Days – Weeks |
|
|
Disruption to the Supply Chain
|
Medical Supplies Shortage |
4 |
5 |
4 |
4 |
5 |
4 |
3 |
Operations (5) |
4 |
20 |
Extreme |
1–4 weeks |
|
Food Supply Interruption |
3 |
4 |
3 |
4 |
5 |
4 |
2 |
Social Responsibility (5) |
3 |
15 |
High |
1–5 days |
|
|
Equipment and IT-Related Disruption |
Power Outage |
4 |
5 |
4 |
4 |
4 |
4 |
5 |
Assets/IT (5) |
3 |
15 |
High |
Hours – 2 days |
|
IT System Failure / Cyberattack |
4 |
5 |
5 |
4 |
4 |
4 |
5 |
Assets/IT (5) |
4 |
20 |
Extreme |
1–7 days |
|
|
Medical Equipment Failure |
3 |
4 |
3 |
4 |
4 |
4 |
5 |
Assets/IT (5) |
3 |
15 |
High |
1–3 days |
Risk Rating Guide
Risk Level bands (example guidance notes based on BCM Institute)
How to use this template
The RAR findings highlight the varied scale and nature of risks facing Woodlands Hospital—from high-frequency operational disruptions to rare but high-impact events that could significantly affect the organisation’s ability to deliver care.
Scenarios such as pandemics, IT system failures, and critical supply shortages received the highest risk ratings, underscoring the need for robust mitigation measures, redundancy planning, and crisis response readiness.
By quantifying both impact and likelihood, this chapter transforms the earlier threat list into a prioritised, evidence-based risk register.
This enables Woodlands Health to channel investments, training, and contingency resources toward the areas of greatest vulnerability.
The CAR is not a one-off exercise; it should be reviewed periodically and updated in light of new data, evolving threats, and lessons learned from exercises or real incidents.
Maintaining an up-to-date risk profile is critical to ensuring that Woodlands Health remains prepared, responsive, and resilient in the face of emerging challenges.
| eBook 3: Starting Your Crisis Management Implementation | |||
To learn more about the course and schedule, click the buttons below for the CM-300 Crisis Management Implementer [CM-3] and the CM-5000 Crisis Management Expert Implementer [CM-5].
|
Please feel free to send us a note if you have any questions. |
||