Part 1: IT RAR - List of Threats v2
IT RAR 1-1: List of Threats
Natural and man-made threats can cause disruption to an organisation’s operations or services. Refer to Sample List of Threats for a comprehensive list of the threats compiled based on this region’s geographical threat profiling. Review, amend and select the threats that have an adverse effect on both the country and the organisation.
This list serves as a set of possible threats that could occur to an organization. It is intended to be used by the various disciplines, starting with business continuity, crisis management, crisis communication and disaster recovery.
Remember to use the Guidance Notes in BCMPedia to source for any other threats. Click to view a comprehensive List of Threats.
IT Disaster Recovery
From this list of threats, the Organization DR Coordinator together with the BC Team (completing this threat assessment template) is required to identify and extract the likely and high-impact threats that will affect your organization. Sometimes, this list of threats may be re-organized into four primary scenarios of internal and external threats: Denial of Access, Unavailability of People, Disruption of Supply Chain, and Equipment and IT-related Disruption.
Denial of Access
Denial of Access includes all threats that will result in the denial of access/availability to people, processes, infrastructure, and partners/suppliers. This could range from a flood keeping you from entering the office premises to a power outage disrupting work. Below is the full list of possible Denial of Access threats:
- Blizzard
- Clouds
- Cyclone
- Drought
- Duststorm
- Flood
- Flash Flood
- Fog/ Haze
- Heat Wave
- Hurricane
- Lightning
- Rain
- Snow
- Thunder
- Tornado
- Tropical storm
- Typhoon
- Weather front
- Water Spout
- Wind
- Wind Storm
- Fire Storm
- Fire - Wild, Rural or Urban
- Terrorism
- Bomb Threat/Explosion
- Power Outage
- Earthquake Tremors
- Labour Dispute/ Strike
- Infectious Disease/ Pandemic
- Workplace Safety
- Workplace Violence
- Loss of Key Appointment Holders
- Mishandling of Hazardous Materials
- Haze
Disruption of Supply Chain
- Loss of Specialized Vendor/ Partner/ Supplier
- Regulatory or Legal Violation
- Default of Key Debtors
- Accidents (i.e. Aviation, Rail, Maritime, Vehicular)
- IT Failure (i.e. Hardware, Software)
- Network Failure (i.e. Local and Wide Network)"
- IT Sabotage
- Telecommunications Failure (phone line)
- Facilities and Equipment Failure (i.e. Air-con, Lift, Transformer, HVAC, UPS, Backup Generator)
Instruction to BL-DR-3/5 M2 Participant
Remember that you are expected to complete and submit the threats (via document downloaded) by keeping those threats that have occurred in your country (C) and Organisation (O).
- On the same page, you are to complete and submit those threats that arise in your organisation but may not have occurred in your country.
- For those in your country and not in your organisation, please strike out or delete them from the table.
- Do not hesitate to add any new threats that are in the table provided.
