/
Having worked in Business Continuity Management (BCM) and Operational Resilience across the United Kingdom and Asia, I have had the opportunity to support a diverse range of organisations, from fintech start-ups operating with limited resources to large multinational corporations with mature governance structures and highly formalised processes.
For years, global warming sat comfortably on the global agenda as an abstract, slow-moving compliance exercise. Corporate boards viewed ESG reports as PR exercises rather than urgent risk management priorities.
The world faces a range of risk and sustainability challenges that are interconnected. These interconnected challenges affect the economy, the environment, businesses, and society. Malaysia faces the same set of challenges as well.
Resilience does not refer solely to the ability to avoid damage. It is the strength to face reality head-on even after suffering damage, to support people and communities, and to rise again.
Sometimes the biggest change in a profession is not seen only in regulations, frameworks, or audit findings. Sometimes, it appears in the words we use.
Every technology shift eventually stops being about the technology. The cloud stopped being about servers. Mobile stopped being about phones. And AI is no longer just a software race. The real question today is clear: Who do we trust, and how do we prove it?
As organizations accelerate the adoption of artificial intelligence, governance discussions often focus on model controls, compliance requirements, monitoring practices, and technical safeguards. These are necessary disciplines. Yet some of the most important governance failures
Business continuity and resilience have evolved beyond traditional operational functions and now serve as critical strategic drivers for ensuring long-term organizational sustainability, stability, and growth. It may be correct to say that in today’s dynamic environment that is highly interconnected and has volatile global ecosystem, organizational resilience has come to be a strategic necessity rather than merely a risk management function.
Most organizations treat BCM as a technical “check-the-box” exercise, pouring millions into redundant servers and secondary sites only to freeze when a real disruption hits. This is because they forgot the one component that actually flips the switch: the human being.
I did not enter Business Continuity Management with the intention of building a lifelong professional identity around it. My journey into BCM began quietly, embedded in operational responsibility rather than formal designation, long before BCM was widely recognized as a distinct discipline.