Crisis Response

48 guides. Every fact links to a primary regulator, statute or named insurer document.

• General Average Declared: A Singapore Importer's First 72 HoursSomething went wrong at sea. A fire in the hold, a grounding in the Strait, an engine failure, a collision. To save the voyage, the master jettisoned...
• First 24 Hours After a Major Employee Fraud Discovery: A Singapore SME Crisis PlaybookDiscovery that an employee has committed material fraud against the SME triggers a defined operational and legal response. The Singapore framework runs...
• The First 48 Hours After a Customer Bodily Injury at Your Singapore Business Premises: A Public Liability Claim PlaybookA customer or visitor injury at a Singapore SME's premises is the most common public liability claim event. The first 48 hours determine the strength of...
• The First 72 Hours After a Cyber Incident: A Singapore SME PlaybookA cyber incident at a Singapore SME triggers a layered set of obligations that operate on different timelines and to different regulators. The fastest...
• Day-One Response When Your Insurer Suspends or Restricts CoverA Singapore SME that receives notice from its insurer of a cover suspension, restriction, mid-term cancellation, or non-renewal at expiry faces a defined...
• IT Vendor or SaaS Provider Disappearance: Day-One Workflow for Singapore SMEsThe Singapore SME's critical IT vendor or SaaS provider has unexpectedly become unavailable: Singapore insolvency under IRDA 2018, foreign insolvency (US...
• Vendor Data Breach Affecting Your Customers: The Data Intermediary Cascade Day-One WorkflowA vendor of the Singapore SME (CRM, payroll, cloud provider, customer support, marketing automation) has notified the SME that the vendor suffered a data...
• JV or Partnership Breakdown: Allocation, Run-Off, and Dissolution WorkflowThe Singapore SME is in a joint venture (incorporated SPV or contractual JV) or partnership that has broken down. JV agreement governs but disputes have...
• Shareholder Dispute or Founder Divorce: Buy-Sell Event Day-One WorkflowThe Singapore SME has a shareholder dispute (founder versus founder, founder versus investor, family-business succession) or a founder is going through...
• Director Death or Sudden Incapacity: Key-Person Event Day-One WorkflowThe Singapore SME's founder, CEO, or key director has died or been suddenly incapacitated. Operational signing authority, customer relationships, banking...
• Tenant-Caused Major Fire: Landlord SME Day-One WorkflowThe Singapore SME landlord (or master-lessee subletting) has suffered a major fire or catastrophic damage caused by a tenant. SCDF has attended and may be...
• Multi-Plaintiff Class Action Threat: When Multiple Insurance Lines Fire SimultaneouslyThe Singapore SME has been served with a writ or letter of demand by multiple plaintiffs alleging coordinated harm: consumer claims, employment...
• Internal Fraud Discovered: The 8-Step Day-One Workflow for Singapore SMEsThe Singapore SME has just discovered internal fraud, typically by a long-serving finance officer running for 2 to 7 years with magnitude S$100,000 to S$2...
• Key Supplier Insolvency: The Contingent BI TriggerThe Singapore SME's sole-source supplier (component, raw material, exclusive licensor, critical service provider) has filed under the Insolvency,...
• Major Customer Bankruptcy: The Trade Credit DSO Cliff EventThe Singapore SME's largest customer has filed under the Insolvency, Restructuring and Dissolution Act 2018 (IRDA) - scheme of arrangement under Part 5...
• Product Recall Order Served by CPSO or HSA: The 24-Hour Window and the BI CliffYour SME has received a mandatory recall order under Consumer Protection (Safety Requirements) Regulations (Consumer Product Safety Office (CPSO),...
• Customer Receivership Mid-Receivable: The Trade Credit Insurance Notification WindowA major customer has entered judicial management, scheme of arrangement, court-ordered liquidation, or appointed receivers under Insolvency, Restructuring...
• SFA Caterer Suspension Order: Restoring Operations After a Foodborne Illness ClusterSingapore Food Agency (SFA) and Ministry of Health (MOH) have received gastroenteritis cluster reports linked to your SME's food. SFA has suspended...
• TAFEP / Sexual Harassment Investigation Served on the EmployerYour SME has received contact from the Tripartite Alliance for Fair and Progressive Employment Practices (TAFEP) - either via the TAFEP hotline (6838...
• MAS Adverse Examination Findings Letter: Day 1 of a Regulatory Crisis for an FA, FMC, or PSPMonetary Authority of Singapore (MAS) has issued a post-inspection findings letter to a licensed Financial Adviser, Capital Markets Services Licensee...
• Ransomware Active Negotiation Phase: Data Exfiltration, Sanctions Screening, Payment DecisionYou are 24+ hours into a ransomware incident. Encryption is confirmed across multiple systems. The threat actor has issued a ransom demand, often with a...
• Business Email Compromise / Vendor Email Compromise: Wire Fraud DiscoveredFinance team has discovered an outbound payment to a fraudulent account. Either: (a) CFO impersonation email instructed a wire transfer; (b) supplier...
• Lifting Operation Failure: Crane Collapse, Lorry Crane Topple, Tower Crane FailureA tower crane jib has failed, a lorry crane has toppled, or a mobile crane has collapsed. A worker is struck or trapped. This article addresses the...
• Confined Space Fatality: Hydrogen Sulphide Exposure and the Multi-Casualty Rescue TrapA worker has collapsed inside a tank, vessel, or manhole. Colleagues attempted rescue without self-contained breathing apparatus (SCBA) and were also...
• Multi-Injury Workplace Incident: 3+ Workers Down, MOM Major-Incident ClassificationA single workplace event has injured three or more workers - structural collapse, gas release, scaffold failure, fire, electrical incident. SCDF is on...
• Customer Data Subject Access Request: Singapore PDPA Section 21 Response Framework---
• When a Critical Vendor Goes Insolvent: Singapore Framework for Vendor Insolvency Cascade ResponseA critical vendor's insolvency triggers a cascade scenario for Singapore SMEs: operational disruption (where the vendor's services / supplies are...
• Cyber-Extortion Event Response: Singapore Framework for Ransomware, Data Theft, and Payment Decisions---
• MOM Just Notified Us of a Workplace Incident Investigation - What Do I Do Now?First, distinguish what has been triggered: a WICA claim notification (an employee reporting a work injury for compensation), an MOM Occupational Safety...
• Our Systems Are Locked and the Attackers Want Bitcoin - What Do I Do Now?Stop. Don't pay, don't power-cycle, don't communicate with attackers without specialist guidance. Disconnect affected systems from the network (don't...
• IRAS Just Notified Us of a Tax Audit or Investigation - What Do I Do Now?First, distinguish what you have received: an IRAS Compliance Programme review (sectoral / risk-based selection), an information request under the...
• A Co-Founder or Major Shareholder Wants to Exit and Things Have Turned Adversarial - What Do I Do Now?First, immediately review the company's shareholders' agreement, constitution, and any founder agreements for: exit / buy-sell mechanisms, valuation...
• We Need to Conduct a Mass Layoff or Major Restructuring - What Do I Do Now?First, ensure foundational compliance: review the Tripartite Advisory on Managing Excess Manpower and Responsible Retrenchment issued by MOM, NTUC, and...
• A Customer Group Just Demanded Mass Refunds - What Do I Do Now?First, assess which of five situations you are in: (a) a quality or product issue triggering legitimate refund demands, (b) a service failure or...
• Our Anchor Tenant Just Announced They're Leaving the Mall - What Do I Do Now?First, assess actual operational impact (footfall change, co-tenancy clauses, customer perception) and review your tenancy agreement (registered under SLA...
• A PR Crisis or Viral Social Media Incident Just Hit Our Brand - What Do I Do Now?First, do not make immediate public statements without considered response - what you say in hour 1 sets the trajectory. Convene crisis response...
• A Currency Movement or FX Hedge Failure Just Wiped Out Our Margin - What Do I Do Now?First, assess the actual damage: realised loss vs unrealised mark-to-market, P&L vs cash impact, what's been settled vs what's still hedge-able. Then in...
• Our Critical Supplier Just Declared Insolvency - What Do I Do Now?First, assess immediate operational impact: which orders are in flight, what stock is available, what alternative suppliers exist, what's the lead time....
• Critical Equipment Just Broke and Halted Our Production - What Do I Do Now?First, secure the area and ensure no injury (if there's any chance of injury, call 995). Then in parallel: notify your Equipment Breakdown / Machinery...
• A Key Employee Just Resigned and Is Taking Customers/IP With Them - What Do I Do Now?First, do not confront with accusations - preserve evidence quietly. Lock systems access at the moment of resignation (or earlier if known intent),...
• A Customer Just Filed a Complaint With a Regulator - What Do I Do Now?A customer complaint to a regulator is more serious than a direct complaint or a CASE/FIDReC referral - it triggers the regulator's inquiry process, even...
• A Regulator Just Issued an Audit Notice - What Do I Do Now?Read the notice carefully - identify the regulator, scope, deadline, and any documents demanded. Singapore SMEs receive audit notices from various...
• MOM Just Issued a Stop-Work Order on Our Site - What Do I Do Now?A Stop-Work Order (SWO) under Section 21 of the Workplace Safety and Health Act 2006 is issued where the Ministry of Manpower (MOM) considers there is an...
• We Just Discovered an Employee Has Embezzled From Us - What Do I Do Now?First, do not confront the employee. Preserve evidence quietly: lock email, retain server logs, secure physical records, take backups. File a police...
• A Vendor Just Ran Off With Our Deposit - What Do I Do Now?First, attempt direct contact and document non-response. Then in parallel: file a Singapore Police Force report if facts suggest fraud (criminal...
• A Customer Just Sued Us - What Do I Do Now?First, identify what you've received. A Letter of Demand is a pre-litigation warning; a Writ of Summons is the start of formal court proceedings. Per the...
• We Just Discovered Ransomware on Our Systems - What Do I Do Now?The first 4 hours determine the outcome. Hour 0: isolate affected systems (disconnect from network - do NOT power off, which destroys forensic evidence)....
• A Worker Just Died on Site - What Do I Do Now?First: secure the scene, call 995 for ambulance and 999 for police. Do not move the body or alter the scene. Per the Workplace Safety and Health (Incident...