Emergency Response Plan Sample Malaysia

Standard Operating Procedure: National Crisis & Emergency Response Framework (Malaysia Operations)

1. Document Control Block

---

2. Executive Summary & Purpose

This Standard Operating Procedure (SOP) defines the institutional-grade framework for emergency response, crisis management, and business continuity across all physical and digital infrastructure assets managed by Template Registry within Malaysia. Compliance with this document ensures immediate mitigation of life safety risks, structural integrity preservation, and strict alignment with Malaysian regulatory mandates, including the Occupational Safety and Health Act 1994 (OSHA 1994) and Uniform Building By-Laws 1984 (UBBL).

---

3. Scope & Prerequisites

3.1 Scope

Applies to all corporate facilities, remote datacenter nodes, administrative offices, and personnel deployed under Template Registry Malaysia jurisdiction.

3.2 Prerequisites, Tools, & Software

• Physical Assets: Type ABC Fire Extinguishers, Automated External Defibrillators (AED), Emergency Exit Route Maps, First Aid Trauma Kits, Megaphones, Hard Hats, High-Visibility Vests.
• Software & Communication Infrastructure: PagerDuty Incident Management Console, Microsoft Teams Crisis Channel, Twilio SMS Broadcast Gateway, Satellite Backup Handsets.
• Regulatory Framework References: DOSH (Department of Occupational Safety and Health) Guidelines, bomba (Jabatan Bomba dan Penyelamat Malaysia) Emergency Protocols.

---

4. Roles & Responsibilities (RACI Matrix)

R = Responsible, A = Accountable, C = Consulted, I = Informed

---

5. Step-by-Step Procedure

Phase 1: Detection, Validation, and Alerting (T+0 to T+5 Minutes)

• Monitor incoming automated sensors (smoke, seismic, structural load) or receive manual distress report.
• Incident Commander (IC) evaluates severity via the Emergency Matrix (Level 1: Minor, Level 2: Regional, Level 3: Catastrophic).
• Trigger internal PagerDuty high-priority alert and broadcast automated SMS via Twilio to all on-site personnel.
• Dispatch Safety & Health Officer (SHO) to verify the incident vector if structural integrity permits.

Phase 2: Immediate Evacuation & Life Safety Mitigation (T+5 to T+15 Minutes)

• Activate building-wide emergency fire alarm system manually if automated systems fail.
• Direct all personnel to immediately cease operations, abandon non-essential assets, and execute primary or secondary evacuation routes.
• Floor Wardens sweep designated zones, ensuring bathrooms, server rooms, and meeting spaces are fully cleared.
• Assemble at designated Assembly Point Alpha (Front Perimter Plaza) or Assembly Point Bravo (Rear Access Lot).
• Conduct mandatory roll call via the digital muster application; cross-reference against visitor logs.

Phase 3: External Agency Coordination & Containment (T+15 to T+60 Minutes)

• Incident Commander initiates direct contact with Malaysian emergency services (MERCY Malaysia / 999 Emergency Response System).
• Establish formal Incident Command Post (ICP) at the perimeter safety boundary, handing tactical control to responding Bomba (Fire and Rescue Department) commanders upon arrival.
• Provide facility schematics, hazardous material locations (UPS battery banks, backup diesel fuel stores), and utility shut-off locations to responding officers.
• Notify DOSH Malaysia within the statutory 24-hour reporting window if workplace injuries or structural collapses have occurred.

Phase 4: System Failover & Business Continuity (T+60 to T+240 Minutes)

• Facilities Engineering Lead executes remote shutdown or cloud failover sequences for critical infrastructure nodes to prevent secondary electrical hazards.
• Activate secondary disaster recovery site operations located in Cyberjaya/Singapore region.
• Issue holding statements via Communications Lead to internal stakeholders and external clients.

Phase 5: Post-Incident Recovery & Remediation (T+24 Hours to T+14 Days)

• Await structural clearance certificate issued by local municipal authorities and structural engineers before re-entry.
• Conduct forensic sweep of affected physical and digital infrastructure.
• Convene Post-Mortem Incident Review Board within 72 hours of site clearance.
• Submit final incident closure report to DOSH and Template Registry Executive Board.

---

6. Quality Assurance & Pro-Tips

6.1 Best Practices

• Redundant Communications: Never rely solely on cellular networks during a major crisis; maintain operational satellite handsets within the ICP lockbox.
• Drill Cadence: Execute unannounced evacuation drills at least semi-annually to maintain muscle memory among staff.

6.2 Common Pitfalls to Avoid

• Re-entry Prematurity: Never allow personnel to re-enter a facility based on a silenced alarm; wait strictly for written clearance from the Incident Commander and Bomba.
• Log Jamming: Do not permit non-designated personnel to communicate with external media; route all inquiries through the designated Public Information Officer.

6.3 Metric Thresholds

• Time-to-Muster (TTM): Total building evacuation and head-counting must be completed within < 8 minutes of alarm initiation.
• Incident Response Initialization: Automated alert propagation must occur within < 120 seconds of sensor trigger.

---

7. Frequently Asked Questions (FAQ)

Q1: What is the mandatory legal reporting timeline for workplace injuries in Malaysia under this framework?

A: Per the Occupational Safety and Health (Notification of Accident, Dangerous Occurrence, Occupational Poisoning and Occupational Disease) Regulations 2004, any fatal or serious bodily injury must be reported to the nearest DOSH office immediately by telephone/fax, followed by a formal written report (Form JKKP 8) within 7 days.

Q2: Who holds absolute authority to order an immediate site evacuation?

A: The designated Incident Commander (IC), the Safety & Health Officer (SHO), or any responding officer from Jabatan Bomba dan Penyelamat Malaysia holds unchallengeable authority to mandate an immediate evacuation.

Q3: How are remote or hybrid workers accounted for during an emergency declared at a primary office?

A: Remote workers are flagged automatically via status check-ins triggered through the Microsoft Teams Crisis Channel. They are required to acknowledge receipt of the crisis notification within 30 minutes to confirm their safety status.