Malaysia’s directors urged to reassess climate risks and operational governance

Traders Union
All News
Business & Wealth
Directors urged to assess climate risks

Highlights

A 2023 defect in legacy code disrupted the UK’s air traffic control system, forcing the cancellation of more than 2,000 flights and exposing weaknesses in governance and board oversight.
The December 2021 Klang Valley floods caused RM6.1 billion in losses (0.4% of nominal GDP), with only one-third insured; the rest was borne by households, companies and public finances.
Water contamination in Johor last November affected 1.2 million consumers for five days, highlighting the risks posed by industrial concentration and water supply exposure to global supply chain shocks.

This article was translated from the original. Read the original version by our correspondent here.

Governance lessons from the disruption in Britain

The Edge Malaysia reported that the disruption, which halted flight departures in the UK, stemmed from a legacy code defect that was triggered only when a system update was interrupted by a higher-priority message within a window of about one millisecond. The corrupted record then affected subsequent updates, severing the link between the control system and flight data, before controllers switched to manual procedures and more than 2,000 flights were cancelled.

The analysis’s main argument is that the cause was not an unusual error, but an ordinary failure that exposed a latent weakness in a system too large to be fully validated. In this framework, the governance problem is not simply the existence of risk, but the acceptance of assurances that fixes have been made without sufficient verification.

The analysis also stressed that there had been earlier warnings following a separate incident in 2023, yet significant weaknesses surfaced again. This brings the issue closer to a question of board oversight, particularly who ultimately bears the cost when residual risks are accepted rather than eliminated through engineering or additional investment.

Implications for companies and assets in Malaysia

For Malaysia, the author directly links this pattern of failure to growing physical climate risks, including floods, heat, drought, storm surges and water supply disruptions. The argument is that companies may not be able to predict the exact events that will occur, but must still assume that their assets and supply chains will be tested beyond their original design assumptions.

The Klang Valley floods in December 2021 are a key example, with losses estimated at RM6.1 billion, or about 0.4% of nominal GDP, alongside hundreds of thousands of people affected and around 50 deaths. Only about one-third of the losses were insured, while the rest was borne by households, companies and public finances—a transfer of costs described as structurally equivalent to accepting operational risk without adequate protection.

The same pressures are evident in water supply issues. Raw water contamination in Johor last November forced several treatment plants to shut down and affected around 1.2 million consumers for five days. The analysis says the combination of industrial concentration, water constraints and weather exposure—including within Penang’s semiconductor ecosystem—could turn a local disruption into a global supply chain shock, which would ultimately be assessed by overseas customers, insurers and reinsurers.

In this context, boards are urged to ask two key questions: where could a routine failure at a supplier, site, utility or water source bring the entire enterprise to a halt, and is capital being allocated for the climate that is emerging or the climate portrayed by historical data? The focus is not on being able to predict the next shock, but on keeping operations running when initial assumptions fail.

In our earlier article on the impact of the 1MDB scandal on corporate governance we examined how failures in controls, audits and checks and balances broadened the debate over who should be held responsible when organisational systems fail. We also outlined the emphasis on board accountability, stronger whistleblower protections, and the need for auditors to shift from assessing past failures to detecting risks earlier using data.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.