The 72-Hour Question Every Board Should Ask

Malaysia's new reporting rules will push companies to name their climate risks. Naming them is the easy part. The harder question is whether anyone in the business could say how long the business would keep running if the water simply stopped.

Could your most critical facility keep running if its main water supply were interrupted for 72 hours? A company may know how much water it uses, its storage capacity, even its contingency arrangements. But does it know where that water comes from, which treatment plant supplies it, or how long the facility could keep operating should that supply stop?

Where the Gap Opens

Malaysia's National Sustainability Reporting Framework is phasing in ISSB standards for listed issuers and large non-listed companies between 2025 and 2027. National climate assessments already describe how rainfall, drought, flooding and sea level patterns are shifting. What they don't describe is what any of that means for one facility, on any given day, when water supply simply stops. Knowing that rainfall patterns may change is one thing, but making sense of that change for a particular location is another.

That's the gap worth worrying about. Companies don't experience climate change as a national projection. They experience it when a road floods and workers can't reach a plant, when a supplier misses a delivery, or when a treatment plant stops operating. A company can report that drought risk is increasing. That sentence tells the board nothing about whether its most important facility could survive three days without its normal water supply. The disclosure requirement gets met but the operational question goes unanswered.

What Selangor Shows

Selangor makes the stakes concrete. More than 270,000 businesses operate in the state, employing 2.68 million people and generating RM417.6 billion in value added, much of it relying on a system no single company controls. A factory's water supply arrives through a pipe few ever think about, but behind that pipe sits a chain in the system: rainfall, catchments, rivers, treatment plants, electricity supply, distribution networks, etc.

In October 2020, upstream pollution forced four Sungai Selangor treatment plants to shut down, disrupting supply across 1,292 areas in seven regions. The businesses affected weren't concerned with whether the disruption counted as environmental, infrastructure, or operational. They needed water, and the tap ran dry. Climate change now adds another layer of pressure to that same chain, through long dry spells, drought, flooding, and the degradation of rivers and wetlands that help regulate it.

The Question That Actually Matters

None of this means planning around exactly 72 hours. The number matters only because it forces a harder question that no national assessment or disclosure framework can answer on a company's behalf: where does this facility's water come from, how much does it need, how much can it store, and what fails first if supply stops for six hours, a day, or three days?

For one site, the fix might be storage; for another, an alternative supply, or a hard look at the catchment itself. What matters is knowing where the weakness sits before a disruption finds it. Disclosure frameworks can push companies to take climate change seriously, but they cannot answer this question. That answer has to come from the business itself, one facility and one dependency at a time, well before the next disruption forces the point.