Having professional credentials earned abroad assessed in Malaysia can be a challenging and, at times, discouraging experience. I have experienced this personally.
DISCLAIMER - NIKZAFRI.BLOGSPOT.COM
The information comprised in this section is not, nor is it held out to be, a solicitation of any person to take any form of investment decision. The content of the nikzafri.blogspot.com does not constitute advice or a recommendation by the author and should not be relied upon in making (or refraining from making) any decision relating to investments or any other matter. You should consult your own independent financial adviser and obtain professional advice before exercising any investment decisions or choices based on information featured in this.
The author of nikzafri.blogspot.com can not be held liable or responsible in any way for any opinions, suggestions, recommendations or comments made by any of the contributors to the various columns on nikzafri.blogspot.com nor do opinions of contributors necessarily reflect those of http://www. nikzafri.blogspot.com
HOW ALL CASE STUDIES AND ARTICLES ARE PRODUCED
In no event shall the author be liable for any damages whatsoever, including, without limitation, direct, special, indirect, consequential, or incidental damages, or damages for lost profits, loss of revenue, or loss of use, arising out of or related to the nikzafri.blogspot.com or the information contained in it, whether such damages arise in contract, negligence, tort, under statute, in equity, at law or otherwise.
Please note that the case studies and articles I share on topics relating to civil, structural, mechanical and electrical engineering, construction, economics, manufacturing, artificial intelligence, semiconductors, ESG, standards, codes of practice, and other related disciplines are not produced in isolation.
QHSEL Consultancy Sdn. Bhd. is supported by an advisory panel and an extensive network of trusted friends, industry practitioners, professional associations/bodies and subject matter experts who willingly contribute their knowledge, insights, and professional experiences.
This collective includes Professional Engineers with Practising Certificates (PEPC), licensed brokers, economists, academicians, competent persons, auditors, risk assessors, contractors, consultants, clients, enforcement officers, active and former intelligence operatives, IT and cybersecurity specialists, AI practitioners, VR/AR/MR professionals, architects, bankers, Syariah experts, and specialists from various other fields.
As such, this is far from a one-man effort. Behind every article is a panel of experienced professionals who provide guidance, technical input, peer review, and practical perspectives drawn from real-world experience.
Many of these contributors prefer to remain anonymous to protect the confidentiality of projects, organisations, and sensitive information entrusted to them. Their motivation is not recognition, but rather to contribute towards a greater purpose: promoting sound practices, strengthening governance, enhancing compliance, improving industry standards, and reducing deficiencies, non-conformances, and avoidable failures across various sectors.
The views presented are therefore often the result of multidisciplinary collaboration, professional discourse, and collective expertise rather than the opinion of a single individual.
A THOUGHT
I identify myself as a Lifelong Learner and a Thought Leader
BIODATA - NIK ZAFRI

https://nikzafri.wixstudio.com/nikzafriv2
Kelantanese, Alumni of Sultan Ismail College Kelantan (SICA), Business Management/Administration, IT Competency Cert, Certified Written English Professional US. Has participated in many seminars/conferences (local/ international) in the capacity of trainer/lecturer and participant.
Affiliations :- Council/Network Member of Gerson Lehrman Group, Institute of Quality Malaysia, Auditor ISO 9000 IRCAUK, Auditor OHSMS (SIRIM and STS) /EMS ISO 14000 and Construction Quality Assessment System CONQUAS, CIDB (Now BCA) Singapore), TE (ABAC UK)
* Possesses almost 30 years of experience/hands-on in the multi-modern management & technical disciplines (systems & methodologies) such as Knowledge Management (Hi-Impact Management/ICT Solutions), Quality (TQM/ISO), Safety Health Environment, Civil & Building (Construction), Manufacturing, Motivation & Team Building, HR, Marketing/Branding, Business Process Reengineering, Economy/Stock Market, Contracts/Project Management, Finance & Banking, etc. He was employed to international bluechips involving in national/international megaprojects such as Balfour Beatty Construction/Knight Piesold & Partners UK, MMI Insurance Group Australia, Hazama Corporation (Hazamagumi) Japan (with Mitsubishi Corporation, JA Jones US, MMCE and Ho-Hup) and Sunway Construction Berhad (The Sunway Group of Companies). Among major projects undertaken : Pergau Hydro Electric Project, KLCC Petronas Twin Towers, LRT Tunnelling, KLIA, Petronas Refineries Melaka, Putrajaya Government Complex, Sistem Lingkaran Lebuhraya Kajang (SILK), Mex Highway, KLIA1, KLIA2 etc. Once serviced SMPD Management Consultants as Associate Consultant cum Lecturer for Diploma in Management, Institute of Supervisory Management UK/SMPD JV. Currently – Associate/Visiting Consultants/Facilitators, Advisors/Technical Experts for leading consulting firms (local and international), certification bodies including project management. To name a few – Noma SWO Consult, Amiosh Resources, Timur West Consultant Sdn. Bhd., TIJ Consultants Group (Malaysia and Singapore), QHSEL Consultancy Sdn. Bhd.
Among Nik Zafri’s clients : Adabi Consumer Industries Sdn. Bhd, (MRP II, Accounts/Credit Control) The HQ of Royal Customs and Excise Malaysia (ISO 9000), Veterinary Services Dept. Negeri Sembilan (ISO 9000), The Institution of Engineers Malaysia (Aspects of Project Management – KLCC construction), Corporate HQ of RHB (Peter Drucker's MBO/KRA), NEC Semiconductor - Klang Selangor (Productivity Management), Prime Minister’s Department Malaysia (ISO 9000), State Secretarial Office Negeri Sembilan (ISO 9000), Hidrological Department KL (ISO 9000), Asahi Kluang Johor(System Audit, Management/Supervisory Development), Tunku Mahmood (2) Primary School Kluang Johor (ISO 9000), Consortium PANZANA (HSSE 3rd Party Audit), Lecturer for Information Technology Training Centre (ITTC) – Authorised Training Center (ATC) – University of Technology Malaysia (UTM) Kluang Branch Johor, Kluang General Hospital Johor (Management/Supervision Development, Office Technology/Administration, ISO 9000 & Construction Management), Kahang Timur Secondary School Johor (ISO 9000), Sultan Abdul Jalil Secondary School Kluang Johor (Islamic Motivation and Team Building), Guocera Tiles Industries Kluang Johor (EMS ISO 14000), MNE Construction (M) Sdn. Bhd. Kota Tinggi Johor (ISO 9000 – Construction), UITM Shah Alam Selangor (Knowledge Management/Knowledge Based Economy /TQM), Telesystem Electronics/Digico Cable(ODM/OEM for Astro – ISO 9000), Sungai Long Industries Sdn. Bhd. (Bina Puri Group) - ISO 9000 Construction), Secura Security Printing Sdn. Bhd,(ISO 9000 – Security Printing) ROTOL AMS Bumi Sdn. Bhd & ROTOL Architectural Services Sdn. Bhd. (ROTOL Group) – ISO 9000 –Architecture, Bond M & E (KL) Sdn. Bhd. (ISO 9000 – Construction/M & E), Skyline Telco (M) Sdn. Bhd. (Knowledge Management),Technochase Sdn. Bhd JB (ISO 9000 – Construction), Institut Kefahaman Islam Malaysia (IKIM – ISO 9000 & Internal Audit Refresher), Shinryo/Steamline Consortium (Petronas/OGP Power Co-Generation Plant Melaka – Construction Management and Safety, Health, Environment), Hospital Universiti Kebangsaan Malaysia (Negotiation Skills), Association for Retired Intelligence Operatives of Malaysia (Cyber Security – Arpa/NSFUsenet, Cobit, Till, ISO/IEC ISMS 27000 for Law/Enforcement/Military), T.Yamaichi Corp. (M) Sdn. Bhd. (EMS ISO 14000) LSB Manufacturing Solutions Sdn. Bhd., (Lean Scoreboard (including a full development of System-Software-Application - MSC Malaysia & Six Sigma) PJZ Marine Services Sdn. Bhd., (Safety Management Systems and Internal Audit based on International Marine Organization Standards) UNITAR/UNTEC (Degree in Accountacy – Career Path/Roadmap) Cobrain Holdings Sdn. Bhd.(Managing Construction Safety & Health), Speaker for International Finance & Management Strategy (Closed Conference), Pembinaan Jaya Zira Sdn. Bhd. (ISO 9001:2008-Internal Audit for Construction Industry & Overview of version 2015), Straits Consulting Engineers Sdn. Bhd. (Full Integrated Management System – ISO 9000, OHSAS 18000 (ISO 45000) and EMS ISO 14000 for Civil/Structural/Geotechnical Consulting), Malaysia Management & Science University (MSU – (Managing Business in an Organization), Innoseven Sdn. Bhd. (KVMRT Line 1 MSPR8 – Awareness and Internal Audit (Construction), ISO 9001:2008 and 2015 overview for the Construction Industry), Kemakmuran Sdn. Bhd. (KVMRT Line 1 - Signages/Wayfinding - Project Quality Plan and Construction Method Statement ), Lembaga Tabung Haji - Flood ERP, WNA Consultants - DID/JPS -Flood Risk Assessment and Management Plan - Prelim, Conceptual Design, Interim and Final Report etc., Tunnel Fire Safety - Fire Risk Assessment Report - Design Fire Scenario), Safety, Health and Environmental Management Plans leading construction/property companies/corporations in Malaysia, Timur West Consultant : Business Methodology and System, Information Security Management Systems (ISMS) ISO/IEC 27001:2013 for Majlis Bandaraya Petaling Jaya ISMS/Audit/Risk/ITP Technical Team, MPDT Capital Berhad - ISO 9001: 2015 - Consultancy, Construction, Project Rehabilitation, Desalination (first one in Malaysia to receive certification on trades such as Reverse Osmosis Seawater Desalination and Project Recovery/Rehabilitation), ABAC Centre of Excellence UK (ABMS ISO 37001) Joint Assessment (Technical Expert)
He is also rediscovering long time passions in Artificial Intelligence, ICT and National Security, Urban Intelligence/Smart Cities, Environmental Social and Governance, Solar Energy, Data Centers - BESS, Tiers etc. and how these are being applied.
* Has appeared for 10 consecutive series in “Good Morning Malaysia RTM TV1’ Corporate Talk Segment discussing on ISO 9000/14000 in various industries. For ICT, his inputs garnered from his expertise have successfully led to development of work-process e-enabling systems in the environments of intranet, portal and interactive web design especially for the construction and manufacturing. Some of the end products have won various competitions of innovativeness, quality, continual-improvements and construction industry award at national level. He has also in advisory capacity – involved in development and moderation of websites, portals and e-profiles for mainly corporate and private sectors, public figures etc. He is also one of the recipients for MOSTE Innovation for RFID use in Electronic Toll Collection in Malaysia.
Note :
Wednesday, November 11, 2026
Recognised Abroad, Still Explaining My Worth at Home
Tuesday, November 10, 2026
Construction Defects After Handover: Responsibility, Risk and Integrity
Water ingress, debonded tiles, drainage problems and recurring cracks can quickly lead to disagreements over responsibility, cost and the adequacy of repairs.
I think this stage deserves as much attention as construction itself. It tests the quality of the work, the effectiveness of contract administration and the willingness of everyone involved to resolve problems fairly.
1.0 UNDERSTANDING CPC, DLP, CMGD AND CCC
The Certificate of Practical Completion (CPC) generally marks practical completion under the construction contract. Under many conventional arrangements, it starts the Defects Liability Period (DLP) and triggers specified consequences concerning possession and retention.
The DLP provides a contractual mechanism for reporting and rectifying defects for which the contractor is responsible. Its duration and procedures depend on the contract.
The Certificate of Making Good Defects (CMGD) confirms that the applicable contractual requirements for making good defects have been satisfied. Under PAM arrangements, it is linked to release of the remaining retention and the process towards final certification. DLP expiry alone does not establish that rectification is complete.
The Certificate of Completion and Compliance (CCC) serves a statutory purpose. It replaced the earlier Certificate of Fitness for Occupation, commonly called CF or CFO, for projects covered by the system introduced in April 2007. Unlike the former local authority certification system, CCC is issued by the authorised Principal Submitting Person (PSP).
These certificates address different responsibilities. They should not be treated as interchangeable.
2.0 IS THE CONSULTANT OUT OF THE PICTURE?
A common assumption is that the consultant’s involvement ends at handover. Generally, under conventional arrangements, that is incorrect.
Site attendance may reduce, but the appointed architect or contract administrator may still have duties involving defects inspections, instructions, assessment of rectification and certification. Engineers and other consultants contribute within their respective appointments.
Under PAM 2018, for example, the architect has a defined role in responding to the contractor’s notification that defects have been made good, either issuing CMGD or stating reasons for non-issuance.
I feel that uncertainty over these continuing roles can itself become a project risk. Before the site team disperses, the client should establish who receives complaints, who investigates, who instructs repairs and who verifies closure.
If a consultant’s appointment has ended, the remaining functions need an appropriately authorised arrangement. The consultant’s appointment, statutory role as PSP and potential responsibility for earlier professional services are separate matters.
3.0 INVESTIGATE THE CAUSE BEFORE ALLOCATING RESPONSIBILITY
A complaint identifies a symptom, BUT it does not necessarily establish who is responsible.
A leaking ceiling could arise from waterproofing workmanship, an unsuitable design detail, a pipe connection, subsequent alterations or inadequate maintenance.
PAM’s guidance emphasises investigating the category and root cause of defective work before attributing responsibility, including distinguishing workmanship, design and misuse.
Based on my experience, a repair can appear satisfactory during inspection yet fail again under rain, operating loads or normal occupancy. Verification should therefore reflect the conditions that caused the failure.
Repainting a damp wall, for example, should not close a water-ingress complaint unless the source has been addressed and the repair appropriately verified.
4.0 THE COMMERCIAL IMPACT ON BOTH PARTIES
For the client, unresolved defects can disrupt operations, damage property, increase maintenance costs and affect occupants’ confidence. Poor records also make responsibility and recovery of costs harder to establish.
For the contractor, repeated mobilisation, subcontractor attendance, unavailable replacement materials and repairs within occupied premises create additional costs. Delayed CMGD can prolong account closure and delay release of remaining retention.
Fair administration protects both parties. Premature certification may weaken the client’s practical protection, while withholding certification or money without proper contractual grounds can expose the client to disputes.
Where the contractor fails to rectify defects for which it is responsible, the contract may allow others to undertake the repairs and appropriate costs to be recovered. The prescribed notices and procedures remain important.
5.0 RISK ASSESSMENT : PRIORITISING THE RIGHT DEFECTS
I think defects should be prioritised by their consequences and likelihood of further harm, rather than simply by the order in which complaints arrive.
A practical assessment should consider:
- Safety and health consequences.
- Effects on essential services and building operations.
- Likelihood of recurrence or deterioration.
- Potential damage to adjoining areas or property.
- Risks created by the rectification work itself.
This approach is consistent with the risk management principles in ISO 31000:2018, which provides guidelines rather than a certifiable management system standard.
For example, a suspected loose façade component requires a different response from a minor paint blemish. Temporary protection, isolation or specialist assessment may be necessary before permanent repairs.
Repairs in occupied buildings also need suitable task risk assessments and, where applicable, elements of CONQUAS/QLASSIC should be considered and perhaps HIRARC, access controls and coordination with building management.
6.0 ABMS : INTEGRITY DURING DEFECTS CLOSURE
The defects stage also creates opportunities for improper influence: pressure to overlook incomplete repairs, inducements linked to certification, undisclosed interests in replacement contractors or unjustified deductions.
An Anti-Bribery Management System (ABMS) based on ISO 37001:2025 provides a framework for preventing, detecting and responding to bribery.
Applied to defects management, useful controls include declarations of conflicts of interest, appropriate due diligence on rectification contractors, transparent approval of repair costs, independent verification where warranted and accessible reporting channels.
I feel that integrity is particularly important when financial pressure meets technical judgement. Certification should be supported by evidence and the applicable requirements. ABMS controls support that discipline; they do not replace engineering assessment or contractual procedures.
A disputed defect or delayed certificate does not, by itself, establish bribery. Concerns require evidence and fair investigation.
7.0 CODES OF PRACTICES AND STANDARDS : ESTABLISHING ACCEPTANCE CRITERIA
Defect assessment should refer to the approved drawings, specifications, contractual requirements, applicable legislation, relevant Malaysian Standards and codes of practice, and manufacturers’ installation requirements.
Acceptance criteria should be identified before repairs begin, including any necessary testing.
CIDB’s CIS 7:2021, used for QLASSIC, provides a framework for assessing workmanship quality. However, its application to a particular defects dispute must be considered against the contract and the assessment’s intended purpose. A QLASSIC score should not be treated as conclusive proof that every element is defect-free.
Standards should be applied within their proper scope, using the edition required by the contract or applicable regulatory requirements.
8.0 HOW DO DEFECTS AFFECT CCC
This is an important distinction.
Based on my experience, some clients suggest that outstanding defects could invalidate the CCC (very funny), sometimes using this as leverage against the contractor. Such statements require care: outstanding defects do not, by themselves, invalidate CCC, although defects affecting safety or statutory compliance warrant prompt investigation and appropriate action.
Jabatan Kerajaan Tempatan (JKT) distinguishes between non-critical defects that can be repaired during DLP and critical defects affecting safety or health that should prevent CCC issuance.
Minor finishing defects can usually proceed through the contractual defects process. Suspected structural instability, unsafe electrical installations or failed fire-safety provisions require prompt assessment and appropriate protective action.
An existing CCC should never be used to dismiss evidence of a dangerous condition.
JKT’s published FAQ states that an issued CCC cannot simply be withdrawn administratively. However, improper issuance, false certification or non-compliance can lead to enforcement or professional disciplinary action, while disputed validity may be referred to court.
9.0 MEANINGFUL CLOSURE REQUIRE EVIDENCE
DLP expiry and CMGD do not necessarily extinguish every subsequent liability. Latent-defect claims may remain possible, depending on the facts, contract, applicable law and limitation periods.
For housing projects, the developer’s obligations to purchasers also need separate consideration from its arrangements with the main contractor. Closing the contractor’s defects account does not automatically settle purchasers’ rights.
In my view, meaningful closure requires a clear record of the defect, its cause, responsibility, repair method and verification results. Repeated failures should prompt further investigation.
The objective is to restore the required performance of the work and give all parties a defensible basis for closure. That is where technical competence, risk awareness and professional integrity come together.
FOOD FOR THE THOUGHT - DATA CENTRES
When discussing concerns about data centres, perhaps we should begin by listening rather than labelling. People may question these developments for different reasons, including electricity demand, water availability, environmental impacts and how their personal information is used.
Sunday, November 08, 2026
SOFTWARE QUALITY: REQUIREMENTS, TESTING, RISK AND CORRECTIVE ACTION
Another question deserves equal attention: “Were the requirements properly understood, defined and agreed upon?”
Software quality depends on requirements engineering, effective testing and informed risk decisions. These disciplines connect what people need with evidence of what a system delivers.
1.0 REQUIREMENTS ENGINEERING
Requirements engineering involves discovering, analysing, documenting, validating and managing requirements. It helps stakeholders agree on the problem, the intended outcome and the conditions a solution must satisfy.
Interviews, workshops, observation, existing documents and prototypes help uncover needs and resolve conflicting expectations. Appropriate documentation may combine written requirements, examples and models.
For example, a customer might request another approval screen. Investigation could reveal that the actual need is to prevent unauthorised transactions. Understanding the purpose helps the team evaluate suitable solutions.
Requirements must also be clear enough to assess. Consider:
"The application must be fast"
An illustrative alternative is:
“Under a workload of 1,000 concurrent users, at least 95% of account-balance requests shall display a result within three seconds.”
These figures are examples requiring agreement based on actual needs and technical conditions.
Requirements should address functionality, quality expectations, interfaces, constraints and failure conditions. For a payment application, this includes what happens when a connection drops after confirmation and how a customer establishes whether payment succeeded.
2.0 MANAGING PRIORITIES AND CHANGES
Requirements evolve as stakeholders learn and business conditions change. Effective management includes prioritisation, version control, change assessment and traceability across the project lifecycle. These practices apply to traditional and Agile approaches.
Increasing a payment limit, for instance, could affect approval rules, fraud controls, customer messages and existing tests. Treating it as a simple number change may overlook those consequences.
Traceability connects the original need to its requirements, implementation and tests, making affected work easier to identify.
3.0 TESTING AND EVIDENCE EXAMINING
Software testing evaluates software and related work products to identify defects, assess quality and support decisions. It includes reviews performed without executing software and tests that examine running software. Testing supports checking specified requirements and evaluating whether users’ needs are met.
A payment application may calculate charges correctly yet leave customers uncertain about interrupted transactions. Both technical correctness and practical suitability require attention.
Testing also differs from debugging: testing can expose a failure; debugging investigates its cause and implements a correction.
3.1 Test Selection
Useful techniques include examining input groups, boundaries, combinations of conditions and changes between system states. Exploratory testing uses learning and observation to guide investigation.
For a hypothetical RM5,000 transaction limit, examples include amounts below, at and above the limit, invalid entries, repeated submissions and interrupted connections.
Different testing activities answer different questions:
A refund calculation may work correctly by itself but fail when communicating with a payment provider. One successful demonstration cannot establish the quality of the entire system.
4.0 SETBACKS, LIMITATIONS AND DISADVANTAGES
Requirements engineering and testing require time, competent people, stakeholder participation and suitable resources. Excessive documentation can slow decisions, while inadequate documentation can leave critical assumptions unresolved.
Testing also has practical limits. Exhaustive testing is generally impossible, repeated checks can become less effective at finding new defects, and the absence of detected defects does not establish that users’ needs have been met.
The following are illustrative implementation problems and responses:
A distinction matters here: correcting a defect fixes the immediate problem; corrective action addresses its cause to reduce recurrence.
For example, repairing one incorrect calculation is a correction. Investigating an ambiguous calculation rule, improving its specification and checking related calculations addresses the wider cause.
5.0 RISK ASSESSMENT
Risk assessment is an explicit part of risk-based testing. Risks are identified and analysed, and the results guide testing priorities, scope and effort. Testing considers both product risks and project risks.
Product risks concern the delivered software for example, incorrect payments, exposed records or unacceptable response times. Project risks concern delivery conditions, such as unavailable skills, delayed environments or insufficient resources.
A practical assessment should establish what could go wrong, its likelihood and consequences, existing controls, further treatment and responsibility. It should also identify the evidence needed to evaluate the treatment and the remaining risk requiring a decision.
For an illustrative payment service:
These examples do not imply that every organisation needs the same controls. Assessment should reflect its systems, information and operating context.
6.0 INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS) ISO/IEC 27001
Some parties asked me about how ISMS can help. An Information Security Management System (ISMS) provides an organisational framework for managing information security. ISO/IEC 27001:2022 establishes requirements for that system, including information security risk assessment and treatment. Its purpose includes preserving the confidentiality, integrity and availability of information.
An ISMS complements requirements engineering and testing. Security risks can inform requirements, those requirements can guide implementation and testing, and the results can support decisions about control effectiveness and remaining risk.
Its scope extends beyond software defects to the way information is handled through people, processes and technology.
For example, where assessment identifies a risk of unauthorised disclosure, the organisation might establish access requirements, implement appropriate controls and evaluate their operation. Responsibility must also cover how access is granted, reviewed and removed.
An ISMS does not replace broader software risk assessment or functional testing. Equally, passing functional tests does not establish that information security risks are adequately managed.
An organisation’s ISO/IEC 27001 certification and an individual’s professional qualification also serve different purposes. Neither guarantees that a particular application is secure or defect-free.
7.0 EVIDENCE, AUTOMATION AND RELEASE DECISIONS
Clear defect reports should identify the relevant version and environment, describe the steps taken, and distinguish expected from observed results.
Automation can accelerate suitable repeatable checks, but requires careful selection and maintenance. Its benefits depend on the quality of the checks performed.
For instance, confirming automatically that a payment page opens provides little evidence about payment accuracy or duplicate handling.
Test planning should establish scope, responsibilities, resources and completion criteria. Release decisions should consider the evidence available, unresolved defects, untested areas and remaining risks.
8.0 IREB, ISTQB AND MSTB
- IREB : the International Requirements Engineering Board - provides the Certified Professional for Requirements Engineering (CPRE) certification scheme, supporting structured knowledge in understanding, documenting, validating and managing requirements,
- ISTQB - the International Software Testing Qualifications Board - provides the Certified Tester qualification scheme, including the Certified Tester Foundation Level (CTFL), supporting knowledge of testing principles, techniques, management and tools.
In Malaysia, the Malaysian Software Testing Board (MSTB) supports professional development and conducts examinations under the ISTQB Certified Tester scheme as Malaysia’s ISTQB member board.
The value of professional qualifications depends on applying the knowledge with experience, communication and sound judgement.
9.0 APPLYING THE KNOWLEDGE
Organisations should involve relevant stakeholders early, define measurable expectations, assess risks, maintain traceability and evaluate changes before implementation.
When failures occur, they should correct the immediate problem, investigate its causes, implement proportionate corrective action and verify effectiveness. Findings should feed back into requirements, controls and future tests.
Reliable software depends on clear requirements, meaningful testing and accountable risk decisions throughout its operational life.
SECURING ASIA’S ENERGY FUTURE: DIVERSIFIED SUPPLY, LOWER EMISSIONS AND THE ROLE OF LNG
An assessment based on information available as at 8 November 2026. Historical figures, preliminary estimates and forecasts are distinguished below.
Asia’s energy security depends on its ability to provide reliable and affordable energy while reducing greenhouse gas emissions. These objectives must advance together: unreliable supply disrupts economic activity, unaffordable energy places pressure on households and industry, and continued emissions growth increases climate risks.
Liquefied natural gas (LNG) can contribute to this effort by diversifying gas supplies and supporting certain industrial and electricity needs. However, its contribution to decarbonisation depends on how it is produced, transported and used and what energy source it replaces.
1) CURRENT POSITON: GROWING ENERGY DEMAND AND VULNERABLE SUPPLY
Asia is not one uniform energy market. Countries differ in domestic resources, infrastructure, purchasing power and energy policies. Regional planning must therefore accommodate different national circumstances.
Southeast Asia illustrates the scale of the challenge. The International Energy Agency’s (IEA) Southeast Asia Energy Outlook 2026 projects that the region will account for nearly 20% of global energy demand growth to 2035 under today’s policy settings. Before the current crisis, approximately one-third of its gas imports came from the Middle East, exposing buyers to concentrated supply routes.
The 2026 disruption demonstrates why this exposure matters. The IEA’s Global Gas Security Review 2026 reports the following:
- The fuel or technology being displaced,
- Gas leakage and methane emissions throughout the supply chain,
- Energy used for liquefaction and transport, and
- The efficiency and operating pattern of the receiving plant.
Friday, November 06, 2026
SWRO: Turning Seawater into a Resource for Industry and Communities - By Nik Zafri
Cover image: AI-generated illustration of an SWRO facility - not a photograph of the former client’s installation.
Disclaimer and Acknowledgement
This article is intended for general technical awareness and knowledge sharing. It draws partly on my consultancy experience supporting a client with interests in construction and desalination towards ISO 9001 certification.
I have not personally observed a working installation using the approach informally described as “slow-boiling” desalination. References to that approach reflect general technical principles and applicable requirements, rather than firsthand verification of an operating unit.
This article does not assess project investment costs, commercial feasibility, water sales or selling prices. Any illustrative electricity-cost calculations are included solely to explain the calculation method and should not be interpreted as actual tariffs, total production costs, quotations or commercial projections.
The discussion does not replace project-specific engineering assessments, regulatory approvals or verification of water and recovered-salt quality for their intended use.
I also extend my thanks to the subject matter experts who prefer to remain anonymous for their valuable input and technical insights.
Water security is also business continuity.
For factories, power stations and mining operations, an interruption in water supply can affect production, equipment, product quality and contractual commitments.
Seawater Reverse Osmosis (SWRO) offers coastal industries an alternative source of freshwater, potentially reducing their dependence on rivers, groundwater and municipal treated-water supplies.
The main focus of this article is SWRO.
1) HOW DOES IT WORK
SWRO uses pressure to drive water through semi-permeable membranes, separating seawater into a low-salinity product stream, called permeate, and a concentrated salt stream, called brine. It operates through membrane separation rather than boiling and condensation.
Diagram 1: Simplified SWRO treatment process
llustrative process only. The treatment configuration depends on seawater characteristics and the required product quality.
Pretreatment protects membranes against fouling and damage. Energy-recovery devices recover hydraulic energy from the pressurised brine stream, reducing pumping demand. The concentrated stream still requires appropriate management.
2.0 CAN IT SUPPORT INDUSTRY
Municipal treated water remains a valuable supply. However, industrial processes may require water specifications that differ from drinking-water requirements.
SWRO can provide an alternative feedwater source, with additional treatment selected for each application.
Table 1: SWRO and its application to various industries
RO is used in boiler-feedwater and semiconductor water-treatment systems. However, SWRO permeate is not automatically boiler-ready or ultrapure water. Further purification and conditioning must meet the relevant equipment and process specifications.
The wider benefit is supply diversification. Where industry can use a suitable alternative source, it may reduce demand on freshwater resources shared with surrounding communities.
Chile provides a practical example. BHP reports that Escondida ceased groundwater withdrawals for operational water supply in 2019 and has sourced its operational water withdrawals from desalinated ocean water since FY2020. Its infrastructure uses reverse osmosis and pumps desalinated water inland to the mine.
3.0 EXAMPLE - WATER OUTPUT AND ELECTRICITY DEMAND
The following calculations illustrate the relationship between feedwater, recovery, product water and electricity consumption.
These are assumed values for explanation, not plant design criteria, a quotation or a performance guarantee.
Table 2: Assumed Values
3.1. Permeate Production
Permeate = Feed × Recovery = 1,000 × 0.45 = 450 m³/day
This is equivalent to 450,000 litres per day, before downstream treatment losses and plant service-water consumption.
3.2. Brine Production
Brine = Feed − Permeate = 1,000 − 450 = 550 m³/day
This simplified balance excludes pretreatment backwash, chemical-cleaning waste and other side streams. Actual intake and waste-management requirements must include them.
3.3 Electricity Demand
Daily electricity = Permeate × Specific electricity consumption = 450 × 3.5 = 1,575 kWh/day
The assumed energy figure must represent a clearly defined system boundary. Additional treatment or long-distance pumping may increase overall consumption.
3.4. Electricity cost
Daily electricity cost = Electricity demand × Electricity rate = 1,575 × RM0.40 = RM630/day
Electricity cost per cubic metre of permeate: RM630 ÷ 450 = RM1.40/m³
This is electricity cost only. Total water cost must also include capital recovery, financing, membranes, chemicals, labour, maintenance, testing, residuals management and distribution.
If all 450 m³/day were suitable for an industrial duty and displaced an equivalent municipal-water demand, the theoretical substitution over 30 operating days would be:
450 × 30 = 13,500 m³
Actual substitution would depend on plant availability, demand, storage and net usable output.
4.0 CAN DESALINATED SEAWATER BE CONSUMED?
Yes, properly treated and verified desalinated seawater can become safe drinking water.
Salt removal is one part of the process. Potable supply also requires control of chemical and microbial risks, appropriate post-treatment, protected storage and distribution, and compliance with applicable drinking-water requirements.
WHO guidance addresses these risks through a water safety plan approach. It also highlights stabilisation or remineralisation to reduce the corrosiveness of desalinated water, and the need to assess substances such as boron that may require particular treatment attention.
Diagram 2: The intended use determines the treatment pathway
Singapore’s NEWater is a separate source: it is produced from treated used water and is extensively used by industry. This distinction matters when comparing seawater desalination with water reclamation and reuse.
6.0 APPLICATION OF ISO 9000 SYSTEM
Different standards address different aspects of the operation.
ISO 13205 and ISO 23446 are technical references with different scopes. As of November 2026, ISO 23446:2021 remains published and is under systematic review; the review does not itself create a replacement edition.
An ISO 9001 certificate supports confidence in the organisation’s management system. It does not, by itself, establish that every batch of water is safe to drink. Product conformity still requires defined acceptance criteria, effective controls and verified results.
7.0 BOILERS AND JKKP
The connection with boilers can arise in two ways: SWRO water may undergo further treatment for use as boiler feedwater, or a separate thermal desalination system may use steam to evaporate seawater.
In Malaysia, the boiler and associated equipment must be assessed against Jabatan Keselamatan dan Kesihatan Pekerjaan (JKKP/DOSH) requirements.
For thermal systems sometimes described informally as “slow boiling,” the heating rate does not determine the legal classification. The equipment’s design, pressure conditions and heating arrangement must be examined.
Under the Occupational Safety and Health (Plant Requiring Certificate of Fitness) Regulations 2024, a steam boiler involves a closed vessel generating steam above atmospheric pressure. JKKP also defines pressure vessels as closed containers operating above or below atmospheric pressure.
A vacuum evaporator should therefore be assessed for applicable pressure-vessel requirements and exclusions. A steam boiler supplying heat to that evaporator may require a separate assessment.
For equipment classified as a regulated steam boiler, key requirements include:
Required design verification and installation approval.
Inspection and a valid Certificate of Fitness before operation.
Registered boiler engineers or visiting engineers and boiler operators, according to applicable Twelfth Schedule arrangements.
Appropriately registered competent persons or companies for prescribed specialist work.
Applicable approval for alterations affecting the approved design or operating conditions.
Compliance with applicable statutory and regulatory requirements forms part of ISO 9001 requirements. These legal obligations should therefore be identified and referenced in the Quality Manual and relevant procedures, and fulfilled regardless of certification status.
The management system should connect each regulated item to its approved design, registration details, Certificate of Fitness, competent-person appointments, inspection records and maintenance requirements.
Operating procedures should address the actual hazards, including steam burns, pressure release, vacuum collapse, low-water conditions, scaling, corrosion, chemical cleaning and safe isolation. Protective devices, operating limits and testing arrangements must follow the approved design and applicable requirements.
Water quality and equipment safety require separate evidence: a satisfactory water-test result does not demonstrate that a boiler or evaporator is safe to operate.
8.0 BALANCED DECISION
SWRO carries energy, maintenance and brine-management costs. Intake and discharge arrangements also require environmental assessment. Its suitability should be evaluated alongside demand reduction, leakage control, process-water recycling and other available supplies.
For a coastal industrial development, feasibility should cover the complete system: seawater quality, production demand, power reliability, membrane maintenance, storage, pipelines, environmental requirements and the final water specification.
From a consultancy perspective, this is where process-based management matters: understanding the intended use, identifying risks, establishing controls and retaining evidence that the system consistently delivers what was specified.
The objective is reliable water that is fit for its intended use, supported by sound engineering, safe equipment, controlled operations and evidence of quality.













