PROPOSAL FOR ARCHITECTURAL RISK ASSESSMENT - BY NIK ZAFRI

Note on Format and Use

The structure, layout, and presentation format reflected herein originated from my contribution to a proposal prepared for the extension of a hospital project. As the original author, I am declassifying this format, which remains part of my professional work.

Should a similar format or approach appear elsewhere, it may reasonably be understood as deriving from this contribution, which was intended to be integrated into the full hospital extension proposal. The format reflects an established methodology and professional practice developed through prior experience.

The original author and proposer, together with the original project team, remains available to provide clarification or explanation to relevant stakeholders, should the need arise.

Reference and Use Notice

Parties who wish to adopt or refer to this material or format are encouraged to seek prior consent, as its application and interpretation may require appropriate professional judgment and contextual understanding.

Accordingly, no responsibility or liability is assumed for any outcomes or decisions arising from its use outside the original proposal context.

1. Objective

To identify, assess, and mitigate design-derived architectural risks for the proposed hospital extension, ensuring compliance with The Ministry of Health Malaysia (MOH), Joint Commission International (JCI), and CKAPS standards. The assessment excludes generic project risks (budget, staffing, site safety, etc.) and focuses solely on design-related risks.

2. Methodology

3. References

• ISO 31000:2018 – Risk Management – Guidelines (primary framework for identifying, analyzing, and mitigating risks),
• ISO 22301:2019 – Business Continuity Management (important for healthcare facilities that cannot afford downtime),
• ISO 45001:2018 – Occupational Health and Safety Management (relevant to safety-by-design considerations),
• ISO/IEC 27001:2022 – Information Security Management Systems (ISMS) (for HIS, patient data, IoT medical devices),
• ISO/IEC 27701:2019 – Privacy Information Management (relevant to patient confidentiality and compliance with Personal Data Protection Act in Malaysia)
• MOH Telemedicine Blueprint (for digital health and medical IoT alignment),
• Ministry of Health (MOH) Malaysia Guidelines – e.g., Fire Safety, Hospital Planning, Engineering Services.
• CKAPS Requirements – Pusat Perubatan Swasta (Private Healthcare Facilities and Services Act 1998),
• JCI Standards – International accreditation framework for healthcare quality and patient safety,
• ASHRAE Standards (e.g., ASHRAE 170-2021) – Ventilation for healthcare facilities (especially for OTs, ICUs, isolation wards),
• NFPA 101 (Life Safety Code) – Patient egress and fire safety requirements,
• Uniform Building By-Laws (UBBL) Malaysia 1984 (amended 2021) – Fire safety, accessibility, structural requirements,
• MS 1184:2014 – Universal design and accessibility in built environment,
• MS 1525:2019 – Energy efficiency in non-residential buildings (aligns with ESG requirements).
• BS 9999:2017 – Fire safety in building design and management,
• MS IEC 60364 – Electrical installations of buildings,
• MS 830 – Code of practice for air-conditioning and mechanical ventilation,
• MS 1910:2006 – Medical gas pipeline systems (very relevant for hospital extensions),
• BS EN 1822 – HEPA filter standards for critical hospital spaces (e.g., OTs, ICUs),
• DOE Malaysia Environmental Quality Regulations (effluent discharge limits for STP),
• WHO Water, Sanitation and Hygiene (WASH) Standards (hospital water safety),
• ISO 14001:2015 – Environmental Management Systems (relevant for sustainability and ESG),

4. Architectural Risk Categories

5. Financial Risk

6. Strategic Risk

7. Regulatory/Design Risks

8. Architect’s Reporting Obligations

9. Submission and Evaluation Compliance

Appendix 1 - Risk Register: Architectural Risks - Project: .........Hospital Extension (Phase ....... & ............)

Appendix 2 - Stage-Specific Risk Matrix - Project: ............Hospital Extension (Phase ... & .....)

Appendix 3 - Technical Mitigations with Architecture Artifacts - Project: ................. Hospital Extension (Phase .... & .....)

Appendix 4 - Exclusions (Generic Project Risks) - Project: ............ Hospital Extension (Phase .... & ...)

Note : 

Certain “umbrella” risks as mentioned above will be excluded from the site-specific risk register, as they fall under broader project governance

These aspects are typically recognized in the Project Execution Plan (PEP) but excluded from the Hospital Engineering Risk Register