CBF 1: Risk Assessment and Guarantee Issuance
Inter-dependencies

The effectiveness of the Risk Assessment and Guarantee Issuance process at Credit Guarantee Corporation Malaysia (CGC) is inherently dependent on a complex network of internal and external inter-dependencies. These relationships are critical to ensuring that the function operates seamlessly from the initial application intake through to post-issuance monitoring.
This chapter explores the interconnectedness of sub-processes within CBF-1 and the reliance on both internal business units—such as Risk Management, Credit Operations, Legal, and IT—and external entities, including financial institutions, credit bureaus, and customers. Each sub-function involves upstream inputs, downstream outputs, or mutual collaboration that influences the accuracy, speed, and integrity of the guarantee issuance process.
Understanding these dependencies allows CGC to identify potential points of failure, assess operational risks, and build more resilient and coordinated workflows. This section aligns with the Business Continuity Management (BCM) framework outlined by BCM Institute, emphasising the need to map critical inter-dependencies to improve crisis preparedness and service continuity.
Here is the table for the Key Business Processes and Sub-Processes for CBF-1: Risk Assessment and Guarantee Issuance of Credit Guarantee Corporation Malaysia (CGC), following the dependency structure and guidance from BCMpedia Part 5: Inter-dependencies v2.0:
Table 5: [BIA] [P5] Inter-dependencies for CBF 1: Risk Assessment and Guarantee Issuance
Critical Business Function |
CBF Code |
Name of Business Unit or Vendor/Supplier/Outsource Partner |
Type of Dependency - Internal |
Type of Dependency - External |
Type of Dependency |
Description of Nature of Dependency |
Application Intake |
1.1 |
Business Development, Customer Service |
✔ |
|
Upstream |
Customer application information must be accurately captured and forwarded to the assessment team. |
Preliminary Eligibility Check |
1.2 |
Credit Operations, IT Department |
✔ |
|
Upstream |
Depends on internal systems for eligibility criteria verification and customer data. |
Credit Risk Assessment |
1.3 |
Risk Management, Credit Department |
✔ |
Credit Bureau, External Databases |
Upstream & External |
Relies on external credit scoring agencies and internal risk frameworks. |
Site Visits / Due Diligence (if required) |
1.4 |
Risk Management, Field Officers |
✔ |
Customer, Third-Party Assessors |
Mutual |
Internal team depends on field reports and interactions with customers or partners. |
Guarantee Structuring |
1.5 |
Risk Management, Legal, Finance |
✔ |
|
Downstream |
Depends on prior risk evaluation to structure terms and conditions. |
Approval Process |
1.6 |
Credit Committee, Senior Management |
✔ |
|
Mutual |
Internal process requiring multi-level input and agreement. |
Issuance of Guarantee |
1.7 |
Credit Operations, Legal, Customer Service |
✔ |
Customer, Financial Institutions |
Downstream & External |
Guarantee documents issued to customer and/or financing banks. |
Post-Issuance Monitoring Setup |
1.8 |
Monitoring & Recovery Unit, IT |
✔ |
External Auditors, Reporting Agencies |
Mutual |
Requires coordination between internal monitoring and compliance with external reporting obligations. |
Notes
- Internal dependencies focus on functional relationships between departments within CGC.
- External dependencies include third-party sources such as credit bureaus, customers, banks, and field verification partners.
- Type of Dependency categorises the direction and nature of reliance in line with BCM best practices:
- Upstream: Inputs required from others.
- Downstream: Outputs used by others.
- Mutual: Two-way interdependence.
Summing Up ... for Part 5
The assessment of inter-dependencies within CBF-1 reveals the pivotal role that structured collaboration plays in enabling CGC’s core mission—facilitating access to financing through guarantee issuance. Each sub-process depends on timely, accurate, and secure information exchanges across business units and external stakeholders.
By clearly identifying these dependencies, CGC enhances its ability to maintain continuity under stress, address operational bottlenecks, and ensure that guarantee issuance remains efficient and compliant. Furthermore, this inter-dependency mapping lays a critical foundation for developing targeted mitigation strategies and contingency plans that are essential to sustaining business performance during disruptions.
The insights from this chapter will feed directly into CGC’s overall resilience planning, allowing for a more robust, transparent, and responsive risk assessment and guarantee issuance function.
CBF 1: Risk Assessment and Guarantee Issuance
Vital Records
Vital records play a critical role in ensuring the operational continuity of Credit Guarantee Corporation Malaysia (CGC), particularly in the execution of CBF-1: Risk Assessment and Guarantee Issuance.
These records are essential documents and data that are required to perform or resume business functions during and after a disruption. In the context of CGC’s core guarantee operations, these records encompass customer application documents, credit assessments, due diligence reports, legal contracts, and post-issuance monitoring details.
The identification, classification, and preservation of these vital records are integral to CGC’s Business Continuity Management (BCM) strategy. Each sub-process within the Risk Assessment and Guarantee Issuance function relies on specific records to ensure accuracy, traceability, compliance, and timely decision-making.
Accordingly, this chapter outlines the vital records associated with each sub-process, detailing their media type, storage location, and custodianship to support the organisation's resilience and recovery planning.
Based on the provided information and referencing BCM Institute’s guidance on Vital Records, here is a structured table outlining the Critical Business Function (CBF-1 Risk Assessment and Guarantee Issuance) and its Sub-Processes, together with associated Vital Records details:
Table 6: [BIA] [P6] Vital Records for CBF 1: Risk Assessment and Guarantee Issuance
Critical Business Function |
Critical Business Function Code |
Description of Vital Records |
Media Type |
Location |
In Whose Care |
Application Intake |
1.1 |
Customer application forms, supporting documents (e.g. financials) |
Digital & Hardcopy |
Document Management System, Filing Cabinet |
Risk Department Executive |
Preliminary Eligibility Check |
1.2 |
Eligibility assessment records, screening logs |
Digital |
Risk Assessment System |
Credit Analyst |
Credit Risk Assessment |
1.3 |
Credit reports, scoring worksheets, and internal assessment forms |
Digital & Hardcopy |
Risk System Repository |
Credit Risk Manager |
Site Visits / Due Diligence (if required) |
1.4 |
Site visit reports, due diligence checklists, and photos |
Digital & Hardcopy |
Shared Drive, Risk Department Files |
Risk Officer |
Guarantee Structuring |
1.5 |
Guarantee structure proposal, financial simulation documents |
Digital |
Guarantee Structuring System |
Senior Credit Analyst |
Approval Process |
1.6 |
Approval memos, decision papers, and approval minutes |
Digital & Hardcopy |
Board Secretariat Archive |
Approving Authority / Secretary |
Issuance of Guarantee |
1.7 |
Guarantee certificates, terms & conditions, legal contracts |
Digital & Hardcopy |
Guarantee Management System, Legal File |
Legal Department |
Post-Issuance Monitoring Setup |
1.8 |
Monitoring schedule, customer portfolio records, and risk triggers |
Digital |
Post-Issuance Monitoring Platform |
Risk Monitoring Officer |
This table follows the standard structure outlined by BCM Institute's Part 6: Vital Records, ensuring each sub-process under CBF-1 is aligned with documentation, format, and custodianship necessary to support recovery and continuity planning.
Summing Up ... for Part 6
In conclusion, the protection and availability of vital records associated with CBF-1 are paramount to sustaining CGC’s guarantee issuance and risk management activities during a crisis or business disruption.
Through proper documentation, storage, and accountability, CGC ensures that its critical information assets are not only secure but also accessible when most needed.
This reinforces confidence among stakeholders and upholds the organisation’s ability to deliver on its mandate even under adverse conditions.
Regular review and updates of the vital records inventory will further enhance CGC’s preparedness and operational continuity.
More Information About Business Continuity Management Courses
To learn more about the course and schedule, click the buttons below for the BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].