---
title: "Explainer: R9 Business Continuity Management Policy: Part B BCM Framework and Methodology"
description: "Explainer: R9 Business Continuity Management Policy: Part B BCM Framework and Methodology"
image: https://blog.bcm-institute.org/hubfs/Regulatory%20Requirement%20Company%20Logo/BNM%20Regulatory%20Icon/IC_OR_TOC_R9%20BCM%20Framework%20and%20Methodology_BNM.png
---

[![BCMIWhiteLogo.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogo.png?width=556&name=BCMIWhiteLogo.png "BCMIWhiteLogo.png")](http://www.bcm-institute.org/)

- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/) 
    - [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
    - [Our History](https://www.bcm-institute.org/about-us/our-history/)
    - [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
    - [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
    - [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog) 
    - [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
    - [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
    - [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
    - [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
    - [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
    - [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
    - [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered) 
    - [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
    - [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
    - [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
    - [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
    - [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
    - [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
    - [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)

- <https://www.facebook.com/BCMInstitute/>
- <https://www.linkedin.com/company/business-continuity-management-institute-bcm-institute>

##### Business Continuity Management Policy Framework Issued by Central Bank of Malaysia

![BCM BB MY Sunset_with Cert Logo](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20BCM%20%5BAi%20Gen%20Blog%20Photo%5D/BCM%20BB%20MY%20Sunset_with%20Cert%20Logo.jpg?width=2000&height=1333&name=BCM%20BB%20MY%20Sunset_with%20Cert%20Logo.jpg "BCM BB MY Sunset_with Cert Logo")

# Explainer: R9 Business Continuity Management Policy: Part B BCM Framework and Methodology

The Business Continuity Management (BCM) policy framework released in December 2022 outlines expectations for financial institutions operating in Malaysia to strengthen resilience and preparedness in the face of disruptions. 

Part B of these guidelines emphasises Policy Requirement 9, which focuses on the BCM Framework and Methodology. This section outlines the key considerations and expectations that banks must address when developing their business continuity management strategies.

[Moh Heng Goh](https://blog.bcm-institute.org/bcm/author/moh-heng-goh) Mar 3, 2026

###### Business Continuity Management Certified Planner-Specialist-Expert

### **Disclaimer**

**This article is provided for general informational and educational purposes only. It summarises publicly available regulatory guidance issued by Bank Negara Malaysia.**

**BCM Institute is not affiliated with, endorsed by, or acting on behalf of Bank Negara Malaysia. The name “Bank Negara Malaysia” is used strictly for descriptive and reference purposes**.

---

### Explainer: R9 Business Continuity Management Guidelines

### Part B Policy Requirements 9:  BCM Framework and Methodology

 

| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f31211e5-c808-451c-9070-7776c492f41f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f31211e5-c808-451c-9070-7776c492f41f) | Part B Policy Requirements 9 of the Business Continuity Management Policy highlights the following factors that banks must consider when developing their "BCM Framework and Methodology". | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/3fff33c0-68c0-46f9-bc60-ba9314e16fa4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3fff33c0-68c0-46f9-bc60-ba9314e16fa4) |
| --- | --- | --- |

*[![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/ea26bf7b-aaa3-4770-8867-683ebc4d82fd.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ea26bf7b-aaa3-4770-8867-683ebc4d82fd)Click the button to access the official BCM policy document (December 2022 release).  A sample table of contents is provided below for reference. *

![BNM BCM Policy TOC Part B 8-9 Part C 10](https://blog.bcm-institute.org/hs-fs/hubfs/BNM%20BCM%20Policy%20TOC%20Part%20B%208-9%20Part%20C%2010.png?width=936&height=544&name=BNM%20BCM%20Policy%20TOC%20Part%20B%208-9%20Part%20C%2010.png)

#### Alignment with Business Objectives

Banks should ensure their BCM framework aligns with their business objectives, risk appetite, and regulatory requirements. This involves integrating BCM into the organisation's governance structure, risk management framework, and strategic planning processes.

#### Proactive Approach

Banks are expected to adopt a proactive approach to BCM, identifying potential risks, threats, and vulnerabilities that may impact their critical business functions.

This includes conducting regular risk assessments, business impact analyses, and scenario-based planning exercises to identify and mitigate potential disruptions.

#### Documentation and Policy Framework

[![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/794d010b-2991-4be8-8b31-dd67fa5a2e33.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/794d010b-2991-4be8-8b31-dd67fa5a2e33)Banks should establish a comprehensive and well-documented BCM policy framework that outlines their approach, principles, and standards for BCM.

This policy framework should be reviewed and approved by the board of directors and communicated across the organisation.

#### Roles and Responsibilities

[![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/fa4df32d-caea-4158-ae4f-e15776a367d8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fa4df32d-caea-4158-ae4f-e15776a367d8)Clear roles, responsibilities, and accountabilities should be defined for all staff involved in the BCM process.

Banks should designate key personnel responsible for driving the BCM program and ensuring its effective implementation.

#### BCM Governance Structure

[![OR Governance BCMPedia](https://no-cache.hubspot.com/cta/default/3893111/bc513cca-b33c-4a90-9ffa-5ba56095f7dd.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/bc513cca-b33c-4a90-9ffa-5ba56095f7dd)Banks should establish a governance structure that provides oversight and guidance for the BCM program.

This includes establishing a BCM steering committee or a similar body comprising senior management representatives responsible for setting strategic directions, monitoring progress, and ensuring compliance with BCM requirements.

#### BCM Methodology

[![BCM Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/065689b0-d471-49e6-9981-ad108771ca1a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/065689b0-d471-49e6-9981-ad108771ca1a)Banks are expected to adopt a systematic and consistent BCM methodology that covers all stages of the BCM lifecycle, including risk assessment, business impact analysis, strategy development, plan development, testing, and maintenance.

This methodology should be aligned with recognised industry standards and best practices.

#### Documentation and Records

Banks should maintain comprehensive documentation and records related to their BCM program.

This includes keeping inventories up-to-date on critical business functions, processes, systems, and dependencies, and documenting BCM policies, procedures, and test results.

#### Review and Continuous Improvement

Banks should regularly review and update their BCM framework to ensure its effectiveness. This involves conducting periodic assessments, reviews, and audits to identify gaps, address emerging risks, and enhance the BCM program based on lessons learned from exercises and real-life incidents.

### Conclusion

Policy Requirement 9 of the Business Continuity Management Guidelines emphasises the importance of a robust BCM framework and methodology for financial institutions operating in Malaysia. 

By considering the factors outlined in this policy requirement, banks can develop a proactive and comprehensive BCM program that aligns with their business objectives and regulatory requirements.

This framework ensures effective risk management, facilitates timely response to disruptions, and enables the continuity of critical business functions. Compliance with these guidelines will strengthen the banking sector's resilience in Malaysia and contribute to maintaining financial stability in the face of adverse events.

 This article is an independent informational summary for educational purposes. It is not affiliated with, endorsed by, or officially representing any regulatory authority. 

| **Business Continuity Management Policy by Malaysia Central Bank Part B** |  |  |
| --- | --- | --- |
| **Requirement 8** | **Requirement 9** | **Requirement 10** |
| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/9c1039bd-cb6a-42d5-9226-3a24bf498f7e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9c1039bd-cb6a-42d5-9226-3a24bf498f7e) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f31211e5-c808-451c-9070-7776c492f41f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f31211e5-c808-451c-9070-7776c492f41f) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/b303cdb7-7981-4227-adc9-0a3145d130d9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b303cdb7-7981-4227-adc9-0a3145d130d9) |

 

| **Business Continuity Management Policy by Bank Negara Malaysia Part B Requirement 9** |  |  |  |  |  |
| --- | --- | --- | --- | --- | --- |
| **R 9A** | **R 9B** | **R9C** |  |  |  |
| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/aa2c0db2-5601-4503-87e0-050d6298303f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/aa2c0db2-5601-4503-87e0-050d6298303f) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/c5c1a0e7-78c9-42ff-80f8-d0a916d48214.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c5c1a0e7-78c9-42ff-80f8-d0a916d48214) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/96e0f2c0-b2e7-4bf8-aff1-1c2621356c7b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/96e0f2c0-b2e7-4bf8-aff1-1c2621356c7b) |   |   |   |
| **R 9D** | **R 9E** | **R9F** |   |   |   |
| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/d0635db9-c948-45b8-b986-0623767cd4cd.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0635db9-c948-45b8-b986-0623767cd4cd) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/53de356d-c3b6-40e5-96f9-aa8d3e531924.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/53de356d-c3b6-40e5-96f9-aa8d3e531924) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/b362037a-2716-4363-82b3-31cea1b75a72.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b362037a-2716-4363-82b3-31cea1b75a72) |   |   |   |
| **R 9G** | **R 9H** | **R9I** |   |   |   |
| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/1436ed3e-bbf9-4cbd-b771-2a66e7433f69.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1436ed3e-bbf9-4cbd-b771-2a66e7433f69) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/d1837085-b4a9-45b9-86a7-b6d13c8d4ae7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d1837085-b4a9-45b9-86a7-b6d13c8d4ae7) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/80f5608b-c145-4617-9a7f-5b000f32c60c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/80f5608b-c145-4617-9a7f-5b000f32c60c) |   |   |   |
| **R 9J** | **BCM Policy** | **Back to R9** |   |   |   |
| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/1f4cb3a3-96d9-4847-a75f-293159423546.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1f4cb3a3-96d9-4847-a75f-293159423546) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/ea26bf7b-aaa3-4770-8867-683ebc4d82fd.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ea26bf7b-aaa3-4770-8867-683ebc4d82fd) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f31211e5-c808-451c-9070-7776c492f41f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f31211e5-c808-451c-9070-7776c492f41f) |   |   |   |

#### Learn more about BCM-5000 \[B-5\] and BCM-300 \[B-3\]

| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/46460171-c91a-4936-9bb2-8dc5928a0e02.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/46460171-c91a-4936-9bb2-8dc5928a0e02) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/1cb17ac7-50b2-4f88-bc4b-c7444e4b57b5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1cb17ac7-50b2-4f88-bc4b-c7444e4b57b5) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/21525c10-4003-4934-95fc-fe218174bc5b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/21525c10-4003-4934-95fc-fe218174bc5b) |
| --- | --- | --- |
| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/9ff8a3dc-e39a-465b-929f-72e232cdd5fb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9ff8a3dc-e39a-465b-929f-72e232cdd5fb) | [![Register \[BL-B-3\]*](https://no-cache.hubspot.com/cta/default/3893111/ac6cf073-4cdd-4541-91ed-889f731d5076.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ac6cf073-4cdd-4541-91ed-889f731d5076) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f3922b80-e96a-46d6-8993-dc150a5de2d5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f3922b80-e96a-46d6-8993-dc150a5de2d5) |

| [![ FAQ BL-B-5 BCM-5000](https://no-cache.hubspot.com/cta/default/3893111/9c199ae8-c470-4bb7-9612-73c7a084e94c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9c199ae8-c470-4bb7-9612-73c7a084e94c) | Submit your intention via the "Tell Me More" button above. | [![FAQ \[BL-B-3\]](https://no-cache.hubspot.com/cta/default/3893111/b3824ba1-7aa1-4eb6-bef8-94f57121c5ae.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b3824ba1-7aa1-4eb6-bef8-94f57121c5ae) |
| --- | --- | --- |
| [![BCCE Business Continuity Certified Expert Certification (Size 100)](https://no-cache.hubspot.com/cta/default/3893111/c010f0fd-7ba6-4f60-b63b-38efafac8ca5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c010f0fd-7ba6-4f60-b63b-38efafac8ca5) |  Alternatively, feel free to email us if you have any questions.  [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [![BCCS Business Continuity Certified Specialist Certification (Size 75)](https://no-cache.hubspot.com/cta/default/3893111/edf25f60-0af5-44f1-ba5b-12a664b9c016.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/edf25f60-0af5-44f1-ba5b-12a664b9c016) |

 

#### **Comments**

 

### More Posts

[![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/839787f4-a4fd-456f-accf-54c947026558.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/839787f4-a4fd-456f-accf-54c947026558)

![BCMIWhiteLogoSmall.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogoSmall.png?width=72&name=BCMIWhiteLogoSmall.png "BCMIWhiteLogoSmall.png")

All rights reserved. Copyright 2026