---
title: [OR] [BDCB] [E2] [C19] Conducting Independent Quality Reviews
description: [OR] [BDCB] [E2] [C19] Conducting Independent Quality Reviews
image: https://blog.bcm-institute.org/hubfs/BDCB%20Graphic%20Folder/BDCB%20E2%20Morepost/BDCB%20Sustain%20Phase/%5BOR%5D%20%5BBDCB%5D%20%5BP3%5D%20%5BS5%5D%20%5BC19%5D%20Conducting%20Independent%20Quality%20Reviews.png
---
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Operational Resilience at BDCB: A Strategic Implementation Guide
![BB OR \[A\] 10](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/OR%20Pictures%20A/BB%20OR%20Folder%20A/BB%20OR%20%5BA%5D%2010.jpg?width=2000&height=1333&name=BB%20OR%20%5BA%5D%2010.jpg "BB OR [A] 10")
# \[OR\] \[BDCB\] \[E2\] \[C19\] Conducting Independent Quality Reviews
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/267bd720-a5b8-4fbb-b1c5-a16b6353b7db)The effectiveness of an operational resilience framework is not determined solely by its design, but by how well it is consistently implemented, reviewed, and improved over time.
For the Brunei Darussalam Central Bank (BDCB), safeguarding the stability of the nation’s financial system requires assurance that resilience measures are not only adequate but also independently validated.
The Conduct Independent Quality Review (IQR) stage provides this essential oversight. By engaging objective, impartial reviewers, BDCB ensures that its resilience practices remain aligned with international standards, regulatory expectations, and the realities of emerging risks.
This stage introduces an additional layer of scrutiny beyond internal self-assessment, reinforcing governance accountability, strengthening institutional credibility, and driving continuous improvement.
[Moh Heng Goh](https://blog.bcm-institute.org/bdcb/author/moh-heng-goh) Sep 4, 2025
###### Operational Resilience Planner-Specialist-Expert
###### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/e988f5bf-ed94-4847-aa5a-ae35f45e639e)
### [![\[OR\] \[E2\] \[C19\] \[P3\] \[S5\] Conducting Independent Quality Review](https://no-cache.hubspot.com/cta/default/3893111/ce795037-24ce-4c90-afd2-5253ea9ebb4c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ce795037-24ce-4c90-afd2-5253ea9ebb4c)Chapter 19
### Conduct Independent Quality Review
#### Introduction
[![\[OR\] \[BDCB\] \[P3\] \[S5\] \[C19\] Conducting Independent Quality Reviews](https://no-cache.hubspot.com/cta/default/3893111/9f5b8072-ddae-4e2c-ad63-7f3c1a44559b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9f5b8072-ddae-4e2c-ad63-7f3c1a44559b)
The effectiveness of an operational resilience framework is not determined solely by its design, but by how well it is consistently implemented, reviewed, and improved over time.
For the Brunei Darussalam Central Bank (BDCB), safeguarding the stability of the nation’s financial system requires assurance that resilience measures are not only adequate but also independently validated.
The Conduct Independent Quality Review (IQR) stage provides this essential oversight. By engaging objective, impartial reviewers, BDCB ensures that its resilience practices remain aligned with international standards, regulatory expectations, and the realities of emerging risks.
This stage introduces an additional layer of scrutiny beyond internal self-assessment, reinforcing governance accountability, strengthening institutional credibility, and driving continuous improvement.
#### 1. Objective
To ensure that the operational resilience framework remains effective, compliant, and continuously improved, the BDCB conducts periodic independent quality reviews (IQRs). These reviews provide impartial, evidence-based assurance on the robustness of resilience planning, execution, and adaptation.
#### 2. Implementation Steps
##### 2.1. Define Scope & KPIs of the Independent Review
- Scope Setting: Determine the review’s coverage—e.g., governance, risk management, business continuity, ICT resilience, third-party dependencies.
- Key Quality Indicators (KQIs): Define metrics such as review coverage, corrective action closure rate, timeliness of updates, and stakeholder satisfaction.
- Example: BDCB could include Business Continuity Plans (BCP) exercised during COVID-19, ICT resilience tests, and third-party dependency mapping.
##### 2.2. Engage Independent Reviewers
- Selection: Engage qualified reviewers—internal audit (external to resilience owners), external consultants, or peer central banks.
- Independence: Ensure reviewers have no operational or supervisory responsibility over the areas they assess.
- Example: BDCB could collaborate with academic partners like Universiti Teknologi Brunei (UTB)—leveraging its capacity-building relationship—for methodological rigour, [CGAA](https://www.cgaa.org/article/brunei-darussalam-central-bank?utm_source=chatgpt.com).
##### 2.3. Conduct Desk Review & Document Assessment
- Document Review: Examine BCPs, incident logs, test results, governance minutes, risk registers, and third-party assessments.
- Evaluate: Check alignment with BIS Principles for Operational Resilience (POR), and completeness of recovery planning, [Bank for International Settlements](https://www.bis.org/fsi/fsisummaries/op_resilience.htm?utm_source=chatgpt.com).
- Example: Assess how well BDCB defined “tolerance for disruption” and mapped critical internal and external dependencies.
##### 2.4. Perform Interviews & Field Verification
- Engagement: Interview key stakeholders—Board members, risk committee, senior management, resilience owners.
- Objective: Validate that governance structures, roles, and escalation paths function as intended.
- Example: Confirm that BDCB’s Board is reviewing impact tolerances and resilience metrics regularly , [Bank for International Settlements](https://www.bis.org/fsi/fsisummaries/op_resilience.htm?utm_source=chatgpt.com).
##### 2.5. Analyse Findings & Benchmarking
- Gap Analysis: Identify areas of weakness—e.g., insufficient testing frequencies, third-party resilience gaps, and outdated documentation.
- Benchmarking: Compare BDCB practices against standards (e.g., Basel POR, other regional central banks such as MAS or BNM), [Bank for International Settlements](https://www.bis.org/fsi/fsisummaries/op_resilience.htm?utm_source=chatgpt.com).
- Example: Evaluate whether BDCB's stress-testing and operational continuity planning performed as expected during COVID-19—lessons seen in wider sector resilience [bdcb.gov.bn](https://www.bdcb.gov.bn/index.php/consumer/financial-education/central-bank/10-years-in-review?utm_source=chatgpt.com).
##### 2.6. Produce Independent Quality Review Report
- Report Components:
- Executive Summary: Overall judgment on resilience maturity.
- Observations: Documented strengths and deficiencies.
- Recommendations: Specific, actionable remediation steps with timelines.
- Prioritisation: Highlight high-impact findings (e.g., ICT cyber resilience, third-party continuity).
- Example: Recommend formalising “exit strategies” and substitutability assessments for outsourcing partners, aligning with the POR [Bank for International Settlements](https://www.bis.org/fsi/fsisummaries/op_resilience.htm?utm_source=chatgpt.com).
##### 2.7. Present Findings to Governance Forums
- Presentation: Deliver the report to BDCB’s risk committee or Board.
- Discussion Points: Review high-risk gaps, proposed remediation plans, and needed resources.
- Example: Ensure the Board formally endorses updates to resilience strategy, impact tolerances, and monitoring KPIs [blog.bcm-institute.org](https://blog.bcm-institute.org/operational-resilience/or-p1-s5-r-key-governance-requirements-and-expectations?utm_source=chatgpt.com).
##### 2.8. Remediate & Track Actions
- Action Plans: Assign clear owners and deadlines for each recommendation.
- Monitoring: Use dashboards or follow-up reviews to track closure.
- Example: If BDCB’s BCP lacked sufficient ICT backup procedures, develop an action plan to enhance data replication and test it quarterly.
##### 2.9. Re-Review & Continuous Improvement
- Follow-up Review: After remediation, schedule another review to validate changes.
- Cycle of Improvement: Institutionalise IQRs as recurring (e.g., annually or biennially).
- Example: Track over time how COVID-19 preparedness gaps were addressed consistently across all functions.
#### 3. Example Scenario: BDCB COVID-19 Resilience Review
- Context: During the pandemic, financial institutions under BDCB’s supervision demonstrated resilience, continuity, and rapid adaptation.
- IQR Objective: Assess how BDCB’s own resilience held up—was BCP invoked seamlessly? Were incident management lines clear?
- Findings: Maybe response teams lacked jurisdiction clarity, or the ICT fallback needed improvements.
- Remediation: Strengthen crisis communication protocols and enhance BCP training.
- Governance: Present findings to the Board and assign actions to IT, operations, and corporate development teams.
- Outcome: Better preparedness for future disruptions and alignment with POR governance expectations, [Bank for International Settlements](https://www.bis.org/fsi/fsisummaries/op_resilience.htm?utm_source=chatgpt.com).
#### 4. Governance Linkages & Regulatory Alignment
This IQR stage reinforces governance best practices:
- Board Oversight: Ensures they receive independent assurance on resilience posture and remediation progress [blog.bcm-institute.org](https://blog.bcm-institute.org/operational-resilience/or-p1-s5-r-key-governance-requirements-and-expectations?utm_source=chatgpt.com)[Bank for International Settlements](https://www.bis.org/fsi/fsisummaries/op_resilience.htm?utm_source=chatgpt.com).
- Senior Management Accountability: Evaluates how well directives are implemented across functions.
- Risk Committee Role: Provides strategic guidance and challenges assumptions.
#### 5. Key Benefits & Sustainability
- Greater Assurance: Independent perspectives uncover blind spots.
- Regulatory Confidence: Demonstrates commitment to international standards (e.g., Basel POR).
- Operational Leverage: Embeds improvement culture and readiness.
- Institutional Memory: Builds documented evidence of resilience maturity over time.
#### Summary Table: Implementation Steps
| Step | Action | BDCB Context Example |
| --- | --- | --- |
| 1. Define Scope & KPIs | Set IQR scope and metrics | Cover BCP, ICT, third-party maps |
| 2. Engage Reviewers | Internal audit, UTB, or peers | UTB collaboration for rigour [CGAA](https://www.cgaa.org/article/brunei-darussalam-central-bank?utm_source=chatgpt.com) |
| 3. Desk Review | Analyse documents, tests | Compared to the POR expectations [Bank for International Settlements](https://www.bis.org/fsi/fsisummaries/op_resilience.htm?utm_source=chatgpt.com) |
| 4. Interviews | Validate governance & execution | Board review of metrics, senior management |
| 5. Analyse & Benchmark | Identify gaps vs standards | COVID-19 BCP performance [bdcb.gov.bn](https://www.bdcb.gov.bn/index.php/consumer/financial-education/central-bank/10-years-in-review?utm_source=chatgpt.com) |
| 6. IQR Report | Summarise observations & actions | Include ICT backups and supplier resilience |
| 7. Present to Board | Secure endorsement & resources | Board approves updated resilience strategy |
| 8. Remediate | Implement improvements with tracking | Update BCPs, conduct regular ICT tests |
| 9. Re-Review | Validate improvements & institutionalise | Conduct annual IQR cycles |
#### Closing Thought
Conducting an Independent Quality Review transforms operational resilience from a reactive checklist into a proactive, structured cycle of assurance and improvement. For BDCB, it reinforces governance, aligns with global standards, and—most critically—ensures that the bank remains robust in the face of evolving disruptions, now and into the future.
#### Summing Up ...
Independent quality reviews serve as a cornerstone of sustainable operational resilience. For BDCB, they provide unbiased assurance that resilience strategies are effective, governance structures are functioning, and areas of improvement are promptly addressed.
More importantly, they transform resilience into a dynamic capability—one that adapts to evolving threats, embraces best practices, and maintains public trust in the central bank’s ability to safeguard Brunei Darussalam’s financial stability.
By institutionalising independent reviews as a recurring discipline, BDCB ensures that its operational resilience framework is not only preserved but continuously enhanced, securing long-term confidence in its mission and mandate.
| | **Operational Resilience at BDCB: A Strategic Implementation Guide** | | | | | |
| --- | --- | --- | --- | --- | --- | --- |
| | **"Sustain" Phase of the Operational Resilience Planning Methodology** | | | | | |
| | **C14** | **C15** | **C16** | **C17** | **C18** | **C19** |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2a29754-d200-4bab-9802-6081ca800251) | [![OR\] \[BDCB\] \[P3\] \[C14\] The Five Stages of the "Sustain" Phase in OR Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/e6c702ef-de82-4c99-bc98-774aa96f8e0e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/e6c702ef-de82-4c99-bc98-774aa96f8e0e) | [![\[OR\] \[BDCB\] \[P3\] \[S1\] \[C15\]Introducing Cultural Change Management](https://no-cache.hubspot.com/cta/default/3893111/7dc90ca5-ce35-4a06-9b17-9a42b330d976.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7dc90ca5-ce35-4a06-9b17-9a42b330d976) | [![\[OR\] \[BDCB\] \[P3\] \[S2\] \[C16\] Developing a Communication Strategy](https://no-cache.hubspot.com/cta/default/3893111/c4291d02-ae59-4536-85a6-146a1b1d7def.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c4291d02-ae59-4536-85a6-146a1b1d7def) | [![\[OR\] \[BDCB\] \[P3\] \[S3\] C17\] Implementing Training and Awareness](https://no-cache.hubspot.com/cta/default/3893111/c6e468c2-bd46-4a09-b818-b3e80e3ac51c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c6e468c2-bd46-4a09-b818-b3e80e3ac51c) | [![\[OR\] \[BDCB\] \[P3\] \[S4\] \[C18\] Providing Self-Assessment](https://no-cache.hubspot.com/cta/default/3893111/ba6e0a2c-802d-4f34-90e1-70def65cfee5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ba6e0a2c-802d-4f34-90e1-70def65cfee5) | [![\[OR\] \[BDCB\] \[P3\] \[S5\] \[C19\] Conducting Independent Quality Reviews](https://no-cache.hubspot.com/cta/default/3893111/9f5b8072-ddae-4e2c-ad63-7f3c1a44559b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9f5b8072-ddae-4e2c-ad63-7f3c1a44559b) |
| **OR Planning Methodology Phases** | **Plan** | **Implement** | **Sustain** | | |
| --- | --- | --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/8f21052d-df77-4800-a1aa-d8814f521b1f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/916b2b16-ae9c-4a04-a625-dc8263580a5d) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0722d3dd-ab48-494a-aee0-5c89a7574cb1) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/49f83bdf-ec85-4036-867c-d21614c317f6) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/515160b4-9caa-4c17-a489-3ed9e2ca5598) | |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)[](https://cta-redirect.hubspot.com/cta/redirect/3893111/13a448f1-f09c-42da-a57e-0988e41658c5)Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About Blended Learning OR-5000 \[BL-OR-5\] or OR-300 \[BL-OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments**
### More Posts
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/d41714c9-8019-4282-95bf-08d62ddc4710)
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/bdcb/author/moh-heng-goh"
},
"dateModified" : "2025-09-04T07:28:02.003Z",
"datePublished" : "2025-09-04T07:27:53.000Z",
"headline" : "[OR] [BDCB] [E2] [C19] Conducting Independent Quality Reviews",
"image" : [ "https://blog.bcm-institute.org/hubfs/BDCB%20Graphic%20Folder/BDCB%20E2%20Morepost/BDCB%20Sustain%20Phase/%5BOR%5D%20%5BBDCB%5D%20%5BP3%5D%20%5BS5%5D%20%5BC19%5D%20Conducting%20Independent%20Quality%20Reviews.png" ],
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/bdcb/or-bdcb-e2-c19-conducting-independent-quality-reviews",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```