[OR] [BDCB] [E2] [C3] Assessing Capability and Maturity

Chapter 3

Assess Capability and Maturity - BDCB’s Operational Resilience

1. Purpose & Scope

This stage evaluates how mature BDCB is in operational resilience—the capacity to prevent, absorb, recover, and adapt to operational disruptions. We examine BDCB’s existing frameworks, capabilities, and readiness across governance, risk controls, digital infrastructure, testing processes, and supervisory mechanisms.

2. Implementation Steps

2.1. Define Resilience Domains & Maturity Criteria

• Identify domains relevant to BDCB:
  • Governance & Leadership: robust oversight structures.
  • Risk Management & Supervision: risk-based oversight, stress testing.
  • Cybersecurity & Tech Resilience: IT defences incident response.
  • Continuity & Recovery Processes: BCPs, backups.
  • Digital Infrastructure: payment systems, statistics systems.
  • Testing & Improvement: drills, simulations, audits.
• Specify maturity levels (e.g., Ad Hoc → Repeatable → Defined → Managed → Optimised).

2.2. Baseline Assessment

• Conduct internal maturity surveys and structured interviews across BDCB divisions (risk, IT, supervision).
• Map practices:
  • Risk-based supervision and stress-testing are embedded IMF eLibrary+1.
  • Cybersecurity and tech risk controls are strengthened via inspections throughout 2024 BDCB.
  • Digital tools: CSS and SupTech infrastructure are in place, enabling real-time data and licensing automation, BDCB+1IMF eLibrary.
  • Governance linkage with MAS and UTB via MoUs suggests mature collaborative oversight and capacity development, BBYB PRIME Borneo Bulletin Yearbook 2025CGAA.
• Assess gaps—e.g., if documented BCPs and regular testing or resiliency drills are less visible in public sources, note them as areas needing enhancement.

2.3. Benchmarking

• Compare BDCB’s maturity against international best practices:
  • Basel III implementation and macroprudential tools, IMF eLibrary+1.
  • Digital resiliency via SupTech and CSS capabilities BDCBIMF eLibrary.
• Highlight peer gaps and global benchmarks like ISO 22313 on business continuity planning on Wikipedia.

2.4. Maturity Scoring & Visualisation

• Assign a maturity level for each domain:
  • Example scoring:
    • Governance & Supervision: Defined → Managed
    • Cybersecurity: Repeatable → Defined
    • Digital Infrastructure: Managed
    • Continuity Planning: Ad Hoc → Repeatable
    • Testing/Exercises: Ad Hoc
• Visualise via a maturity radar or table to highlight strengths and gaps.

2.5. Recommendation & Improvement Pathway

• For each maturity level gap, propose specific actions:
  • Continuity & Recovery: establish a formal Business Continuity Plan aligned with ISO 22313; document roles, backups, recovery sites, and data replication.
  • Testing: conduct regular drills (cyber incident response, BCP tabletop, payment system downtime).
  • Cybersecurity: continue strengthening, possibly with AI-driven threat detection (aligned with emerging AI strategies), Cash Platform.
  • Governance & Collaboration: deepen MoUs, include climate and ESG stress testing, IMF eLibrary+1.
  • Digital Resilience: enhance redundancy in CSS/SupTech, ensure offline licensing capability, and robust communication channels.

3. Illustrative Example

Summing Up ...

This maturity assessment of BDCB reveals strong foundations in supervision, digital infrastructure, and external collaboration. Key opportunities lie in formalising continuity planning, resilience testing, and scaling cyber capabilities.

The improvement roadmap provides clear, actionable steps to advance maturity progressively, ensuring that BDCB remains resilient to operational disruptions and aligned with global central banking standards.

	Operational Resilience at BDCB: A Strategic Implementation Guide
	"Plan" Phase of the Operational Resilience Planning Methodology
	C2	C3	C4	C5	C6	C7

OR Planning Methodology Phases		Plan	Implement	Sustain

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

 

More Information About Blended Learning OR-5000 [BL-OR-5] or OR-300 [BL-OR-3]

To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.