---
title: [OR] [AmB] [E3] [CBS] [1] [ITo] Establish Impact Tolerances
description: [OR] [AmB] [E3] [CBS] [1] [ITo] Establish Impact Tolerances
image: https://blog.bcm-institute.org/hubfs/Ambank%20Graphic%20Folder/Ambank%20E3%20CBS%20Morepost/Ambank%20CBS%201/%5BOR%5D%20%5BAmB%5D%20%5BE3%5D%20%5BCBS%5D%20%5B1%5D%20%5BITo%5D%20Establish%20Impact%20Tolerances.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Operational Resilience Framework: A Case Study of AmBank Malaysia
# \[OR\] \[AmB\] \[E3\] \[CBS\] \[1\] \[ITo\] Establish Impact Tolerances
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/8d6d538b-7b42-4bf6-b355-f6178f7bc1f9)
Establishing impact tolerances is a core requirement of operational resilience, ensuring that AmBank can continue to deliver its most important services within acceptable levels of disruption.
For CBS-1 Retail & Digital Banking, impact tolerances define the maximum level of disruption that can be tolerated before causing intolerable harm to customers, breaching regulatory obligations, or undermining trust in the financial system.
These tolerances are outcome-focused and are set irrespective of existing controls or recovery capabilities.
In line with operational resilience guidance, impact tolerances for CBS-1 are expressed across time (Maximum Tolerable Downtime – MTD) and data integrity (Maximum Tolerable Data Loss – MTDL), while explicitly considering customer detriment, regulatory consequences, and reputational damage.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0430108a-ef49-43aa-ac7d-ee6bb474eba8)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Jan 28, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![x \[OR\] \[AmB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/c17ea734-ce39-46d1-9b00-ce39367ccfc1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c17ea734-ce39-46d1-9b00-ce39367ccfc1)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0430108a-ef49-43aa-ac7d-ee6bb474eba8)**CBS-1 Retail & Digital Banking**
[![\[OR\] \[AmB\] \[E3\] \[CBS\] \[1\] \[ITo\] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/fb5ebf39-261f-4021-8b49-9fe150f2ba1a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fb5ebf39-261f-4021-8b49-9fe150f2ba1a)Establishing impact tolerances is a core requirement of operational resilience, ensuring that AmBank can continue to deliver its most important services within acceptable levels of disruption.
For CBS-1 Retail & Digital Banking, impact tolerances define the maximum level of disruption that can be tolerated before causing intolerable harm to customers, breaching regulatory obligations, or undermining trust in the financial system.
These tolerances are outcome-focused and are set irrespective of existing controls or recovery capabilities.
In line with operational resilience guidance, impact tolerances for CBS-1 are expressed across time (Maximum Tolerable Downtime – MTD) and data integrity (Maximum Tolerable Data Loss – MTDL), while explicitly considering customer detriment, regulatory consequences, and reputational damage.
The table below summarises the impact tolerances for each Sub-CBS supporting Retail & Digital Banking, together with current resilience status and improvement actions.
[![Banner \[Table\] \[OR\] \[E3\] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/627c33a8-714d-40af-9a2b-0d7957fb8afa.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/627c33a8-714d-40af-9a2b-0d7957fb8afa)
###### Table P4: Establish Impact Tolerance for CBS-1
| Sub-CBS Code | Sub-CBS | Maximum Tolerable Downtime (MTD) | Maximum Tolerable Data Loss (MTDL) | Customer Impact | Regulatory Impact | Impact Type | Current Resilience Status | Action Required |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| 1.1 | Customer Onboarding & KYC | 24 hours | 0 data loss | Delayed account opening; customer dissatisfaction | Breach of AML/CFT onboarding timelines | Regulatory / Customer | Partially resilient | Strengthen digital KYC redundancy and manual fallback procedures |
| 1.2 | Digital Banking Platform Provisioning | 2 hours | Near-zero (≤5 minutes) | Inability to access digital channels | Potential breach of service availability expectations | Customer / Reputational | Moderately resilient | Enhance platform failover and cloud resilience testing |
| 1.3 | Transaction Processing Services | 1 hour | Zero data loss | Failed or duplicated transactions; financial loss | Serious breach of payment and banking regulations | Financial / Systemic | High resilience | Continuous real-time monitoring and stress testing |
| 1.4 | Digital Payments & Settlement | 30 minutes | Zero data loss | Payment failures affecting daily living | Material regulatory breach (payment systems) | Systemic / Regulatory | High resilience | Maintain multi-clearing network connectivity and contingency routing |
| 1.5 | Loan & Credit Product Management | 8 hours | ≤15 minutes | Delays in loan approvals and disbursements | Customer fairness and conduct risk | Customer / Regulatory | Partially resilient | Improve workflow automation and data synchronisation |
| 1.6 | Deposit & Savings Product Management | 4 hours | Zero data loss | Restricted access to funds; loss of confidence | Prudential and consumer protection breach | Financial / Reputational | Moderately resilient | Enhance core banking redundancy and reconciliation controls |
| 1.7 | Customer Support & Service Resolution | 12 hours | ≤30 minutes | Inability to resolve urgent issues | Increased complaints and supervisory scrutiny | Customer / Conduct | Partially resilient | Expand omnichannel support and crisis staffing plans |
| 1.8 | Compliance, Risk & Security Monitoring | 2 hours | Zero data loss | Indirect impact through fraud or breaches | Severe regulatory and enforcement risk | Regulatory / Systemic | Moderately resilient | Implement 24/7 monitoring and automated alert escalation |
| 1.9 | Data Analytics & Personalisation | 48 hours | ≤1 hour | Reduced service quality; limited personalisation | Minimal direct regulatory impact | Reputational / Strategic | Tolerable | No immediate action; monitor dependency concentration |
| 1.10 | Back-office Support & Reconciliation | 24 hours | Zero data loss | Delayed issue resolution and reporting | Reporting and audit non-compliance | Operational / Regulatory | Partially resilient | Strengthen reconciliation automation and cross-training |
#### [![Banner \[Summing\] \[OR\] \[E3\] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5)
The impact tolerances defined for CBS-1 Retail & Digital Banking establish clear thresholds for how much disruption AmBank can tolerate before causing unacceptable harm to customers or breaching regulatory obligations.
By articulating tolerances across downtime, data loss, and impact severity, AmBank shifts the focus from traditional recovery metrics to customer and market outcomes, in line with modern operational resilience expectations.
These tolerances provide a critical foundation for subsequent resilience activities, including severe but plausible scenario testing, investment prioritisation, and remediation planning.
Where current resilience levels fall short of defined tolerances, targeted actions have been identified to strengthen AmBank’s ability to remain within impact limits during disruption.
Collectively, this ensures that Retail & Digital Banking services remain trustworthy, compliant, and reliable even under adverse conditions.
| Operational Resilience Framework: A Case Study of AmBank Malaysia | | | | | |
| --- | --- | --- | --- | --- | --- |
| **eBook 3: Starting Your OR Implementation** | | | | | |
| **CBS-1 Retail & Digital Banking** | | | | | |
| **CBS-1 DP** | **CBS-1 MD** | **CBS-1 MPR** | **CBS-1 ITo** | **CBS-1 SuPS** | **CBS-1 ST** |
| [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[1\] \[DP\] Retail & Digital Banking](https://no-cache.hubspot.com/cta/default/3893111/b00c9a8c-e80f-4559-9c4b-8bd4214d03eb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b00c9a8c-e80f-4559-9c4b-8bd4214d03eb) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[1\] \[MD\] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/1901f5e5-c361-4ddb-a745-d90db93ff68f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1901f5e5-c361-4ddb-a745-d90db93ff68f) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[1\] \[MPR\] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/11ffd328-c2d3-4d40-ade1-a2cf5b734349.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/11ffd328-c2d3-4d40-ade1-a2cf5b734349) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[1\] \[ITo\] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/fb5ebf39-261f-4021-8b49-9fe150f2ba1a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fb5ebf39-261f-4021-8b49-9fe150f2ba1a) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[1\] \[SuPS\] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/74a0ff23-a667-49c3-a8b1-0bb4ee18ec2a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/74a0ff23-a667-49c3-a8b1-0bb4ee18ec2a) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[1\] \[ST\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/abc22b9e-b596-4278-a388-19d3f53e53c5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/abc22b9e-b596-4278-a388-19d3f53e53c5) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)[](https://cta-redirect.hubspot.com/cta/redirect/3893111/13a448f1-f09c-42da-a57e-0988e41658c5)Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-01-28T09:32:58.874Z",
"datePublished" : "2026-01-28T09:32:58.000Z",
"headline" : "[OR] [AmB] [E3] [CBS] [1] [ITo] Establish Impact Tolerances",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-amb-e3-cbs-1-ito-establish-impact-tolerances",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```