[OR] [AmB] [E3] [CBS] [2] [MPR] Map Processes and Resources

CBS-2 Payment Processing & Settlement

Mapping Processes and Resources is a foundational activity in operational resilience, enabling AmBank to clearly understand how its critical business services are delivered end-to-end and what resources are essential to their continuity.

For CBS-2 Payment Processing & Settlement, this mapping identifies the people, processes, technologies, third-party vendors, and interdependencies that collectively support the timely, accurate, and secure movement of funds across internal systems and external payment networks.

This chapter focuses on decomposing CBS-2 into its constituent Sub-CBS components and mapping each to its supporting resources.

In line with the principles discussed in [OR] [P2-S2] What is Mapping of Processes and Resources in Operational Resilience?, the mapping highlights single points of failure, concentration risks, and dependency chains, thereby providing a strong foundation for impact tolerance setting, scenario testing, and resilience investment decisions.

Table P3: Map Processes and Resources for CBS-2

Sub-CBS Code	Sub-CBS	Processes	People	Technology (Applications & Infrastructure)	Third-party Vendors	Upstream / Downstream Dependencies
2.1	Payment Initiation & Capture	• Capture payment instructions (branch, ATM, online, API) • Validate payment format and mandatory fields • Timestamping and queuing	• Branch operations staff • Digital banking operations team • Payment operations officers	• Core Banking System (CBS) • Digital Banking Platform • ATM / POS Switch • API Gateway • Network & middleware	• ATM/POS service providers • Digital channel vendors	Upstream: Customer channels, merchant systems Downstream: Authorisation & Verification (2.2)
2.2	Authorisation & Verification	• Customer authentication • Funds availability check • Fraud and AML screening • Transaction approval/decline	• Fraud monitoring analysts • Risk & compliance officers • Payment operations team	• Fraud Monitoring System • AML/CFT Screening Tools • Authentication services (OTP, biometrics) • Core Banking System	• Fraud analytics vendors • Identity verification providers	Upstream: Payment Initiation & Capture (2.1) Downstream: Clearing & Message Exchange (2.3)
2.3	Clearing & Message Exchange	• Format payment messages (e.g. ISO 20022) • Route transactions to payment networks • Receive clearing confirmations	• Payments clearing specialists • IT integration support	• Payment Hub / Switch • Messaging middleware • Secure network infrastructure	• PayNet (DuitNow, IBG, RENTAS) • SWIFT	Upstream: Authorisation & Verification (2.2) Downstream: Settlement Execution (2.4)
2.4	Settlement Execution	• Debit/credit settlement accounts • Liquidity checks • Final settlement posting	• Treasury operations team • Settlement operations officers	• Core Banking System • Treasury & Liquidity Management System • Settlement accounts infrastructure	• Bank Negara Malaysia (BNM) • Correspondent banks	Upstream: Clearing & Message Exchange (2.3) Downstream: Reconciliation & Exception Handling (2.5)
2.5	Reconciliation & Exception Handling	• Match clearing vs settlement records • Identify breaks and failed transactions • Manual repair and re-processing	• Reconciliation analysts • Operations control team	• Reconciliation tools • Data warehouse • Case management system	• Reconciliation solution providers	Upstream: Settlement Execution (2.4) Downstream: Fees & Accounting Posting (2.6)
2.6	Fees, Charges & Accounting Posting	• Calculate transaction fees • Apply charges • Post GL entries • Revenue allocation	• Finance operations staff • Product control team	• Core Banking System • General Ledger (GL) • Accounting & billing systems	• Accounting software vendors	Upstream: Reconciliation & Exception Handling (2.5) Downstream: Reporting & Regulatory Compliance (2.7)
2.7	Reporting & Regulatory Compliance	• Generate regulatory reports • Transaction monitoring reports • Audit trail maintenance	• Compliance officers • Regulatory reporting analysts • Internal audit	• Regulatory reporting systems • Data analytics platforms • Secure data storage	• Regulatory reporting solution providers	Upstream: Fees & Accounting Posting (2.6) Downstream: Customer Notification & Statements (2.8)
2.8	Customer Notification & Statement Updating	• Notify customers of transaction status • Update account statements • Handle customer enquiries	• Customer service staff • Contact centre agents	• Notification engine (SMS, email, push) • CRM system • Statement generation platform	• SMS/email gateway providers • Print/mail vendors	Upstream: Reporting & Regulatory Compliance (2.7) Downstream: Customer channels, dispute resolution processes

The mapping of processes and resources for CBS-2 Payment Processing & Settlement provides AmBank with a clear, end-to-end view of how this critical service is delivered and where its key dependencies lie.

By explicitly identifying people, technologies, third-party providers, and upstream/downstream linkages for each Sub-CBS, the bank can better understand vulnerabilities such as technology concentration, reliance on external payment infrastructures, and operational handoffs between teams.

This structured mapping is a critical enabler for impact tolerance setting, scenario testing, and investment prioritisation under operational resilience frameworks.

It ensures that AmBank is well-positioned to anticipate disruptions, protect customers and financial stability, and meet regulatory expectations by maintaining the continuity of payment processing and settlement services even under severe but plausible disruption scenarios.

Operational Resilience Framework: A Case Study of AmBank Malaysia
eBook 3: Starting Your OR Implementation
CBS-2 Payment Processing & Settlement
CBS-2 DP	CBS-2 MD	CBS-2 MPR	CBS-2 ITo	CBS-2 SuPS	CBS-2 ST

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.



	If you have any questions, click to contact us.

Operational Resilience Framework: A Case Study of AmBank Malaysia

[OR] [AmB] [E3] [CBS] [2] [MPR] Map Processes and Resources

Operational Resilience Certified Planner-Specialist-Expert

CBS-2 Payment Processing & Settlement

Table P3: Map Processes and Resources for CBS-2

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Comments:

Operational Resilience Framework: A Case Study of AmBank Malaysia

[OR] [AmB] [E3] [CBS] [2] [MPR] Map Processes and Resources

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, 'bf4d1338-79cc-4e63-904c-9093a2477a6d', {"useNewLoader":"true","region":"na1"});

Operational Resilience Certified Planner-Specialist-Expert

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, 'c17ea734-ce39-46d1-9b00-ce39367ccfc1', {"useNewLoader":"true","region":"na1"});

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, 'bf4d1338-79cc-4e63-904c-9093a2477a6d', {"useNewLoader":"true","region":"na1"}); CBS-2 Payment Processing & Settlement

Table P3: Map Processes and Resources for CBS-2

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, '61e5330e-051c-4874-b6da-a1be8393c283', {"useNewLoader":"true","region":"na1"});

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Comments:

CBS-2 Payment Processing & Settlement