For CBS-2 Payment Processing & Settlement, this mapping identifies the people, processes, technologies, third-party vendors, and interdependencies that collectively support the timely, accurate, and secure movement of funds across internal systems and external payment networks.
This chapter focuses on decomposing CBS-2 into its constituent Sub-CBS components and mapping each to its supporting resources.
In line with the principles discussed in [OR] [P2-S2] What is Mapping of Processes and Resources in Operational Resilience?, the mapping highlights single points of failure, concentration risks, and dependency chains, thereby providing a strong foundation for impact tolerance setting, scenario testing, and resilience investment decisions.
|
Sub-CBS Code |
Sub-CBS |
Processes |
People |
Technology (Applications & Infrastructure) |
Third-party Vendors |
Upstream / Downstream Dependencies |
|
2.1 |
Payment Initiation & Capture |
• Capture payment instructions (branch, ATM, online, API) • Validate payment format and mandatory fields • Timestamping and queuing |
• Branch operations staff • Digital banking operations team • Payment operations officers |
• Core Banking System (CBS) • Digital Banking Platform • ATM / POS Switch • API Gateway • Network & middleware |
• ATM/POS service providers • Digital channel vendors |
Upstream: Customer channels, merchant systems Downstream: Authorisation & Verification (2.2) |
|
2.2 |
Authorisation & Verification |
• Customer authentication • Funds availability check • Fraud and AML screening • Transaction approval/decline |
• Fraud monitoring analysts • Risk & compliance officers • Payment operations team |
• Fraud Monitoring System • AML/CFT Screening Tools • Authentication services (OTP, biometrics) • Core Banking System |
• Fraud analytics vendors • Identity verification providers |
Upstream: Payment Initiation & Capture (2.1) Downstream: Clearing & Message Exchange (2.3) |
|
2.3 |
Clearing & Message Exchange |
• Format payment messages (e.g. ISO 20022) • Route transactions to payment networks • Receive clearing confirmations |
• Payments clearing specialists • IT integration support |
• Payment Hub / Switch • Messaging middleware • Secure network infrastructure |
• PayNet (DuitNow, IBG, RENTAS) • SWIFT |
Upstream: Authorisation & Verification (2.2) Downstream: Settlement Execution (2.4) |
|
2.4 |
Settlement Execution |
• Debit/credit settlement accounts • Liquidity checks • Final settlement posting |
• Treasury operations team • Settlement operations officers |
• Core Banking System • Treasury & Liquidity Management System • Settlement accounts infrastructure |
• Bank Negara Malaysia (BNM) • Correspondent banks |
Upstream: Clearing & Message Exchange (2.3) Downstream: Reconciliation & Exception Handling (2.5) |
|
2.5 |
Reconciliation & Exception Handling |
• Match clearing vs settlement records • Identify breaks and failed transactions • Manual repair and re-processing |
• Reconciliation analysts • Operations control team |
• Reconciliation tools • Data warehouse • Case management system |
• Reconciliation solution providers |
Upstream: Settlement Execution (2.4) Downstream: Fees & Accounting Posting (2.6) |
|
2.6 |
Fees, Charges & Accounting Posting |
• Calculate transaction fees • Apply charges • Post GL entries • Revenue allocation |
• Finance operations staff • Product control team |
• Core Banking System • General Ledger (GL) • Accounting & billing systems |
• Accounting software vendors |
Upstream: Reconciliation & Exception Handling (2.5) Downstream: Reporting & Regulatory Compliance (2.7) |
|
2.7 |
Reporting & Regulatory Compliance |
• Generate regulatory reports • Transaction monitoring reports • Audit trail maintenance |
• Compliance officers • Regulatory reporting analysts • Internal audit |
• Regulatory reporting systems • Data analytics platforms • Secure data storage |
• Regulatory reporting solution providers |
Upstream: Fees & Accounting Posting (2.6) Downstream: Customer Notification & Statements (2.8) |
|
2.8 |
Customer Notification & Statement Updating |
• Notify customers of transaction status • Update account statements • Handle customer enquiries |
• Customer service staff • Contact centre agents |
• Notification engine (SMS, email, push) • CRM system • Statement generation platform |
• SMS/email gateway providers • Print/mail vendors |
Upstream: Reporting & Regulatory Compliance (2.7) Downstream: Customer channels, dispute resolution processes |
The mapping of processes and resources for CBS-2 Payment Processing & Settlement provides AmBank with a clear, end-to-end view of how this critical service is delivered and where its key dependencies lie.
By explicitly identifying people, technologies, third-party providers, and upstream/downstream linkages for each Sub-CBS, the bank can better understand vulnerabilities such as technology concentration, reliance on external payment infrastructures, and operational handoffs between teams.
This structured mapping is a critical enabler for impact tolerance setting, scenario testing, and investment prioritisation under operational resilience frameworks.
It ensures that AmBank is well-positioned to anticipate disruptions, protect customers and financial stability, and meet regulatory expectations by maintaining the continuity of payment processing and settlement services even under severe but plausible disruption scenarios.
|
Operational Resilience Framework: A Case Study of AmBank Malaysia |
|||||
| eBook 3: Starting Your OR Implementation |
|||||
| CBS-2 Payment Processing & Settlement | |||||
| CBS-2 DP | CBS-2 MD | CBS-2 MPR | CBS-2 ITo | CBS-2 SuPS | CBS-2 ST |
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
|
If you have any questions, click to contact us. |
||
|
|