---
title: [OR] [AmB] [E3] [CBS] [4] [ST] Perform Scenario Testing
description: [OR] [AmB] [E3] [CBS] [4] [ST] Perform Scenario Testing
image: https://blog.bcm-institute.org/hubfs/Ambank%20Graphic%20Folder/Ambank%20E3%20CBS%20Morepost/Ambank%20CBF%204/%5BOR%5D%20%5BAmB%5D%20%5BE3%5D%20%5BCBS%5D%20%5B4%5D%20%5BST%5D%20Perform%20Scenario%20Testing.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Operational Resilience Framework: A Case Study of AmBank Malaysia
# \[OR\] \[AmB\] \[E3\] \[CBS\] \[4\] \[ST\] Perform Scenario Testing
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/8d6d538b-7b42-4bf6-b355-f6178f7bc1f9)Scenario testing for Treasury & Capital Markets is a core practice to validate that critical trading, funding, and risk management activities can remain within acceptable impact tolerances during severe but plausible disruptions.
For AmBank, these activities sit at the heart of market confidence, liquidity management, and client service delivery, making them highly sensitive to operational, market, cyber, and technology shocks. Structured scenario testing enables the bank to move beyond theoretical plans and demonstrate that its people, processes, technology, and third parties can collectively withstand stress.
In line with operational resilience principles (as outlined in industry guidance such as the BCM Institute’s discussion on scenario testing), the focus is on end-to-end service continuity, not just system recovery.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c32e9b3-ea88-44c3-9182-fa3e6a9aadee)
[Dr Goh Moh Heng](https://blog.bcm-institute.org/ebook-or/author/dr-goh-moh-heng) Feb 3, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
###### [![x \[OR\] \[AmB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/c17ea734-ce39-46d1-9b00-ce39367ccfc1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c17ea734-ce39-46d1-9b00-ce39367ccfc1)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c32e9b3-ea88-44c3-9182-fa3e6a9aadee)
### CBS-4 Treasury & Capital Markets
#### Introduction
[![\[OR\] \[AmB\] \[E3\] \[CBS\] \[4\] \[ST\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/c8bd6171-412e-4c26-8449-1aaeb4e41254.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c8bd6171-412e-4c26-8449-1aaeb4e41254)
Scenario testing for Treasury & Capital Markets is a core practice to validate that critical trading, funding, and risk management activities can remain within acceptable impact tolerances during severe but plausible disruptions.
For AmBank, these activities sit at the heart of market confidence, liquidity management, and client service delivery, making them highly sensitive to operational, market, cyber, and technology shocks. Structured scenario testing enables the bank to move beyond theoretical plans and demonstrate that its people, processes, technology, and third parties can collectively withstand stress.
In line with operational resilience principles (as outlined in industry guidance such as the BCM Institute’s discussion on scenario testing), the focus is on end-to-end service continuity, not just system recovery.
The scenarios below intentionally integrate cyber and ICT risks—such as system outages, data corruption, cyberattacks, and third-party failures—because most modern disruptions in capital markets are technology-amplified.
[![Banner \[Table\] \[OR\] \[E3\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/a45e9708-7139-4f4e-8e0e-41179f5cacc3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a45e9708-7139-4f4e-8e0e-41179f5cacc3)
###### Table P6: Perform Scenario Testing for CBS-4
| Sub-CBS Code | Sub-CBS | Recommended Scenario Test Themes (incl. Cyber/ICT) | Impact / Effect | Evidence of Proactive Risk Management Action |
| --- | --- | --- | --- | --- |
| 4.1 | Foreign Exchange (FX) Trading | • Trading platform outage during peak hours • Cyber breach causing rate manipulation or data integrity issues • Market data feed disruption | Inability to quote/execute trades, pricing errors, reputational impact | • Alternate trading channels tested • Data feed redundancy • Cyber incident playbooks and audit logs reviewed |
| 4.2 | Interest Rate & Money Market Trading | • Core treasury system downtime • Connectivity loss to interbank platforms • Ransomware on dealer desktops | Liquidity gaps, missed placements, and funding cost increase | • Manual dealing procedures validated • Backup connectivity and secure remote access tested • Segregated clean devices available |
| 4.3 | Derivatives & Structured Products | • Valuation engine failure • Model corruption or unauthorized model changes • Cloud service outage | Mispricing, hedge ineffectiveness, and financial loss | • Independent price verification tested • Model governance controls evidenced • Cloud DR failover results documented |
| 4.4 | Fixed Income & Debt Instruments Trading | • Settlement system disruption • SWIFT connectivity outage • Cyberattack on trade capture | Failed trades, counterparty disputes, liquidity strain | • SWIFT contingency arrangements • Reconciliation backlogs simulation • Incident response coordination with counterparties |
| 4.5 | Capital Markets Origination & Syndication | • Secure data room breach • Deal documentation system outage • Insider data leak | Confidentiality breach, deal delays, legal risk | • Access controls and DLP tested • Secure offline document procedures • Legal and comms response rehearsed |
| 4.6 | DCM Solutions & Advisory | • Loss of client proposal data • Email system compromise (phishing/BEC) | Client trust erosion, mandate loss | • Encrypted backups verified • Phishing simulations and response metrics • Client communication protocols tested |
| 4.7 | Asset Liability & Balance Sheet Management (ALM) | • ALM system unavailability • Data warehouse corruption • Interface failures between core systems | Impaired liquidity and interest rate risk view | • Parallel spreadsheets/manual fallback tested • Data restoration drills • Data lineage documentation validated |
| 4.8 | Market Risk Analytics & Reporting | • Risk engine outage near reporting deadlines • Data integrity breach | Inaccurate risk view, regulatory concerns | • Secondary risk engine readiness • Data validation controls tested • Regulatory notification drills |
| 4.9 | Post-Trade & Settlement Operations | • Custodian/CCP outage • Payment system disruption • Cyberattack on back-office processing | Settlement failures, financial penalties | • Alternative settlement routes tested • Liquidity buffers validated • Third-party resilience attestations reviewed |
| 4.10 | Regulatory & Compliance Governance | • Regulatory reporting system outage • Data leakage of regulatory submissions | Non-compliance, fines, reputational damage | • Manual reporting workflow tested • Secure transmission channels validated • Compliance escalation drills |
| 4.11 | Client Relationship & Sales Support | • CRM outage • Contact center disruption • Client data breach | Poor client experience, trust erosion | • Alternate client contact lists • Crisis communication scripts tested • Privacy incident response rehearsed |
### [![Banner \[Summing\] \[OR\] \[E3\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/11895c06-91e9-4cec-acb6-4356741952e4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/11895c06-91e9-4cec-acb6-4356741952e4)
Effective scenario testing transforms resilience from a policy requirement into a measurable capability. For Treasury & Capital Markets, where speed, accuracy, and confidence are essential, these exercises help AmBank validate that disruption does not automatically translate into service failure. By integrating cyber and ICT risks into every scenario, the bank reflects the reality that digital dependencies are now inseparable from financial operations.
Over time, repeated testing, lessons-learned reviews, and progressive scenario severity will strengthen AmBank’s ability to anticipate disruption, absorb shocks, and recover within tolerance. This not only supports regulatory expectations but also reinforces market credibility and client trust—key pillars for sustainable growth in Treasury & Capital Markets.
| Operational Resilience Framework: A Case Study of AmBank Malaysia | | | | | |
| --- | --- | --- | --- | --- | --- |
| **eBook 3: Starting Your OR Implementation** | | | | | |
| **CBS-4 Treasury & Capital Markets** | | | | | |
| **CBS-4 DP** | **CBS-4 MD** | **CBS-4 MPR** | **CBS-4 ITo** | **CBS-4 SuPS** | **CBS-4 ST** |
| [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[4\] \[DP\] Treasury & Capital Markets](https://no-cache.hubspot.com/cta/default/3893111/56a17dee-94a5-406c-8a98-8c3ad052e54c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/56a17dee-94a5-406c-8a98-8c3ad052e54c) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[4\] \[MD\] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/6a83fad0-5839-4b2d-b99a-e538a564d581.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6a83fad0-5839-4b2d-b99a-e538a564d581) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[4\] \[MPR\] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/5f50f5a8-ae0e-47e3-be86-5656efec5c26.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5f50f5a8-ae0e-47e3-be86-5656efec5c26) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[4\] \[ITo\] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/28724266-40c3-4d8d-b389-36df36fff573.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/28724266-40c3-4d8d-b389-36df36fff573) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[4\] \[SuPS\] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/1f645b80-13b9-4266-b1db-9e5312920de8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1f645b80-13b9-4266-b1db-9e5312920de8) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[4\] \[ST\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/c8bd6171-412e-4c26-8449-1aaeb4e41254.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c8bd6171-412e-4c26-8449-1aaeb4e41254) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)[](https://cta-redirect.hubspot.com/cta/redirect/3893111/13a448f1-f09c-42da-a57e-0988e41658c5)Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About Blended Learning OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the \[OR-3\] OR-300 Operational Resilience Implementer course and the \[OR-5\] OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Your Comments Here:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Dr Goh Moh Heng",
"url" : "https://blog.bcm-institute.org/ebook-or/author/dr-goh-moh-heng"
},
"dateModified" : "2026-02-03T06:53:21.943Z",
"datePublished" : "2026-02-03T06:53:11.000Z",
"headline" : "[OR] [AmB] [E3] [CBS] [4] [ST] Perform Scenario Testing",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-amb-e3-cbs-4-st-perform-scenario-testing",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```