---
title: [OR] [AmB] [E3] [CBS] [5] [ITo] Establish Impact Tolerances
description: [OR] [AmB] [E3] [CBS] [5] [ITo] Establish Impact Tolerances
image: https://blog.bcm-institute.org/hubfs/Ambank%20Graphic%20Folder/Ambank%20E3%20CBS%20Morepost/Ambank%20CBS%205/%5BOR%5D%20%5BAmB%5D%20%5BE3%5D%20%5BCBS%5D%20%5B5%5D%20%5BITo%5D%20Establish%20Impact%20Tolerances.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Operational Resilience Framework: A Case Study of AmBank Malaysia
# \[OR\] \[AmB\] \[E3\] \[CBS\] \[5\] \[ITo\] Establish Impact Tolerances
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/8d6d538b-7b42-4bf6-b355-f6178f7bc1f9)
Establishing impact tolerances for Investment & Wealth Management services ensures that AmBank defines, in measurable terms, the maximum level of disruption it can absorb before causing intolerable harm to customers, market integrity, or regulatory obligations.
Unlike traditional recovery metrics that focus only on system restoration, impact tolerances emphasise the outcome to customers and stakeholders, helping the bank prioritise resilience where it matters most.
For CBS-5, this is especially critical because wealth products often involve market timing, fiduciary duties, suitability requirements, and handling of client assets. Clear tolerances enable AmBank to balance service availability, data integrity, and advisory continuity while meeting BNM and global operational resilience expectations.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0430108a-ef49-43aa-ac7d-ee6bb474eba8)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Feb 3, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![x \[OR\] \[AmB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/c17ea734-ce39-46d1-9b00-ce39367ccfc1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c17ea734-ce39-46d1-9b00-ce39367ccfc1)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0430108a-ef49-43aa-ac7d-ee6bb474eba8)**CBS-5 Investment & Wealth Management**
[![\[OR\] \[AmB\] \[E3\] \[CBS\] \[5\] \[ITo\] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/87415dba-db74-4e77-8c6c-2ba04b4d24e0.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/87415dba-db74-4e77-8c6c-2ba04b4d24e0)
Establishing impact tolerances for Investment & Wealth Management services ensures that AmBank defines, in measurable terms, the maximum level of disruption it can absorb before causing intolerable harm to customers, market integrity, or regulatory obligations.
Unlike traditional recovery metrics that focus only on system restoration, impact tolerances emphasise the outcome to customers and stakeholders, helping the bank prioritise resilience where it matters most.
For CBS-5, this is especially critical because wealth products often involve market timing, fiduciary duties, suitability requirements, and handling of client assets. Clear tolerances enable AmBank to balance service availability, data integrity, and advisory continuity while meeting BNM and global operational resilience expectations.
The objective of this chapter is to translate resilience principles into practical tolerance thresholds for each sub-service.
[![Banner \[Table\] \[OR\] \[E3\] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/627c33a8-714d-40af-9a2b-0d7957fb8afa.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/627c33a8-714d-40af-9a2b-0d7957fb8afa)
###### Table P4: Establish Impact Tolerance for CBS-5
| Sub-CBS Code | Sub-CBS | MTD | MTDL | Customer Impact | Regulatory Impact | Impact Type | Current Resilience Status | Action Required |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| 5.1 | Wealth Advisory & Financial Planning | 2 business days | <4 hrs data | Missed advisory decisions, reputational loss | Moderate – suitability & fiduciary obligations | Customer / Reputational | Moderate | Enhance remote advisory capability & CRM redundancy |
| 5.2 | Unit Trust & Fund Distribution | 1 business day | <1 hr | Inability to transact, NAV timing issues | High – sales conduct & disclosure rules | Financial / Regulatory | Moderate | Strengthen channel redundancy & cut-off controls |
| 5.3 | Fixed Income & Direct Bond/Sukuk Investments | Same day (market hours) | Near-zero | Pricing & execution risk | High – market conduct & Shariah compliance (for Sukuk) | Financial / Regulatory | Developing | Improve real-time trade capture backup |
| 5.4 | Dual Currency & Structured Products | <4 hrs | Near-zero | Mispricing & loss exposure | High – product governance rules | Financial | Developing | Secondary pricing source & approval fallback |
| 5.5 | Equities & Capital Markets Services | <2 hrs (market hours) | Near-zero | Failed or delayed trades | High – exchange & conduct rules | Financial / Market | Strong | Periodic stress-test of trading continuity |
| 5.6 | Private Banking & HNW Solutions | 1 business day | <2 hrs | Relationship & trust impact | Moderate – fiduciary duty | Reputational / Customer | Moderate | Dedicated RM backup & secure remote access |
| 5.7 | Bancassurance & Wealth Protection | 1–2 business days | <4 hrs | Policy issuance delays | Moderate – disclosure & suitability | Customer / Regulatory | Moderate | Integrate insurer BCP coordination |
| 5.8 | Estate & Legacy Planning (Will/Wasiat) | 3 business days | <24 hrs | Client dissatisfaction, low immediacy risk | Low–Moderate – legal documentation accuracy | Reputational / Legal | Developing | Secure document vault redundancy |
| 5.9 | Client Reporting & Compliance | 1 business day | <1 hr | Reduced transparency to clients | High – reporting obligations | Regulatory / Reputational | Moderate | Automate report regeneration & backup data feeds |
Legend (example interpretation):
- MTD: Maximum Tolerable Downtime before intolerable harm
- MTDL: Maximum Tolerable Data Loss
- Current Resilience Status: Strong / Moderate / Developing
#### [![Banner \[Summing\] \[OR\] \[E3\] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5)
Defining impact tolerances for CBS-5 provides AmBank with a practical benchmark for how much disruption can be absorbed before stakeholders experience unacceptable harm. These tolerances turn resilience from a theoretical concept into measurable limits that guide investment decisions, scenario testing, and recovery prioritisation. They also encourage cross-functional alignment between business, risk, IT, and compliance teams.
Going forward, impact tolerances should be validated through scenario testing, market disruption simulations, and third-party failure exercises. As AmBank’s wealth portfolio and digital capabilities grow, tolerances may need periodic recalibration to reflect evolving customer expectations and regulatory scrutiny. When embedded into governance and testing cycles, these tolerances become a strategic tool that strengthens trust, stability, and long-term competitiveness in the wealth management space.
| Operational Resilience Framework: A Case Study of AmBank Malaysia | | | | | |
| --- | --- | --- | --- | --- | --- |
| **eBook 3: Starting Your OR Implementation** | | | | | |
| **CBS-5 Investment & Wealth Management** | | | | | |
| **CBS-5 DP** | **CBS-5 MD** | **CBS-5 MPR** | **CBS-5 ITo** | **CBS-5 SuPS** | **CBS-5 ST** |
| [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[5\] \[DP\] Investment & Wealth Management](https://no-cache.hubspot.com/cta/default/3893111/054587f1-9cdf-4719-abc4-4c23c7ae60f1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/054587f1-9cdf-4719-abc4-4c23c7ae60f1) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[5\] \[MD\] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/2624f5f2-4690-437c-a5eb-3208d31f95a4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/2624f5f2-4690-437c-a5eb-3208d31f95a4) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[5\] \[MPR\] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/7e4bda11-21c4-4766-845f-0f354d946627.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7e4bda11-21c4-4766-845f-0f354d946627) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[5\] \[ITo\] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/87415dba-db74-4e77-8c6c-2ba04b4d24e0.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/87415dba-db74-4e77-8c6c-2ba04b4d24e0) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[5\] \[SuPS\] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/a2de3c99-9747-4d4c-ad93-bf8b6bb98d7b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a2de3c99-9747-4d4c-ad93-bf8b6bb98d7b) | [![\[OR\] \[AmB\] \[E3\] \[CBS\] \[5\] \[ST\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/f467c271-ca6d-4725-98e9-6fff67ba94f7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f467c271-ca6d-4725-98e9-6fff67ba94f7) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)[](https://cta-redirect.hubspot.com/cta/redirect/3893111/13a448f1-f09c-42da-a57e-0988e41658c5)Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-02-03T09:03:51.767Z",
"datePublished" : "2026-02-03T09:03:51.000Z",
"headline" : "[OR] [AmB] [E3] [CBS] [5] [ITo] Establish Impact Tolerances",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-amb-e3-cbs-5-ito-establish-impact-tolerances",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```