[OR] [AUB] [E1] [C5] Identifying Critical Business Services

 eBook 1: Chapter 5 What Are the Critical Business Services (Critical Operations)  of Asia United Bank Corporation When Implementing an Operational Resilience Program?

Introduction

In an operational resilience program, the starting point is to identify the business services that must remain within tolerable levels of disruption, even when the institution is under stress.

BCM Institute defines a Critical Business Service (CBS) as a service provided by an organisation, or by another party on its behalf, which, if disrupted,  could cause intolerable harm to customers or pose a risk to the soundness, stability, or orderly operation of the financial system.

Note that CBS is classified as Critical Operations under the BSP definition.

For a Philippine bank such as Asia United Bank Corporation (AUB), this concept aligns closely with BSP Circular No. 1203, Series of 2024, which requires BSFIs to identify critical operations, set tolerance for disruption, map interconnections and interdependencies, and test resilience under severe but plausible scenarios.

The Circular also emphasises governance, cyber resilience, third-party risk management, and the integration of business continuity.

AUB is a Philippine universal bank. Its official website shows that its business lines include deposit products, prepaid accounts such as HelloMoney, loans, treasury and trust products, cash management through BizKit, credit cards, remittance, trade financing, InstaPay, PESONet, and QRPh-linked payment services. 

Accordingly, the critical business services identified below are a recommended operational resilience view of AUB’s services, based on its public business profile and the BSP’s operational resilience requirements.

They are not presented as AUB’s officially published internal CBS inventory.

Purpose of the Chapter

The purpose of this chapter is to identify the business services of AUB that are most likely to be treated as critical from an operational resilience perspective.

This gives management and implementation teams a practical basis for the next stages of the program: setting disruption tolerances, mapping people-process-technology-third-party dependencies, identifying severe but plausible scenarios, and designing scenario tests.

Regulatory Requirements from BSP Circular No. 1203 Relevant to CBS Identification

For a Philippine bank, the following operational resilience requirements are especially relevant when identifying CBS:

Recommended Critical Business Services of Asia United Bank Corporation

Summary Table of Proposed CBS

Detailed Discussion of the Critical Business Services

CBS-1 Deposit and Account Services

This should be considered one of AUB’s primary critical business services. AUB publicly offers savings accounts, current accounts, time deposits, and other currency accounts.

A disruption to deposit and account services can prevent customers from:

• accessing their funds,
• receiving salaries or credits,
• maintaining liquidity,
• transacting through linked payment and digital channels.

From a BSP operational resilience perspective, this service is critical because disruption can immediately cause customer harm and can also affect confidence in the institution. It is also the foundational service on which payments, remittances, cards, and digital access depend.

Examples of Underlying Activities for AUB

• account opening and maintenance,
• customer identification and verification,
• deposit posting,
• balance inquiry,
• statement generation,
• withdrawal processing,
• account servicing and exception handling.

CBS-2 Payments and Funds Transfer Services

AUB offers real-time fund transfers through InstaPay, and its website also lists PESONet and QRPh among its services. InstaPay is available through AUB Preferred Online Banking, AUB Mobile App, HelloMoney, and Hello Pag-IBIG.

This makes payments and funds transfers among AUB’s most critical business services. In the Philippine banking context, disruption to payment services can affect customers’ ability to send or receive funds, settle obligations, and access essential commerce.

Such disruption can also create broader systemic effects when it impacts payment flows and connected institutions. BSP Circular 1203 expressly frames operational resilience around protecting critical operations from such harm.

Examples of Underlying Activities for AUB

• customer-initiated transfers,
• interbank payment routing,
• transaction authentication,
• fraud screening,
• posting and settlement,
• payment confirmation and exception management.

CBS-3 Digital Banking and Customer Access Channels

Digital access should be treated as a separate CBS because, for many customers, the service is not merely a supportive technology but the actual customer-facing delivery channel for critical banking services.

AUB publicly promotes its mobile apps, HelloMoney and Hello Pag-IBIG, as well as its online/mobile transaction capabilities.

If digital banking channels fail, customers may lose the ability to:

• view balances,
• transfer funds,
• access account-linked services,
• perform self-service transactions,
• receive timely confirmations and alerts.

BSP Circular 1203 places strong emphasis on technology security, confidentiality, integrity, availability, and the regular testing of ICT protection, detection, response, and recovery processes. This strongly supports treating digital access as a critical business service, or at a minimum as an essential customer-facing critical operation.

Examples of Underlying Activities for AUB

• user login and authentication,
• mobile and online banking session management,
• transaction initiation,
• customer notification and alerts,
• API or channel connectivity,
• app and portal availability monitoring.

CBS-4 Cash Management and Corporate Collections/ Disbursements

AUB’s BizKit is described by the bank as a cash management solution designed to simplify business processes, with collection, disbursement, and reconciliation capabilities.

For commercial and institutional clients, this service is likely critical because it supports:

• incoming collections,
• outgoing payments,
• payroll-related flows,
• reconciliation of business transactions,
• operational liquidity.

If disrupted, business customers may be unable to pay employees, suppliers, or counterparties and may lose visibility into their cash positions. Under BSP Circular 1203, this would merit serious consideration as a critical operation because it could materially harm customers and affect broader financial flows.

Examples of Underlying Activities for AUB

• file upload and payment instruction intake,
• authorization workflow,
• bulk disbursement execution,
• collection posting,
• reconciliation reporting,
• exception and repair processing.

CBS-5 Remittance Services

AUB offers remittance services, including door-to-door peso cash deliveries, opening of peso and dollar accounts, cash pick-up at AUB branches and authorised centres, credit to AUB deposit accounts, and credit to other banks’ deposit accounts.

Its remittance page also refers to close-to-real-time and real-time service commitments for certain transactions.

Remittance should be treated as a CBS because it directly affects customers’ access to funds, often for day-to-day living needs.

In the Philippine context, remittance interruptions can cause immediate harm to customers, especially when beneficiaries depend on timely credit or cash pickup.

This aligns with the BCM Institute's and BSP's emphasis on services whose disruption would materially affect customers.

Examples of Underlying Activities for AUB

• remittance intake,
• partner connectivity,
• beneficiary validation,
• cash pick-up processing,
• account crediting,
• exception handling and claims resolution.

CBS-6 Card and Merchant Payment Services

AUB lists credit cards and also provides payment-related services such as AUB PayMate.

Card and merchant payment services are likely critical, as customers and merchants rely on them to execute day-to-day transactions.

Prolonged disruption may prevent purchases, bill settlement, cash access, or merchant collections.

In operational resilience terms, these are often highly visible services whose failure causes immediate customer harm and reputational impact.

Examples of Underlying Activities for AUB

• card authorization,
• merchant acceptance processing,
• transaction posting,
• fraud monitoring,
• dispute and chargeback handling,
• settlement and reconciliation.

CBS-7 Lending and Loan Servicing

AUB’s website shows that it offers motor vehicle loans, home loans, salary loans, and commercial loans.

Not every element of lending is equally critical from an operational resilience viewpoint.

However, loan servicing functions are often critical because customers must be able to:

• make repayments,
• see loan balances,
• receive accurate postings,
• obtain service support,
• avoid wrongful delinquency or penalty consequences due to disruption.

Commercial lending activities tied to working capital or trade may also have heightened criticality for business customers.

Under BSP Circular 1203, the assessment should focus on where disruption would cause material harm rather than assume that all loan functions are equally critical.

Examples of Underlying Activities for AUB

• repayment collection,
• loan account maintenance,
• posting and reconciliation,
• customer servicing,
• collateral and document access,
• restructuring or hardship handling.

CBS-8 Treasury and Investment Transaction Services

AUB publicly offers treasury products, including government securities and corporate bonds.

This service may qualify as critical, especially where AUB has obligations relating to customer investment transactions, liquidity-related market activity, or settlement-facing treasury operations.

The criticality will depend on the scale, customer base, and market significance of the activity, but treasury services should be assessed carefully because failures here can affect customers, counterparties, liquidity management, and market confidence.

Examples of Underlying Activities for AUB

• trade execution or order capture,
• customer instruction processing,
• settlement coordination,
• custody-related communication,
• valuation and reporting,
• market and liquidity monitoring.

CBS-9 Trade Finance and Related Corporate Banking Services

AUB’s website includes trade financing among its service offerings.

For business customers, trade finance can be operationally critical because disruption may delay shipment release, documentary processing, settlement, or access to working capital.

Depending on AUB’s client profile, this may be a high-priority CBS for the corporate and commercial segment.

Examples of Underlying Activities for AUB

• issuance and amendment of trade instruments,
• document checking,
• customer instruction processing,
• settlement coordination,
• limit checking,
• compliance screening.

Practical Observations for AUB’s CBS Identification

When AUB identifies its final CBS inventory, it should apply the BSP and BCM Institute approach by examining services through an end-to-end customer and market impact lens, rather than just through internal departmental structures.

In practice, this means AUB should prioritise services that:

• are customer-facing and time-sensitive,
• support access to money, payments, or obligations,
• rely on complex technology or third-party ecosystems,
• could trigger regulatory concern or systemic knock-on effects if disrupted,
• require formal tolerance-for-disruption metrics and scenario testing.

For AUB, the strongest candidates are likely:

1. Deposit and Account Services
2. Payments and Funds Transfer Services
3. Digital Banking and Customer Access Channels
4. Cash Management and Corporate Disbursement/Collection Services
5. Remittance Services

The remaining services should still be assessed carefully, but these five are the most clearly supported by AUB’s public service profile and the BSP’s operational resilience expectations.

For Asia United Bank Corporation, critical business services are those whose disruption would cause intolerable harm to customers or materially affect the stability and soundness of banking operations.

Based on AUB’s public business offerings and BSP Circular No. 1203, the most likely CBS include deposit and account services, payments and funds transfer services, digital banking access, cash management services, remittance services, card and merchant payments, lending and loan servicing, treasury services, and trade finance.

These CBS should then serve as the anchor points for the rest of the operational resilience program: defining tolerances, mapping dependencies, assessing vulnerabilities, integrating cyber and third-party risks, and conducting scenario testing.

That is the discipline required by BSP Circular No. 1203 and the practical pathway for building a defensible operational resilience framework for a Philippine bank.

Blogs marked [x] are under construction.

eBook 1: Understanding Your Organisation
C1	C2 [x]	C3 [x]	C4 [x]
C5	C6 [x]	C7 [x]	C8 [x]

For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.