[OR] [AUB] [E2] [P1 to P3] [C1] OR Planning Methodology

Operational Resilience Planning Methodology for Asia United Bank Corporation

Introduction

Operational resilience has become a strategic imperative for financial institutions operating in increasingly complex, interconnected, and risk-prone environments.

For Asia United Bank Corporation (AUB), the ability to prevent, adapt to, respond to, recover from, and learn from operational disruptions is critical to maintaining customer trust, regulatory compliance, and business continuity.

To achieve this, AUB adopts a structured Operational Resilience Planning Methodology comprising three interrelated phases: Plan, Implement, and Sustain.

These phases provide a comprehensive and iterative framework that ensures resilience is not treated as a one-time project but as an embedded organisational capability.

Each phase builds upon the previous one—starting with establishing a strong strategic foundation, followed by operational execution, and culminating in continuous improvement and cultural integration.

Together, these phases enable AUB to align its resilience objectives with regulatory expectations, including those of the Bangko Sentral ng Pilipinas (BSP), and safeguard its critical business services against severe but plausible disruptions.

Purpose of the OR Planning Methodology Chapter

The purpose of this chapter is to provide a clear and structured overview of the three phases of the Operational Resilience Planning Methodology adopted by Asia United Bank Corporation.

Specifically, this chapter aims to:

• Introduce the end-to-end lifecycle of operational resilience implementation, from planning to sustainability
• Explain the intent and outcomes of each phase and its corresponding stages
• Establish a common understanding of how resilience is systematically designed, executed, and maintained within AUB
• Prepare the reader to navigate subsequent chapters, where each phase and stage will be explored in greater depth

By the end of this chapter, readers are expected to understand how the three phases collectively form a holistic, regulatory-aligned, and execution-driven approach to operational resilience.

Overview of the Three Phases

The Operational Resilience Planning Methodology for Asia United Bank Corporation is structured into three key phases:

• Phase 1: Plan – Establishing the strategic and governance foundation
• Phase 2: Implement – Executing resilience capabilities across critical business services
• Phase 3: Sustain – Embedding resilience into culture and continuous improvement

Phase 1: Plan

Establishing the Foundation for Operational Resilience

The Plan Phase focuses on building a strong foundation by assessing the organisation’s current state, identifying gaps, and defining a clear roadmap aligned with business and regulatory expectations.

Key Stages in the Plan Phase

• Assess Capability and Maturity [Stage 1]

• • Evaluate AUB’s existing resilience capabilities, including business continuity, risk management, IT disaster recovery, and crisis management
  • Benchmark against regulatory expectations and industry standards

• Analyse Gap [Stage 2]

• • Identify gaps between current capabilities and desired resilience outcomes
  • Prioritise areas requiring enhancement

• Develop Strategy and Roadmap [Stage 3]

• • Define a structured implementation roadmap with clear milestones, timelines, and ownership
  • Align initiatives with AUB’s strategic objectives

• Confirm Risk Appetite [Stage 4]

• • Establish the level of disruption the organisation is willing to tolerate
  • Align resilience objectives with enterprise risk management frameworks

• Develop and Embed Governance [Stage 5]

• Define roles, responsibilities, and oversight structures
• Establish policies, standards, and reporting mechanisms to support resilience

Phase 2: Implement

Translating Strategy into Operational Execution

The Implement Phase focuses on operationalising the resilience strategy by identifying and strengthening AUB’s critical business services (CBS) and ensuring they can withstand disruptions.

Key Stages in the Implement Phase

• Identify Critical Business Services [Stage 1]

• • Determine services that are essential to customers, financial stability, and regulatory compliance
  • Prioritise services based on impact and criticality

• Map Processes and Resources [Stage 2]

• • Identify and document dependencies across people, processes, technology, and third parties
  • Map interconnections and potential points of failure

• Set Impact Tolerance [Stage 3]

• • Define acceptable levels of disruption (e.g., maximum tolerable downtime, data loss)
  • Align with customer expectations and regulatory thresholds

• Conduct Scenario Testing [Stage 4]

• • Test resilience under severe but plausible scenarios (e.g., cyberattacks, system outages, third-party failures)
  • Validate the organisation’s ability to remain within defined impact tolerances

• Improve Lesson Learned [Stage 5]

• Capture insights from testing and real incidents
• Continuously refine resilience strategies and controls

Phase 3: Sustain

Embedding Resilience into Organisational DNA

The Sustain Phase ensures that operational resilience becomes an integral and enduring part of AUB’s culture, operations, and decision-making processes.

Key Stages in the Sustain Phase

• Introduce Cultural Change [Stage 1]

• • Promote resilience as a shared responsibility across all levels of the organisation
  • Encourage proactive risk awareness and accountability

• Develop Communication Strategy [Stage 2]

• • Establish clear internal and external communication protocols during disruptions
  • Ensure timely and transparent stakeholder engagement

• Implement Training and Awareness [Stage 3]

• • Provide targeted training programs for employees and leadership
  • Conduct regular awareness campaigns and simulation exercises

• Provide Self-assessment [Stage 4]

• • Enable business units to assess their own resilience capabilities
  • Foster continuous improvement and ownership

• Conduct Independent Quality Review [Stage 5]

• Perform independent audits and reviews of the resilience framework
• Ensure alignment with regulatory requirements and industry best practices

The three-phase Operational Resilience Planning Methodology—Plan, Implement, and Sustain—provides Asia United Bank Corporation with a structured, scalable, and repeatable framework for building and maintaining resilience.

By progressing from strategic planning to operational execution, and ultimately to continuous improvement and cultural integration, AUB is well-positioned not only to withstand disruptions but also to adapt and thrive in an increasingly uncertain environment.

This methodology ensures that operational resilience is not merely a compliance exercise, but a core organisational capability that safeguards customers, protects financial stability, and strengthens long-term business sustainability.

Proceed to view a sample of the OR implementation for AUB by clicking the eBook 3 cover on the right.

Blogs marked [x] are under construction

ebook 2: Implementing Operational Resilience
C1	C2 [x]	C8 [x]	C14 [x]

	ebook 2: Implementing Operational Resilience
	BSP OR Policy	eBook 1	eBook 2	eBook 3	C20 [x]	C21 [x]
	"Plan" Phase of the Operational Resilience Planning Methodology
	C2 [x]	C3 [x]	C4 [x]	C5 [x]	C6 [x]	C7 [x]
	"Implement" Phase of the Operational Resilience Planning Methodology
	C8 [x]	C9 [x]	C10 [x]	C11 [x]	C12 [x]	C13 [x]
	"Sustain" Phase of the Operational Resilience Planning Methodology
	C14 [x]	C15 [x]	C16 [x]	C17 [x]	C18 [x]	C19 [x]

For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.