[OR] [AUB] [E3] [CBS] [1] [DP] Deposit and Account Services

CBS-1 Deposit & Account Services

For Asia United Bank Corporation, the identification and decomposition of Critical Business Services (CBS) into detailed processes form the cornerstone of an effective operational resilience programme.

Among these services, CBS-1 Deposit and Account Services represents one of the most fundamental banking functions, underpinning customer trust, financial stability, and regulatory compliance.

In line with the expectations of BSP Circular No. 1203 Series of 2024, banks are required to move beyond high-level service identification and develop a granular understanding of the processes that enable service delivery.

This detailed breakdown into Sub-CBS allows the organisation to identify vulnerabilities, map dependencies, and establish impact tolerances that reflect real-world operational conditions.

The decomposition of CBS-1 into its constituent Sub-CBS provides a structured view of the end-to-end deposit lifecycle—from customer onboarding and account opening to transaction processing, servicing, and incident recovery.

This level of detail ensures that resilience is not treated as a theoretical concept, but as a practical, measurable capability embedded within each operational component.

Purpose of the Chapter

The purpose of this chapter is to provide a comprehensive, structured breakdown of CBS-1 Deposit and Account Services into its detailed processes (Sub-CBS), enabling stakeholders to understand how this critical service is delivered at the operational level. By examining each Sub-CBS, the reader will gain clarity on the key activities, control points, and service dependencies that must be managed to ensure continuity.

This chapter is designed to equip the reader with the foundational knowledge required to proceed with subsequent stages of the Operational Resilience Planning Methodology—specifically, dependency mapping, process and resource mapping, impact tolerance setting, and scenario testing. Ultimately, it prepares the reader to translate regulatory expectations into actionable resilience measures that safeguard both customers and the institution.

In alignment with the BSP Circular No. 1203 Series of 2024, Philippine banks are required to identify Critical Business Services (CBS) and decompose them into granular, manageable processes to support mapping, impact tolerance setting, and scenario testing.

For CBS-1 Deposit and Account Services, the following Sub-CBS represent the end-to-end lifecycle of customer deposit services, ensuring compliance with regulatory expectations on service continuity, customer protection, operational risk management, and resilience testing.

Table P1: Detailed Processes for CBS-1

Sub-CBS Code	Name of Sub-CBS	Description of Sub-CBS
1.1	Customer Onboarding and Account Application	Capture of customer information, product selection, and initiation of account opening through branch or digital channels.
1.2	Customer Identification and Verification (KYC/CDD)	Execution of Know Your Customer (KYC) and Customer Due Diligence (CDD) processes in compliance with AMLA and BSP requirements.
1.3	Account Approval and Opening	Validation, approval workflows, and creation of customer accounts in core banking systems.
1.4	Initial Funding and Deposit Booking	Acceptance and posting of initial deposits, including cash, cheque, or electronic funding.
1.5	Product Terms Setup and Account Parameter Maintenance	Configuration of account features, including interest rates, fees, limits, and account conditions.
1.6	Deposit Transactions Processing	Processing of deposits, including over-the-counter, ATM, and digital channel transactions.
1.7	Withdrawal and Funds Access Processing	Handling withdrawals via branch, ATM, debit card, or online transfers, ensuring the availability and security of funds.
1.8	Account Servicing and Customer Maintenance	Updates to customer profiles, account modifications, and service requests, such as address changes or account upgrades.
1.9	Interest, Fees, and Charges Processing	Computation and posting of interest, service charges, and penalties based on product terms.
1.10	Statement, Passbook, and Balance Reporting	Generation of account statements, passbook updates, and real-time balance inquiry services.
1.11	Digital Account Access and Channel Integration	Provision of online and mobile banking access, integration with APIs, and authentication services.
1.12	ATM and Card-Based Access Management	Issuance, activation, and management of debit cards and ATM services, including PIN management.
1.13	Account Reconciliation and Exception Handling	Daily reconciliation of accounts, investigation of discrepancies, and resolution of transaction exceptions.
1.14	Dormancy, Holds, Restrictions, and Account Control Administration	Management of inactive accounts, regulatory holds, garnishments, and account restrictions.
1.15	Fraud Monitoring and Transaction Surveillance for Deposit Accounts	Real-time and post-transaction monitoring to detect suspicious activities and prevent fraud.
1.16	Complaints, Disputes, and Service Recovery	Handling customer complaints, dispute resolution, and service recovery actions to maintain trust and compliance.
1.17	Regulatory Reporting and Compliance Monitoring	Preparation and submission of regulatory reports and monitoring compliance with BSP and AML regulations.
1.18	Incident Response, Business Continuity, and Service Recovery	Activation of business continuity plans, incident response, and restoration of deposit services during disruptions.

Regulatory Requirements and Examples (Philippine Context)

Under BSP Circular No. 1203 Series of 2024, Asia United Bank Corporation is expected to implement the following operational resilience practices:

1. Identification of Critical Business Services

Banks must identify services whose disruption could cause intolerable harm to customers or financial stability.
Example: Deposit access services (withdrawals, transfers) are classified as critical due to their systemic importance.

2. Mapping of Dependencies and Interconnections

Each Sub-CBS must be mapped to people, processes, technology, and third parties.
Example: ATM services (1.12) depend on card networks (e.g., Visa/Mastercard), ATM switches, and telecom providers.

3. Establishment of Impact Tolerances

Define maximum tolerable disruption (e.g., downtime, data loss).
Example:

ATM withdrawal services: tolerance of near-zero downtime during business hours
Digital banking: defined recovery time objectives (RTO) within hours

4. Scenario Testing (Severe but Plausible Events)

Banks must test resilience against disruptions such as:

Cyberattacks affecting digital banking (Sub-CBS 1.11, 1.15)
Core banking system outage impacting deposits (Sub-CBS 1.6, 1.7)
Third-party service failure (ATM network or payment gateway)

5. Governance and Continuous Improvement

Senior management must oversee resilience capabilities and ensure continuous improvement.
Example: Regular board reporting on service availability, incident response effectiveness, and resilience gaps.

The detailed articulation of Sub-CBS for CBS-1 Deposit and Account Services provides Asia United Bank Corporation with a clear, actionable blueprint to strengthen operational resilience.

By breaking down the service into discrete, manageable components, the organisation is better positioned to identify critical dependencies, assess potential points of failure, and implement targeted controls.

Aligned with BSP Circular No. 1203 Series of 2024, this structured approach ensures that resilience efforts are systematic, auditable, and responsive to regulatory expectations.

More importantly, it reinforces the bank’s ability to maintain uninterrupted access to essential deposit services, even in the face of severe but plausible disruptions.

As the organisation progresses to the next stages of its operational resilience journey, this detailed process view will serve as a critical reference point, supporting more advanced analyses such as interdependency mapping, impact tolerance calibration, and scenario-based testing—ultimately enabling the bank to deliver consistent, reliable, and resilient services to its customers.

AUB Title Banner

eBook 3: Starting Your OR Implementation
CBS-1 Deposit & Account Services
CBS-1 DP	CBS-1 MD	CBS-1 MPR	CBS-1 ITo	CBS-1 SuPS	CBS-1 ST

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.