---
title: [OR] [BB] [E3] [CBS] [1] [MPR] Map Processes and Resources
description: [OR] [BB] [E3] [CBS] [2] [MPR] Map Processes and Resources
image: https://blog.bcm-institute.org/hubfs/Boost%20Bank%20Graphic%20Folder/Boost%20Bank%20CBS%201%20Morepost/%5BOR%5D%20%5BBB%5D%20%5BE3%5D%20%5BCBS%5D%20%5B1%5D%20%5BMPR%5D%20Digital%20Account%20Access%20%26%20Management.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Digital Banking Resilience: Strengthening Boost Bank for Tomorrow
# \[OR\] \[BB\] \[E3\] \[CBS\] \[1\] \[MPR\] Map Processes and Resources
Operational Resilience regulations require financial institutions [](https://cta-redirect.hubspot.com/cta/redirect/3893111/9992234a-9fc0-4c35-b12a-b0b6121b6fde) to identify their **Critical Business Services (CBS)** and map the **processes and resources** required to deliver those services within defined impact tolerances.
As explained in the operational resilience framework under *Mapping of Processes and Resources*, this exercise ensures that an organisation understands:
- How each service is delivered end-to-end
- Which internal and external resources support delivery
- Where vulnerabilities and single points of failure exist
- What must be tested during scenario testing
- Disruption impacts customers and the wider financial system
For **Boost Bank**, CBS-1 *Digital Account Access & Management* is a core customer-facing critical service. It enables customers to onboard digitally, authenticate securely, manage account information, integrate embedded banking services, and receive alerts — all through digital channels.
The following mapping identifies the supporting **Processes, People, Technology, Third-Party Vendors, and Dependencies** for each Sub-CBS under CBS-1, in compliance with operational resilience expectations.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/bf4d1338-79cc-4e63-904c-9093a2477a6d)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Mar 6, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
###### [![\[OR\] \[BB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/bbedab3d-a991-4956-b3f1-f5d4aa873c6e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/bbedab3d-a991-4956-b3f1-f5d4aa873c6e)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/bf4d1338-79cc-4e63-904c-9093a2477a6d)
### **CBS-1 Digital Account Access & Management**
#### **Introduction**
Operational Resilience regulations require financial institutions to identify their [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6c30f467-27a8-4fce-a99c-6d4bb52861e8) **Critical Business Services (CBS)** and map the **processes and resources** required to deliver those services within defined impact tolerances.
As explained in the operational resilience framework under *Mapping of Processes and Resources*, this exercise ensures that an organisation understands:
- How each service is delivered end-to-end
- Which internal and external resources support delivery
- Where vulnerabilities and single points of failure exist
- What must be tested during scenario testing
- Disruption impacts customers and the wider financial system
For **Boost Bank**, CBS-1 *Digital Account Access & Management* is a core customer-facing critical service. It enables customers to onboard digitally, authenticate securely, manage account information, integrate embedded banking services, and receive alerts — all through digital channels.
The following mapping identifies the supporting **Processes, People, Technology, Third-Party Vendors, and Dependencies** for each Sub-CBS under CBS-1, in compliance with operational resilience expectations.
[![Banner \[Table\] \[OR\] \[E3\] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/8a44ad9d-681b-48ff-90b1-b994a1c12a64.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8a44ad9d-681b-48ff-90b1-b994a1c12a64)
###### Table P3: Map Processes and Resources for CBS-1
| **Sub-CBF Code** | **Sub-CBS** | **Processes** | **People** | **Technology (Applications & Infrastructure)** | **Third-Party Vendors** | **Upstream / Downstream Dependencies** |
| --- | --- | --- | --- | --- | --- | --- |
| 1.1 | Account Onboarding & Registration | • Digital application submission• eKYC verification• AML/CFT screening• Customer due diligence (CDD)• Account creation in Core Banking System (CBS)• Welcome notification dispatch | • Digital Banking Team• Compliance & AML Officers• Customer Operations• IT Application Support | • Mobile App / Web Portal• Core Banking System (CBS)• eKYC platform• CRM system• API Gateway• Cloud hosting infrastructure | • eKYC provider• AML screening vendor• Cloud hosting provider• SMS/Email gateway provider | Upstream: National ID database, credit bureau Downstream: Account funding, card issuance, transaction processing |
| 1.2 | Authentication & Access Control | • User credential validation• Multi-factor authentication (MFA)• Biometric verification• Role-based access control (RBAC)• Session token issuance | • Cybersecurity Team• IAM Administrators• IT Operations | • Identity & Access Management (IAM) system• MFA engine• Biometric authentication module• Firewall & WAF• Encryption services | • MFA service provider• Biometric SDK vendor• Cloud IAM provider | Upstream: Customer registration data Downstream: All digital transactions & profile access |
| 1.3 | Profile & Account Maintenance | • Customer detail updates• Beneficiary management• Account settings configuration• Limits management• Data validation & approval workflows | • Customer Service• Operations Team• Data Governance Team | • Core Banking System• CRM platform• Mobile/Web App• Database servers | • CRM vendor• Cloud database provider | Upstream: Authentication service Downstream: Payments, transfers, compliance monitoring |
| 1.4 | Embedded Banking Integration | • API integration with partners• Consent management• Data sharing validation• Partner transaction processing | • API Management Team• Partnerships Team• IT Integration Engineers | • API Gateway• Open Banking APIs• Consent Management System• Middleware platform | • Fintech partners• API management provider• Open banking platform vendor | Upstream: IAM authentication Downstream: Partner platforms, payment rails |
| 1.5 | Security & Fraud Monitoring | • Real-time transaction monitoring• Behavioural analytics• Fraud alert generation• Suspicious Activity Reporting (SAR)• Incident escalation | • Fraud Operations Team• SOC (Security Operations Centre)• Compliance Team | • Fraud Detection System• SIEM platform• AI/ML analytics engine• Case management system | • Fraud analytics vendor• Threat intelligence provider | Upstream: Transaction data feeds Downstream: Account suspension, regulatory reporting |
| 1.6 | Password & PIN Reset / Recovery | • Identity re-verification• OTP validation• Secure credential reset• Audit logging | • Customer Support• IT Security Team | • IAM system• OTP engine• SMS gateway• Encryption services | • SMS/OTP provider• Identity verification vendor | Upstream: Customer authentication records Downstream: Restored account access |
| 1.7 | Device & Session Management | • Device registration• Device fingerprinting• Session monitoring• Auto timeout enforcement• Device deactivation | • IT Security Team• Cybersecurity Analysts | • Mobile Device Management (MDM)• Session management server• Fraud analytics tools | • Device fingerprinting vendor• Mobile SDK provider | Upstream: Authentication service Downstream: Fraud monitoring system |
| 1.8 | Alerts & Notification Services | • Transaction alerts• Security notifications• Marketing notifications (opt-in)• System outage notifications | • Customer Communications Team• IT Operations | • Notification engine• SMS gateway• Email server• Push notification service | • SMS provider• Email delivery vendor• Push notification service provider | Upstream: Core Banking eventsDownstream: Customer response / fraud escalation |
| 1.9 | Regulatory Compliance & Logging | • Activity logging• Audit trail generation• Regulatory reporting• Data retention management• Access review | • Compliance Team• Risk Management• Internal Audit• IT Security | • Log management system• SIEM• Data warehouse• Reporting tools | • Regulatory reporting software vendor• Cloud storage provider | Upstream: All system activity logs Downstream: Regulators, internal audit committees |
| 1.10 | Service Availability & Continuity Management | • System health monitoring• Incident management• Disaster recovery activation• Backup restoration• Business continuity communication | • IT Operations• Business Continuity Team• Incident Response Team• Senior Management | • Monitoring tools• Redundant cloud infrastructure• Backup systems• DR site• Network infrastructure | • Cloud infrastructure provider• DR hosting provider• Network service provider | Upstream: Infrastructure providers Downstream: All digital banking services & customer access |
#### **Operational Resilience Alignment**
This mapping supports operational resilience by:
- **Identifying Critical Supporting Resources**
Clarifies which people, systems, and vendors are essential to maintain Digital Account Access & Management.
- **Highlighting Single Points of Failure**
Example:
- **Supporting Scenario Testing**
Enables structured testing of scenarios such as:
- **Facilitating Impact Tolerance Validation**
Assesses:
- **Enabling Remediation Planning**
Supports decisions on:
#### [![Banner \[Summing\] \[OR\] \[E3\] Map Interconnections and Interdependencies](https://no-cache.hubspot.com/cta/default/3893111/61e5330e-051c-4874-b6da-a1be8393c283.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/61e5330e-051c-4874-b6da-a1be8393c283)
The mapping of processes and resources for **CBS-1 Digital Account Access & Management** provides Boost Bank with a structured, end-to-end view of how its digital customer access services are delivered and sustained.
By systematically linking each Sub-CBS to its supporting:
- Processes
- People
- Technology
- Third-party providers
- Upstream and downstream dependencies
Boost Bank strengthens its ability to:
- Identify operational vulnerabilities
- Design effective scenario testing
- Validate impact tolerances
- Enhance business continuity planning
- Meet regulatory expectations for operational resilience
This mapping forms the foundation for subsequent **scenario testing, vulnerability assessment, and resilience enhancement planning**, ensuring that Boost Bank can continue delivering secure and reliable digital banking services even during severe but plausible disruptions.
| Digital Banking Resilience: Strengthening Boost Bank for Tomorrow | | | | | |
| --- | --- | --- | --- | --- | --- |
| **eBook 3: Starting Your OR Implementation** | | | | | |
| **CBS-1 Digital Account Access & Management** | | | | | |
| **CBS-1 DP** | **CBS-1 MD** | **CBS-1 MPR** | **CBS-1 ITo** | **CBS-1 SuPS** | **CBS-1 ST** |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/44edfd24-234a-4f2c-9314-879d2a167b8c) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/2b6f9c2d-e2c4-404e-a76c-9fa34415bd92) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6c30f467-27a8-4fce-a99c-6d4bb52861e8) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/dbff189c-39f6-48cf-bda7-04acccdbd9f1) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/1203ab63-4424-4d5d-8fec-b651fc3b5c57) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/da3cfb81-260f-489f-b6d9-e89f2626bb4e) |
**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)[](https://cta-redirect.hubspot.com/cta/redirect/3893111/13a448f1-f09c-42da-a57e-0988e41658c5)**
For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the **OR-5000 Operational Resilience Expert Implementer course**, provide in-depth insights and practical toolkits for effectively embedding this model.
### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-03-06T08:09:13.036Z",
"datePublished" : "2026-03-06T07:22:17.000Z",
"headline" : "[OR] [BB] [E3] [CBS] [1] [MPR] Map Processes and Resources",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-bb-e3-cbs-2-mpr-map-processes-and-resources",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```