The delivery of CBS-1 Payment & Settlement Systems by the Brunei Darussalam Central Bank (BDCB) depends upon a highly interconnected operating environment comprising business processes, technology platforms, specialist personnel, information assets, facilities, external participants, and regulatory oversight functions.
While each Sub-Critical Business Service (Sub-CBS) performs a distinct operational role, no individual process operates independently. Instead, every process relies upon upstream inputs, downstream recipients, and numerous internal and external dependencies that collectively enable the secure, reliable, and timely operation of Brunei's national payment and settlement infrastructure.
Mapping these interconnections and interdependencies provides an end-to-end understanding of how the Critical Business Service is delivered.
It enables BDCB to identify critical operational relationships, dependencies on technology and third parties, potential concentration risks, and single points of failure that could impair the availability or integrity of payment and settlement services.
This mapping also supports the identification of critical hand-offs between operational teams, business functions, and external financial institutions.
From an Operational Resilience perspective, this mapping forms an essential component of resilience planning.
It provides the evidence required to support impact tolerance assessments, dependency analysis, scenario design, business continuity planning, and resilience improvement initiatives.
Furthermore, a structured dependency map demonstrates to regulators and supervisory authorities that BDCB has developed a comprehensive understanding of the operational ecosystem supporting one of its most critical financial market infrastructure services.
Table 2: Map Interconnections
|
Name of Sub-CBS |
Connected Component |
Connection Type |
Interconnection Description |
Upstream Interconnections |
Downstream Interconnections |
|
CBS-1.1 Payment Participant Management |
Participating financial institutions, Registration and Compliance functions |
Process / Organisation |
Registers, authorises and administers payment system participants before operational access is granted. |
Regulatory approvals, participant applications, onboarding documentation |
CBS-1.2, CBS-1.3, participant access administration |
|
CBS-1.2 Payment Instruction Submission |
Payment channels, Participant interfaces |
Process / Technology |
Receives payment instructions through secure communication channels for processing. |
CBS-1.1 participant enrolment, payment instructions from banks |
CBS-1.3 validation, CBS-1.5 processing queue |
|
CBS-1.3 Transaction Validation and Authentication |
Authentication services, Validation engines |
Process / Technology |
Verifies message authenticity, integrity and compliance before processing. |
CBS-1.2 submitted transactions, participant credentials |
CBS-1.4 liquidity verification, CBS-1.5 routing |
|
CBS-1.4 Liquidity and Funds Availability Management |
Settlement accounts, Liquidity monitoring |
Process / Financial Control |
Confirms settlement balances and liquidity sufficiency before settlement execution. |
CBS-1.3 validated transactions, account balances |
CBS-1.5, CBS-1.6 RTGS, CBS-1.7 DNS |
|
CBS-1.5 Payment Processing and Routing |
Payment Processing Platform |
Process / Technology |
Directs validated payments to the appropriate settlement mechanism based on business rules. |
CBS-1.3, CBS-1.4 |
CBS-1.6 RTGS, CBS-1.7 DNS |
|
CBS-1.6 RTGS Processing |
Settlement Engine |
Process |
Performs immediate gross settlement of eligible high-value transactions. |
CBS-1.5 routing, liquidity confirmation |
CBS-1.8 settlement confirmation |
|
CBS-1.7 Deferred Net Settlement Processing |
Netting Engine |
Process |
Calculates multilateral net positions and executes scheduled settlement cycles. |
CBS-1.5 routing, liquidity availability |
CBS-1.8 settlement confirmation |
|
CBS-1.8 Settlement Finalisation and Confirmation |
Settlement Accounts, Notification Services |
Process |
Records final settlement and distributes confirmation to participating institutions. |
CBS-1.6, CBS-1.7 |
CBS-1.9 exception handling (where required), CBS-1.14 reporting |
|
CBS-1.9 Exception and Failed Transaction Management |
Operations Support, Participant Communications |
Process |
Investigates and resolves failed, delayed, or rejected payment transactions. |
CBS-1.8 exceptions, operational alerts |
CBS-1.10 monitoring, participant notifications |
|
CBS-1.10 Settlement Risk Monitoring and Control |
Risk Management, Monitoring Platforms |
Process / Risk |
Continuously monitors settlement exposures, queues and operational risk indicators. |
Transaction processing data, CBS-1.9 incidents |
CBS-1.11 oversight, CBS-1.12 incident management |
|
CBS-1.11 Payment System Oversight and Compliance Monitoring |
Compliance, Supervisory Functions |
Governance |
Oversees participant compliance with payment system rules and operational standards. |
CBS-1.10 Monitoring information, participant reports |
Management reporting, regulatory oversight, improvement actions |
|
CBS-1.12 Operational Incident and Service Disruption Management |
Incident Response Teams |
Operational Resilience |
Coordinates operational response during technology failures or service disruptions. |
System alerts, CBS-1.10 monitoring, CBS-1.11 escalation |
CBS-1.13 recovery, executive escalation |
|
CBS-1.13 Business Continuity and Service Recovery |
BCM, Disaster Recovery |
Operational Resilience |
Restores payment services following disruption using approved recovery strategies. |
Incident declaration, recovery activation |
CBS-1.14 Reporting, restoration of all operational Sub-CBS |
|
CBS-1.14 Settlement Reporting and Regulatory Information Management |
Reporting Platforms |
Governance / Information |
Produces operational, management and regulatory reports relating to payment activities. |
Settlement results, recovery status, transaction history |
Senior Management, regulators, audit, CBS-1.15 |
|
CBS-1.15 Post-Settlement Review and Continuous Improvement |
Governance Committees |
Continuous Improvement |
Reviews operational performance, lessons learned and resilience improvements. |
CBS-1.14 reports, incident reviews, audit findings |
Process improvements across all CBS-1 Sub-CBS |
Table 2: Map of Interdependencies
|
Name of Sub-CBS |
People |
Systems and Technology |
Data and Information Flows |
Facilities |
Third Parties / External Entities |
Interconnected CBS |
Nature of Dependency |
Disruption Impact |
|
CBS-1.1 Payment Participant Management |
Payment Operations, Compliance Officers |
Participant Management System, Identity & Access Management |
Participant profiles, approvals |
Head Office, Operations Centre |
Licensed financial institutions |
CBS-2 Financial Market Operations*, CBS-5 Regulatory Supervision* |
Accurate participant registration is prerequisite for payment access. |
Unauthorised access or delayed onboarding prevents transaction participation. |
|
CBS-1.2 Payment Instruction Submission |
Payment Operations Analysts |
Secure Messaging Gateway, Payment Processing Platform |
Payment instructions, transaction metadata |
Primary Data Centre |
Participating banks |
CBS-3 Digital Financial Services* |
Continuous submission channels are required for payment initiation. |
Payment instructions cannot enter the settlement process. |
|
CBS-1.3 Transaction Validation and Authentication |
Security Analysts, Operations Staff |
Authentication Services, Validation Engine |
Digital credentials, validation records |
Data Centre |
Financial institutions |
CBS-6 Cybersecurity Operations* |
Depends upon trusted identity verification and message integrity. |
Invalid or fraudulent transactions may enter processing or legitimate payments may be rejected. |
|
CBS-1.4 Liquidity and Funds Availability Management |
Treasury Specialists |
Settlement Account Platform |
Account balances, liquidity positions |
Operations Centre |
Settlement participants |
CBS-4 Financial Management* |
Settlement depends upon available liquidity. |
Payments may queue, delay or fail settlement. |
|
CBS-1.5 Payment Processing and Routing |
Payment Operations Team |
Payment Processing Platform |
Routing rules, processing queues |
Primary Processing Site |
Financial institutions |
CBS-3 Digital Financial Services* |
Central orchestration point linking payment initiation to settlement. Concentration Point. |
Significant degradation affects most downstream payment services. |
|
CBS-1.6 RTGS Processing |
Settlement Specialists |
RTGS Settlement Engine |
High-value settlement transactions |
Primary & DR Data Centres |
Participating banks |
CBS-4 Financial Management* |
Immediate settlement depends on RTGS engine availability. |
High-value payment settlement ceases. |
|
CBS-1.7 Deferred Net Settlement Processing |
Settlement Analysts |
Net Settlement Engine |
Net settlement positions |
Data Centre |
Clearing participants |
CBS-4 Financial Management* |
Scheduled settlement depends upon accurate net calculations. |
Settlement cycles are delayed or incomplete. |
|
CBS-1.8 Settlement Finalisation and Confirmation |
Settlement Officers |
Settlement Database, Notification Platform |
Settlement confirmations |
Operations Centre |
Financial institutions |
CBS-3 Digital Financial Services* |
Finality records must remain accurate and available. |
Participants lack confirmation of completed settlements. |
|
CBS-1.9 Exception and Failed Transaction Management |
Operations Support Team |
Case Management Platform |
Exception logs, investigation records |
Operations Centre |
Financial institutions |
CBS-7 Customer & Stakeholder Communications* |
Depends on timely operational coordination and participant engagement. |
Unresolved exceptions accumulate and increase operational risk. |
|
CBS-1.10 Settlement Risk Monitoring and Control |
Risk Analysts |
Operational Monitoring Platform |
Operational metrics, risk indicators |
Monitoring Centre |
Market participants |
CBS-8 Enterprise Risk Management* |
Requires continuous visibility across payment activities. |
Emerging risks remain undetected, increasing systemic exposure. |
|
CBS-1.11 Payment System Oversight and Compliance Monitoring |
Supervisors, Compliance Officers |
Regulatory Reporting Platform |
Compliance reports, supervisory data |
Head Office |
Regulators, participating institutions |
CBS-9 Regulatory Reporting* |
Supervisory oversight depends upon reliable operational information. |
Regulatory obligations may not be fulfilled. |
|
CBS-1.12 Operational Incident and Service Disruption Management |
Incident Managers, Technical Specialists |
Incident Management Platform |
Incident records, escalation logs |
Crisis Management Centre |
Critical service providers |
CBS-10 Crisis Management* |
Coordinates response across all operational stakeholders. Critical Hand-off between operations and recovery teams. |
Incident response becomes delayed, increasing service disruption duration. |
|
CBS-1.13 Business Continuity and Service Recovery |
BCM Team, Infrastructure Engineers |
Disaster Recovery Platform, Backup Infrastructure |
Recovery procedures, backup data |
Alternate Processing Site |
Telecommunications and infrastructure providers |
CBS-10 Crisis Management*, CBS-11 Technology Services* |
Recovery depends upon alternate facilities and replicated infrastructure. Single Point Dependency: recovery site readiness. |
Extended outage exceeding impact tolerance. |
|
CBS-1.14 Settlement Reporting and Regulatory Information Management |
Reporting Analysts |
Regulatory Reporting Platform, Data Warehouse |
Settlement reports, audit logs |
Head Office |
Regulators, auditors |
CBS-9 Regulatory Reporting* |
Accurate operational reporting depends upon complete settlement data. |
Regulatory reporting delays and reduced management visibility. |
|
CBS-1.15 Post-Settlement Review and Continuous Improvement |
Senior Management, Operational Resilience Team |
Governance & Document Management Systems |
Lessons learned, KPI reports |
Head Office |
External auditors (where applicable) |
All CBS |
Continuous improvement depends on accurate performance and incident information collected across the service lifecycle. |
Recurrent weaknesses remain unresolved, reducing long-term operational resilience. |
Note: The references to other Critical Business Services (e.g., CBS-2, CBS-3, etc.) are representative examples of the types of enterprise services that would typically support a central bank's payment and settlement operations. They should be aligned with BDCB's final enterprise Critical Business Service catalogue during implementation.
The completed mapping of interconnections and interdependencies provides BDCB with a comprehensive end-to-end view of how CBS-1 Payment & Settlement Systems is delivered across business processes, technology, operational teams, facilities, information assets, and external stakeholders.
Rather than viewing payment processing as a collection of isolated activities, the mapping demonstrates the operational relationships and dependencies that collectively sustain the continuous operation of Brunei's national payment infrastructure.
The analysis also highlights critical concentration points, including the Payment Processing Platform, RTGS Settlement Engine, and Business Continuity and Service Recovery capabilities, where disruption could have cascading effects across multiple Sub-CBS processes.
Critical hand-offs between payment operations, risk monitoring, incident management, and recovery functions are similarly identified, enabling BDCB to strengthen governance, establish redundancy where appropriate, and reduce the likelihood of single points of failure.
This dependency mapping provides a practical foundation for establishing and validating impact tolerances by identifying which upstream and downstream dependencies must remain available to maintain service within acceptable disruption thresholds.
It also supports the development of severe-but-plausible scenarios—such as payment platform outages, cyber incidents, telecommunications failures, liquidity disruptions, or data centre failures—and enables scenario testing to evaluate the resilience of the complete service chain.
Finally, the mapping should be regarded as a living Operational Resilience artefact. It should be reviewed and updated whenever business processes, technology platforms, facilities, third-party arrangements, regulatory obligations, or the operating environment change.
Maintaining an accurate dependency map enables BDCB to make informed investment, remediation, and risk management decisions while providing regulators with clear evidence of a mature and continuously evolving Operational Resilience capability.
| eBook 3: Starting Your OR Implementation |
||||
| CBS-1 Payment and Settlement Systems | ||||
| CBS-1 DP | CBS-1 MII | CBS-1 ITo | CBS-1 SbPS | CBS-1 ST |
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
To learn more about the course and schedule, click the buttons below for the [OR-3] OR-300 Operational Resilience Implementer course and the [OR-5] OR-5000 Operational Resilience Expert Implementer course.
|
If you have any questions, click to contact us. |
||
|
|