---
title: [OR] [BDO] [E3] [CBS] [1] [ST] Perform Scenario Testing
description: [OR] [BDO] [E3] [CBS] [1] [ST] Perform Scenario Testing
image: https://blog.bcm-institute.org/hubfs/PH%20Bank%20Graphic%20Folder/%5BPH%5D%20BDO%20Unibank%20Graphic%20Folder/BDO%20E3%20CBS%201%20Morepost/%5BOR%5D%20%5BBDO%5D%20%5BPH%5D%20%5BE3%5D%20%5BCBS%5D%20%5B1%5D%20%5BST%5D%20Perform%20Scenario%20Testing.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Building Operational Resilience: A Case Study of BDO Unibank
# \[OR\] \[BDO\] \[E3\] \[CBS\] \[1\] \[ST\] Perform Scenario Testing
[![x \[OR\] \[BDO\] Title Banner](https://no-cache.hubspot.com/cta/default/3893111/7cd9fce2-f5ee-45d0-8b58-a9d11edd3e9c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7cd9fce2-f5ee-45d0-8b58-a9d11edd3e9c)Scenario testing is a critical component of operational [](https://cta-redirect.hubspot.com/cta/redirect/3893111/ecc7cbf7-2e9a-4436-a74d-a1c549684ceb)resilience, enabling **BDO Unibank** to validate whether its **Retail Deposit & Account Services (CBS-1)** can remain within defined impact tolerances under severe but plausible disruptions.
In line with the principles outlined in *BSP Circular No. 1203 (2024)*, financial institutions are expected to conduct forward-looking scenario testing to assess end-to-end service resilience, including interdependencies among people, processes, technology, and third parties.
This section translates those regulatory expectations into **practical, process-level scenario testing** for each Sub-CBS.
The scenarios incorporate **cyber threats, ICT disruptions, third-party failures, operational breakdowns, and fraud events**, ensuring strong alignment with the **integration of cyber and ICT risk management**.
Each test also includes **evidence of proactive risk management actions**, demonstrating the bank’s ability not only to respond, but to anticipate and mitigate disruptions.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c32e9b3-ea88-44c3-9182-fa3e6a9aadee)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Mar 25, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![\[OR\] \[BDO\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/3f8a6a31-a3ca-4798-9331-15ec608ea41e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3f8a6a31-a3ca-4798-9331-15ec608ea41e)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c32e9b3-ea88-44c3-9182-fa3e6a9aadee)**CBS-1 Retail Deposit & Account Services**
#### Introduction
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/fe85e2f2-f972-49ad-8321-d370fcfd9caf)
Scenario testing is a critical component of operational resilience, [![\[OR\] \[BDO\] \[PH\] \[E3\] \[CBS\] \[1\] \[ST\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/e14ff2a1-48f2-4cd3-9924-d72a7bf84794.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/e14ff2a1-48f2-4cd3-9924-d72a7bf84794) enabling **BDO Unibank** to validate whether its **Retail Deposit & Account Services (CBS-1)** can remain within defined impact tolerances under severe but plausible disruptions.
In line with the principles outlined in *BSP Circular No. 1203 (2024)*, financial institutions are expected to conduct forward-looking scenario testing to assess end-to-end service resilience, including interdependencies among people, processes, technology, and third parties.
This section translates those regulatory expectations into **practical, process-level scenario testing** for each Sub-CBS. The scenarios incorporate **cyber threats, ICT disruptions, third-party failures, operational breakdowns, and fraud events**, ensuring strong alignment with the **integration of cyber and ICT risk management**.
Each test also includes **evidence of proactive risk management actions**, demonstrating the bank’s ability not only to respond, but to anticipate and mitigate disruptions.
[![Banner \[Table\] \[OR\] \[E3\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/a45e9708-7139-4f4e-8e0e-41179f5cacc3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a45e9708-7139-4f4e-8e0e-41179f5cacc3)
###### Table P6: Perform Scenario Testing for CBS-1
| Sub-CBS Code | Sub-CBS | Recommended Scenario Test Themes | Impact / Effect | Evidence of Proactive Risk Management Action |
| --- | --- | --- | --- | --- |
| 1.1 | Customer Onboarding & Account Opening | Digital onboarding system outage due to cyberattack (DDoS) | Inability to open accounts; customer dissatisfaction | Load testing, alternate manual onboarding, and DDoS protection tools implemented |
| 1.2 | Customer Identity Verification & Compliance Screening | Failure of the e-KYC system / third-party verification API outage | Delayed onboarding; regulatory compliance risk | Redundant KYC vendors; offline verification procedures; AML escalation protocols |
| 1.3 | Account Setup & Product Configuration | Core banking configuration error during system upgrade | Incorrect account features; financial misstatements | Pre-deployment testing, rollback procedures, maker-checker controls |
| 1.4 | Initial Funding & Deposit Acceptance | Payment gateway disruption affecting deposit channels | Failed deposit transactions; customer complaints | Multi-channel deposit options; real-time monitoring dashboards |
| 1.5 | Cash Withdrawal & Funds Access | ATM network outage due to telecom failure | Customers are unable to withdraw cash | ATM network redundancy; branch fallback; liquidity buffers |
| 1.6 | Account Maintenance & Customer Information Update | Unauthorised data change due to cyber intrusion | Data integrity compromise; reputational damage | Access controls, audit logs, anomaly detection systems |
| 1.7 | Credential Fulfilment | Card production vendor disruption | Delayed issuance of cards/credentials | Multiple vendors; inventory buffer; SLA monitoring |
| 1.8 | Digital Banking Access Management | Mobile banking platform outage (cloud failure) | Customers are unable to access accounts | Multi-region cloud deployment; failover testing |
| 1.9 | Balance Inquiry & Statements | Database performance degradation | Slow response times; poor customer experience | Database optimisation; caching; performance stress testing |
| 1.10 | Account Transfers | Real-time payment system failure (InstaPay/PESONet disruption) | Failed transfers; liquidity bottlenecks | Alternate clearing channels; transaction queuing mechanisms |
| 1.11 | Bills Payment & Scheduled Debits | Third-party biller system outage | Missed payments; customer penalties | Biller redundancy; customer notification protocols |
| 1.12 | Transaction Posting & Ledger Update | The core banking system crashed during peak hours | Transaction backlog; reconciliation issues | High availability architecture; batch recovery procedures |
| 1.13 | Interest, Fees & Charges Processing | Batch job failure due to a system bug | Incorrect interest or fees applied | Automated reconciliation checks; parallel run validation |
| 1.14 | Exception Handling & Dispute Resolution | Surge in disputes due to a fraud incident | Operational overload; delayed resolution | Scalable case management system; surge staffing plans |
| 1.15 | Fraud Monitoring & Protective Controls | Sophisticated cyber fraud bypassing detection systems | Financial loss; regulatory breach | AI-driven fraud analytics; continuous rule tuning; red team testing |
| 1.16 | Reconciliation & Financial Reporting Support | Data mismatch between systems | Financial reporting inaccuracies | Automated reconciliation tools; exception thresholds |
| 1.17 | Regulatory Reporting & Compliance Monitoring | Failure to submit regulatory reports on time due to a system outage | Regulatory penalties; compliance breach | Backup reporting systems; regulatory calendar tracking |
| 1.18 | Service Continuity & Incident Response | Data centre outage (natural disaster scenario) | Full service disruption | Disaster recovery site activation; crisis management drills |
| 1.19 | Dormancy, Restriction & Closure | Erroneous account freezing due to a system error | Customer complaints; legal exposure | Dual authorisation controls; audit review mechanisms |
| 1.20 | Third-Party & Infrastructure Dependency Management | Critical vendor (cloud/telecom) failure | System-wide disruption | Vendor risk assessments; exit strategies; multi-vendor architecture |
[![Banner \[Summing\] \[OR\] \[E3\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/11895c06-91e9-4cec-acb6-4356741952e4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/11895c06-91e9-4cec-acb6-4356741952e4)
Scenario testing for CBS-1 Retail Deposit & Account Services enables **BDO Unibank** to move beyond theoretical resilience into **demonstrated operational capability under stress**.
By systematically testing each Sub-CBS against **severe but plausible disruptions**, the bank ensures that its services remain within the impact tolerances defined in** BSP Circular 1203**, even amid complex, multi-layered failures.
Importantly, integrating cyber and ICT risks into every scenario reflects the evolving threat landscape, in which operational disruptions are increasingly technology-driven.
The inclusion of **evidence of proactive risk management further demonstrates maturity—showing that resilience is not only about recovery** but also about **anticipation, prevention, and continuous improvement**.
This structured approach positions BDO Unibank to achieve a **sustainable, regulator-aligned operational resilience capability**.
[![x \[OR\] \[BDO\] Title Banner](https://no-cache.hubspot.com/cta/default/3893111/7cd9fce2-f5ee-45d0-8b58-a9d11edd3e9c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7cd9fce2-f5ee-45d0-8b58-a9d11edd3e9c)
| **eBook 3: Starting Your OR Implementation** | | | | | |
| --- | --- | --- | --- | --- | --- |
| **CBS-1 Deposit & Account Services** | | | | | |
| **CBS-1 DP** | **CBS-1 MD** | **CBS-1 MPR** | **CBS-1 ITo** | **CBS-1 SuPS** | **CBS-1 ST** |
| [![\[OR\] \[BDO\] \[PH\] \[E3\] \[CBS\] \[1\] \[DP\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/9ecaf9a8-a1b1-4d8c-ba7e-a7f2126a3f9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9ecaf9a8-a1b1-4d8c-ba7e-a7f2126a3f9e) | [![\[OR\] \[BDO\] \[PH\] \[E3\] \[CBS\] \[1\] \[MD\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/cc58e114-abef-4c4c-8473-5951e6953aa9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/cc58e114-abef-4c4c-8473-5951e6953aa9) | [![\[OR\] \[BDO\] \[PH\] \[E3\] \[CBS\] \[1\] \[MPR\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/23a5f245-0677-4aea-8a05-e4ced3a69fcd.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/23a5f245-0677-4aea-8a05-e4ced3a69fcd) | [![\[OR\] \[BDO\] \[PH\] \[E3\] \[CBS\] \[1\] \[ITo\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/646bc62a-7023-4544-894f-67ccff7ae379.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/646bc62a-7023-4544-894f-67ccff7ae379) | [![\[OR\] \[BDO\] \[PH\] \[E3\] \[CBS\] \[1\] \[SuPS\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/67e25ae3-3c4e-48d0-b6e7-ea5718dfa802.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/67e25ae3-3c4e-48d0-b6e7-ea5718dfa802) | [![\[OR\] \[BDO\] \[PH\] \[E3\] \[CBS\] \[1\] \[ST\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/e14ff2a1-48f2-4cd3-9924-d72a7bf84794.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/e14ff2a1-48f2-4cd3-9924-d72a7bf84794) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)
**Gain Competency:** For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the **OR-5000 Operational Resilience Expert Implementer course**, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-04-13T17:34:38.198Z",
"datePublished" : "2026-03-25T11:48:03.000Z",
"headline" : "[OR] [BDO] [E3] [CBS] [1] [ST] Perform Scenario Testing",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-bdo-e3-cbs-1-st-perform-scenario-testing",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```