---
title: [OR] [BI] [E3] [CBS] [1] [ITo] Establish Impact Tolerances
description: [OR] [BI] [E3] [CBS] [1] [ITo] Establish Impact Tolerances
image: https://blog.bcm-institute.org/hubfs/Bank%20Islam%20Graphic%20Folder/Bank%20Islam%20CBS%201%20Morepost/%5BOR%5D%20%5BBI%5D%20%5BE3%5D%20%5BCBS%5D%20%5B1%5D%20%5BITo%5D%20Establish%20Impact%20Tolerances.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Implementing Operational Resilience for Bank Islam: Aligning with BNM and Global Best Practices
# \[OR\] \[BI\] \[E3\] \[CBS\] \[1\] \[ITo\] Establish Impact Tolerances
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/76433f14-9236-4de8-a727-6b82d5d09a9b)Deposit and Withdrawal Services form a foundational, critical business service for Bank Islam, directly supporting customer access to funds, liquidity confidence, and trust in Shariah-compliant banking operations.
Any disruption to this service has immediate implications for financial harm, consumer confidence, systemic stability, and regulatory compliance.
This chapter establishes impact tolerances for CBS-1 Deposit and Withdrawal Services by defining the maximum level of disruption Bank Islam can tolerate before causing intolerable harm to customers, the bank, or the financial system.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0430108a-ef49-43aa-ac7d-ee6bb474eba8)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Feb 10, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![\[OR\] \[BI\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/b78af26b-21f2-4eb5-be89-d10901d460fb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b78af26b-21f2-4eb5-be89-d10901d460fb)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0430108a-ef49-43aa-ac7d-ee6bb474eba8)**CBS-1 Deposit, Savings, and Current Account Services **
#### Introduction
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/5078a259-e3dc-4870-8fd0-0ca39102adf2)Deposit and Withdrawal Services are foundational, critical business services for Bank Islam, directly supporting customer access to funds, confidence in liquidity, and trust in Shariah-compliant banking operations.
Any disruption to this service has immediate implications for financial harm, consumer confidence, systemic stability, and regulatory compliance.
This chapter establishes impact tolerances for CBS-1 Deposit and Withdrawal Services by defining the maximum level of disruption Bank Islam can tolerate before causing intolerable harm to customers, the bank, or the financial system.
The tolerances are set across time, data integrity, customer outcomes, and regulatory obligations, in line with operational resilience expectations.
##### Purpose of the Chapter
The purpose of this chapter is to:
- [](https://cta-redirect.hubspot.com/cta/redirect/3893111/1e4399ef-c884-48b2-a56d-c68bd01abfcf)Define clear, measurable impact tolerances for each Sub-CBS within Deposit and Withdrawal Services.
- Support severe but plausible disruption planning and scenario testing.
- Enable management to prioritise investment, remediation, and response actions based on risk to customers and regulators.
- Demonstrate compliance with operational resilience principles as articulated in “What is Impact Tolerance in Operational Resilience?” by focusing on harm-based outcomes rather than system recovery alone.
[![Banner \[Table\] \[OR\] \[E3\] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/627c33a8-714d-40af-9a2b-0d7957fb8afa.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/627c33a8-714d-40af-9a2b-0d7957fb8afa)
###### Table P4: Establish Impact Tolerance for CBS-1
| Sub-CBS Code | Sub-CBS | Maximum Tolerable Downtime (MTD) | Maximum Tolerable Data Loss (MTDL) | Customer Impact | Regulatory Impact | Impact Type | Current Resilience Status | Action Required |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| 1.1 | Cash Deposit at Branches | ≤ 8 hours | No loss of transaction records | Inability to deposit funds; business and retail inconvenience | Breach of service availability expectations | Customer Harm, Operational | Generally resilient with manual fallback | Enhance branch contingency staffing and manual logging controls |
| 1.2 | Deposit via ATMs | ≤ 4 hours | ≤ 15 minutes transaction data | Missed deposits, delayed account crediting | Potential complaints and reporting scrutiny | Customer Harm, Reputational | Moderately resilient | Improve ATM monitoring and faster reconciliation processes |
| 1.3 | Online / Internet Banking Deposits | ≤ 2 hours | ≤ 5 minutes data loss | Digital customers are unable to transact; trust erosion | Digital banking service disruption risk | Customer Harm, Reputational | Moderately resilient | Strengthen real-time failover and transaction queuing |
| 1.4 | Cash Withdrawal at Branches | ≤ 4 hours | No data loss | Customers are unable to access cash physically | Heightened supervisory concern | Customer Harm, Systemic | Generally resilient | Improve cash continuity plans and alternative branch routing |
| 1.5 | ATM Withdrawals | ≤ 2 hours | ≤ 5 minutes transaction data | Immediate financial hardship for retail customers | High regulatory sensitivity | Customer Harm, Systemic | Key vulnerability during peak periods | Expand ATM network redundancy and cash forecasting |
| 1.6 | Online / Internet Banking Withdrawals | ≤ 1 hour | Zero tolerance for incorrect balances | Loss of confidence in account integrity | Serious regulatory breach risk | Customer Harm, Data Integrity | Partially resilient | Enhance transaction validation and real-time controls |
| 1.7 | Failed Deposits or Withdrawals | ≤ 24 hours to resolve | Zero tolerance for unresolved discrepancies | Financial distress, disputes, complaints | Mandatory complaint and incident reporting | Financial Harm, Conduct | Moderately resilient | Automate exception handling and customer notifications |
| 1.8 | Fraud Detection and Prevention | ≤ 30 minutes | Zero tolerance | Financial losses, Shariah, and trust implications | Severe regulatory and enforcement risk | Financial Crime, Reputational | High-priority capability | Continuous improvement of real-time fraud analytics |
#### [![Banner \[Summing\] \[OR\] \[E3\] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5)
Establishing impact tolerances for CBS-1 Deposit and Withdrawal Services enables Bank Islam to anchor resilience planning around customer harm and regulatory outcomes, rather than internal recovery metrics alone.
The tolerances defined in this chapter clarify where disruption becomes unacceptable, guiding investment decisions, scenario testing, and response prioritisation.
By embedding these impact tolerances into operational resilience governance, Bank Islam strengthens its ability to:
• Protect customers’ continuous access to funds,
• Maintain data integrity and trust in Shariah-compliant services,
• Meet regulatory expectations during severe but plausible disruptions.
This foundation supports subsequent resilience activities, including dependency mapping, scenario testing, and remediation planning, ensuring Deposit and Withdrawal Services remain robust under stress and aligned with the bank’s strategic and regulatory obligations.
| Implementing Operational Resilience for Bank Islam: Aligning with BNM and Global Best Practices | | | | | |
| --- | --- | --- | --- | --- | --- |
| **eBook 3: Starting Your OR Implementation** | | | | | |
| **CBS-1 Deposit, Savings, and Current Account Services** | | | | | |
| **CBS-1 DP** | **CBS-1 MD** | **CBS-1 MPR** | **CBS-1 ITo** | **CBS-1 SuPS** | **CBS-1 ST** |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0f3ae016-6c34-469d-86b5-a3771d8a9d98) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/585bf77d-ee31-4abd-b769-a11fd5e80c7d) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/645ecdda-07bb-4047-9992-9fb90cb10f00) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/5078a259-e3dc-4870-8fd0-0ca39102adf2) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/dbac7f74-f7ad-451a-a0b0-c54deb52f161) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/e93928a9-6911-443d-80c2-456c260ebc5f) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/13a448f1-f09c-42da-a57e-0988e41658c5)Gain Competency:** For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the **OR-5000 Operational Resilience Expert Implementer course**, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-03-14T09:38:35.513Z",
"datePublished" : "2026-02-10T02:08:07.000Z",
"headline" : "[OR] [BI] [E3] [CBS] [1] [ITo] Establish Impact Tolerances",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-bi-e3-cbs-1-ito-establish-impact-tolerances",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```