Deposit and withdrawal services are foundational retail banking activities and are classified as important business services due to their direct impact on customers, financial stability, and trust.
In line with operational resilience principles, this mapping identifies people, processes, technology, third-party vendors, and dependencies that enable the service to be delivered within defined impact tolerances.
The mapping supports scenario testing, vulnerability identification, and recovery planning by making critical dependencies explicit.
|
Sub-CBS Code |
Sub-CBS |
Processes |
People |
Technology (Applications & Infrastructure) |
Third-Party Vendors |
Upstream / Downstream Dependencies |
|
1.1 |
Cash Deposit at Branches |
• Customer identification & account verification • Cash acceptance and counting • Transaction posting to core banking • Receipt generation and reconciliation |
• Branch tellers • Branch operations managers • Compliance/KYC officers |
• Core Banking System (CBS) • Teller system • Branch network & secure LAN • CCTV & cash handling equipment |
• Cash-in-transit (CIT) providers • Currency processing vendors |
Upstream: Customer onboarding, KYC records Downstream: Account balance updates, general ledger, customer statements |
|
1.2 |
Deposit via ATMs |
• Cash acceptance by ATM • Note validation & counting • Transaction authorization • Posting to customer account |
• ATM operations team • IT infrastructure support • Vendor management |
• ATM machines • ATM switch • Core Banking System • Network connectivity (MPLS/VPN) |
• ATM hardware vendors • Managed ATM service providers • Telecommunications providers |
Upstream: ATM availability, network connectivity Downstream: Account balance updates, reconciliation, dispute handling |
|
1.3 |
Online / Internet Banking Deposits |
• Deposit instruction capture • Validation of source funds • Posting to the account • Confirmation to the customer |
• Digital banking operations team • IT application support • Cybersecurity team |
• Internet Banking platform • Core Banking System • API middleware • Security & authentication systems |
• Cloud service providers (if applicable) • Payment gateway providers |
Upstream: Customer authentication, channel availability Downstream: Ledger updates, transaction notifications |
|
1.4 |
Cash Withdrawal at Branches |
• Identity verification • Withdrawal authorization • Cash disbursement • Transaction posting and reconciliation |
• Branch tellers • Branch managers • Compliance staff |
• Core Banking System • Teller system • Branch security infrastructure |
• Cash-in-transit (CIT) providers • Cash vault services |
Upstream: Sufficient cash holdings, system availability Downstream: Account balance reduction, cash position reporting |
|
1.5 |
ATM Withdrawals |
• Card & PIN authentication • Funds authorization • Cash dispensing • Transaction posting |
• ATM monitoring team • IT support staff |
• ATM machines • ATM switch • Core Banking System • Real-time fraud monitoring tools |
• ATM network providers (e.g., MEPS) • Telecom providers |
Upstream: Card management system, network availability Downstream: Account balance update, dispute & chargeback handling |
|
1.6 |
Online / Internet Banking Withdrawals |
• Transaction initiation • Authentication & authorization • Funds transfer execution • Customer notification |
• Digital banking operations • IT application support • Cybersecurity analysts |
• Internet/Mobile Banking platform • Core Banking System • Payment rails integration • Authentication systems |
• Payment service providers • Telecommunications providers |
Upstream: Authentication services, payment rails availability Downstream: Account debiting, beneficiary crediting |
|
1.7 |
Failed Deposits or Withdrawals |
• Failure detection • Transaction reversal or adjustment • Customer notification • Complaint and dispute resolution |
• Operations support team • Customer service officers • IT incident management |
• Core Banking System • Exception management tools • CRM system |
• ATM vendors • Payment network operators |
Upstream: Accurate transaction logs, system alerts Downstream: Customer refunds, regulatory reporting, service recovery |
|
1.8 |
Fraud Detection and Prevention |
• Transaction monitoring • Anomaly detection • Alert investigation • Account blocking & recovery actions |
• Fraud operations team • Risk management • Compliance & AML officers |
• Fraud monitoring systems • Core Banking System • Analytics & rules engines • Security infrastructure |
• Fraud analytics vendors • Threat intelligence providers |
Upstream: Real-time transaction data, customer profiles Downstream: Transaction approvals/blocks, customer communications, regulatory notifications |
This Map Processes and Resources establishes a clear and comprehensive view of how CBS-1 Deposit and Withdrawal Services are delivered at Bank Islam, from customer touchpoints through to core banking, third-party dependencies, and downstream financial reporting.
By explicitly identifying critical resources and interdependencies, the mapping enables Bank Islam to:
• Assess vulnerabilities under severe but plausible disruption scenarios
• Define and test impact tolerances effectively
• Strengthen incident response, substitution, and recovery strategies
This foundation supports ongoing scenario testing and resilience investment decisions, ensuring that essential deposit and withdrawal services remain available and trustworthy even during operational stress events.
|
Implementing Operational Resilience for Bank Islam: Aligning with BNM and Global Best Practices |
|||||
| eBook 3: Starting Your OR Implementation |
|||||
| CBS-1 Deposit, Savings, and Current Account Services | |||||
| CBS-1 DP | CBS-1 MD | CBS-1 MPR | CBS-1 ITo | CBS-1 SuPS | CBS-1 ST |
More Information About OR-5000 [OR-5] or OR-300 [OR-3]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
|
If you have any questions, click to contact us. |
||
|
|