These scenarios go beyond routine incidents and focus on high-impact disruptions that could realistically occur, potentially threatening customer access to funds, financial stability, and regulatory compliance.
In line with operational resilience guidance and the BCM Institute perspective, this chapter examines how extreme yet credible events could disrupt key deposit and withdrawal processes, while highlighting proactive measures Bank Islam can take to remain within impact tolerance during such disruptions.
|
Sub-CBS Code |
Sub-CBS |
Severe but Plausible Scenario |
Impact / Effect |
Proactive Risk Management Action |
Link to Integration of Cyber and ICT Risks |
|
1.1 |
Cash Deposit at Branches |
Widespread branch system outage caused by a core banking interface failure during peak business hours |
Inability to accept cash deposits; customer dissatisfaction; liquidity recording delays |
Manual fallback deposit procedures, branch-level contingency processes, and staff training for offline operations |
Core banking system resilience, endpoint availability, ICT change management controls |
|
1.2 |
Deposit via ATMs |
ATM network disruption due to telecom provider outage combined with malware propagation |
Customers unable to deposit cash; accumulation of unprocessed deposits |
Dual telecom routing, ATM malware detection, regular ATM OS patching |
ATM network security, telecom dependency management, cyber monitoring tools |
|
1.3 |
Online / Internet Banking Deposits |
Distributed Denial-of-Service (DDoS) attack coinciding with high transaction volume periods |
Digital deposit services unavailable; reputational damage |
DDoS mitigation services, traffic throttling, alternative digital channels |
Cyber defence architecture, cloud scalability, SOC monitoring |
|
1.4 |
Cash Withdrawal at Branches |
Physical branch closure due to public safety incident or civil unrest |
Customers unable to withdraw cash from affected locations |
Business continuity site activation, customer redirection to nearby branches/ATMs |
Physical security systems, branch ICT redundancy |
|
1.5 |
ATM Withdrawals |
Simultaneous ATM cash-out events caused by coordinated fraud and delayed cash replenishment |
Cash unavailability; increased customer complaints |
Predictive cash-replenishment analytics, real-time fraud alerts |
Fraud analytics systems, ATM transaction monitoring, ICT data integrity |
|
1.6 |
Online / Internet Banking Withdrawals |
Core banking transaction processing latency due to failed system upgrade |
Delayed or failed withdrawals; potential duplicate transactions |
Change management controls, rollback procedures, pre-deployment testing |
ICT change governance, system integration testing, application performance monitoring |
|
1.7 |
Failed Deposits or Withdrawals |
Transaction reconciliation failure following partial system recovery after outage |
Customer balances inaccurate; regulatory and Shariah compliance risk |
Automated reconciliation tools, customer communication protocols |
Data integrity controls, backup and recovery systems |
|
1.8 |
Fraud Detection and Prevention |
AI-based fraud detection engine disabled by corrupted data feed |
Undetected fraudulent withdrawals and deposits |
Data validation checkpoints, manual fraud review escalation |
Cyber data governance, secure data pipelines, ICT resilience of analytics platforms |
The identification of Severe but Plausible Scenarios for CBS-1 Deposit and Withdrawal Services enables Bank Islam to better understand how extreme disruptions—particularly those involving Cyber and ICT risks—could affect customer access to essential financial services.
By mapping these scenarios to proactive risk management actions, the bank demonstrates a forward-looking approach to operational resilience, ensuring preparedness not only to prevent disruption but to adapt, respond, and recover within acceptable impact tolerances.
This structured scenario analysis forms a strong foundation for subsequent testing, investment prioritisation, and continuous improvement of Bank Islam’s resilience capabilities.
|
Implementing Operational Resilience for Bank Islam: Aligning with BNM and Global Best Practices |
|||||
| eBook 3: Starting Your OR Implementation |
|||||
| CBS-1 Deposit, Savings, and Current Account Services | |||||
| CBS-1 DP | CBS-1 MD | CBS-1 MPR | CBS-1 ITo | CBS-1 SuPS | CBS-1 ST |
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
|
If you have any questions, click to contact us. |
||
|
|