---
title: [OR] [BI] [E3] [CBS] [2] [ITo] Establish Impact Tolerances
description: [OR] [BI] [E3] [CBS] [2] [ITo] Establish Impact Tolerances
image: https://blog.bcm-institute.org/hubfs/Bank%20Islam%20Graphic%20Folder/Bank%20Islam%20CBS%202%20Morepost/%5BOR%5D%20%5BBI%5D%20%5BE3%5D%20%5BCBS%5D%20%5B2%5D%20%5BITo%5D%20Payments%20and%20Funds%20Transfer%20Services.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Implementing Operational Resilience for Bank Islam: Aligning with BNM and Global Best Practices
# \[OR\] \[BI\] \[E3\] \[CBS\] \[2\] \[ITo\] Establish Impact Tolerances
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/76433f14-9236-4de8-a727-6b82d5d09a9b)For CBS-2 Payments and Funds Transfer Services, setting clear impact tolerances helps ensure that critical payment activities remain within acceptable disruption limits and that recovery priorities are well understood.
For Bank Islam Malaysia Berhad, this means defining how long each payment sub-service can be unavailable, how much data loss is tolerable, and what level of customer or regulatory impact is acceptable before the disruption is considered intolerable.
Impact tolerances translate operational resilience from concept into measurable thresholds.
They guide investment decisions, recovery strategies, and escalation protocols, ensuring that payment services—highly time-sensitive and customer-facing—are restored before they cause systemic, financial, or reputational harm.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0430108a-ef49-43aa-ac7d-ee6bb474eba8)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Feb 16, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![\[OR\] \[BI\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/b78af26b-21f2-4eb5-be89-d10901d460fb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b78af26b-21f2-4eb5-be89-d10901d460fb)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0430108a-ef49-43aa-ac7d-ee6bb474eba8)**CBS-2 Payments and Funds Transfer Services**
#### Introduction
[![\[OR\] \[BI\] \[E3\] \[CBS\] \[2\] \[ITo\] Payments and Funds Transfer Services](https://no-cache.hubspot.com/cta/default/3893111/9597f74e-1b94-4502-a538-b81ce691da68.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9597f74e-1b94-4502-a538-b81ce691da68)For CBS-2 Payments and Funds Transfer Services, setting clear impact tolerances helps ensure that critical payment activities remain within acceptable disruption limits and that recovery priorities are well understood.
For Bank Islam Malaysia Berhad, this means defining how long each payment sub-service can be unavailable, how much data loss is tolerable, and what level of customer or regulatory impact is acceptable before the disruption is considered intolerable.
Impact tolerances translate operational resilience from concept into measurable thresholds.
They guide investment decisions, recovery strategies, and escalation protocols, ensuring that payment services—highly time-sensitive and customer-facing—are restored before they cause systemic, financial, or reputational harm.
[![Banner \[Table\] \[OR\] \[E3\] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/627c33a8-714d-40af-9a2b-0d7957fb8afa.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/627c33a8-714d-40af-9a2b-0d7957fb8afa)
###### Table P4: Establish Impact Tolerance for CBS-2
| Sub-CBS Code | Sub-CBS | Maximum Tolerable Downtime (MTD) | Maximum Tolerable Data Loss (MTDL) | Customer Impact | Regulatory Impact | Impact Type | Current Resilience Status | Action Required |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| 2-1 | Customer Payment Initiation | 2 hours | ≤15 minutes | High – inability to initiate payments | Moderate | Customer / Financial | Strong | Enhance peak-time capacity |
| 2-2 | Funds Transfer Processing (Intra-bank) | 2 hours | Near-zero | High – delayed internal transfers | Moderate | Financial | Strong | Maintain real-time monitoring |
| 2-3 | Interbank Transfer Processing (IBFT & RENTAS) | 1 hour | Near-zero | Very High – ecosystem impact | High | Systemic / Regulatory | Moderate | Strengthen redundancy |
| 2-4 | DuitNow & Instant Payment Services | 30 minutes | Near-zero | Very High – real-time expectations | High | Customer / Reputational | Moderate | Improve failover readiness |
| 2-5 | Payment Clearing & Settlement | 4 hours (within the same day) | Near-zero | Medium – not always visible to customers | Very High | Regulatory / Financial | Strong | Periodic recovery testing |
| 2-6 | Corporate & Bulk Payment Processing | 6 hours | ≤30 minutes | High – payroll/vendor impact | High | Financial / Reputational | Moderate | Introduce a backup processing window |
| 2-7 | Cross-Border Payment Processing | 24 hours | ≤1 hour | Medium – time-zone buffers exist | High | Regulatory / Financial | Adequate | Improve cut-off management |
| 2-8 | Payment Authorization & Authentication | 30 minutes | Near-zero | Very High – transactions halted | High | Fraud / Customer | Moderate | Add multi-site authentication nodes |
| 2-9 | Sanctions Screening & AML Monitoring | 2 hours | Zero tolerance | Low immediate customer visibility | Very High | Compliance | Strong | Maintain rule-set currency |
| 2-10 | Transaction Posting & Core Banking Update | 2 hours | ≤15 minutes | High–balance inaccuracies | High | Financial / Reputational | Moderate | Strengthen core backup sync |
| 2-11 | Exception Handling & Reversal Mgmt | 24 hours | ≤1 hour | Medium – affects dispute resolution | Moderate | Customer / Ops | Adequate | Automate case tracking |
| 2-12 | Reconciliation & Nostro/Vostro Mgmt | End-of-day | ≤1 hour | Low immediate impact | High | Financial / Regulatory | Adequate | Increase automation |
| 2-13 | Customer Notification & Confirmation | 4 hours | ≤30 minutes | Medium – assurance impact | Low | Reputational | Strong | Add alternate notification channels |
| 2-14 | Payment Reporting & Regulatory Submission | By the regulatory deadline | Zero tolerance | Minimal customer impact | Very High | Regulatory | Strong | Maintain reporting backup |
| 2-15 | Payment Channel Availability & Infrastructure Support | 1 hour | Near-zero | Very High – multi-channel disruption | High | Systemic / Reputational | Moderate | Expand infrastructure redundancy |
#### [![Banner \[Summing\] \[OR\] \[E3\] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5)
Defining impact tolerances for CBS-2 ensures that payment and funds transfer services operate within clearly articulated resilience boundaries.
By linking downtime and data loss thresholds to customer, financial, and regulatory consequences, the bank gains a practical framework for prioritising recovery and investment.
Well-calibrated tolerances also promote proactive resilience—encouraging scenario testing, capacity planning, and continuous improvement.
As payment ecosystems evolve toward real-time and cross-border immediacy, regularly reviewing and refining these tolerances will help sustain trust, meet regulatory expectations, and support stable growth in digital financial services.
| Implementing Operational Resilience for Bank Islam: Aligning with BNM and Global Best Practices | | | | | |
| --- | --- | --- | --- | --- | --- |
| **eBook 3: Starting Your OR Implementation** | | | | | |
| **CBS-2 Payments and Funds Transfer Services** | | | | | |
| **CBS-2 DP** | **CBS-2 MD** | **CBS-2 MPR** | **CBS-2 ITo** | **CBS-2 SuPS** | **CBS-2 ST** |
| [![\[OR\] \[BI\] \[E3\] \[CBS\] \[2\] \[DP\] Payments and Funds Transfer Services](https://no-cache.hubspot.com/cta/default/3893111/c898ee8d-2d4d-4cf4-9b2f-e97b84d91b3b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c898ee8d-2d4d-4cf4-9b2f-e97b84d91b3b) | [![\[OR\] \[BI\] \[E3\] \[CBS\] \[2\] \[MD\] Payments and Funds Transfer Services](https://no-cache.hubspot.com/cta/default/3893111/e444b150-6d0f-45e3-b50f-3cdbfd8e22fb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/e444b150-6d0f-45e3-b50f-3cdbfd8e22fb) | [![\[OR\] \[BI\] \[E3\] \[CBS\] \[2\] \[MPR\] Payments and Funds Transfer Services](https://no-cache.hubspot.com/cta/default/3893111/3446a398-dce9-49f3-bde2-cdff67689b39.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3446a398-dce9-49f3-bde2-cdff67689b39) | [![\[OR\] \[BI\] \[E3\] \[CBS\] \[2\] \[ITo\] Payments and Funds Transfer Services](https://no-cache.hubspot.com/cta/default/3893111/9597f74e-1b94-4502-a538-b81ce691da68.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9597f74e-1b94-4502-a538-b81ce691da68) | [![\[OR\] \[BI\] \[E3\] \[CBS\] \[2\] \[SuPS\] Payments and Funds Transfer Services](https://no-cache.hubspot.com/cta/default/3893111/4970a79b-1480-4204-8d7d-93650ff87efe.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4970a79b-1480-4204-8d7d-93650ff87efe) | [![\[OR\] \[BI\] \[E3\] \[CBS\] \[2\] \[ST\] Payments and Funds Transfer Services](https://no-cache.hubspot.com/cta/default/3893111/b941dc6b-846d-4718-9c2b-6494f06c7ba6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b941dc6b-846d-4718-9c2b-6494f06c7ba6) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/13a448f1-f09c-42da-a57e-0988e41658c5)Gain Competency:** For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the **OR-5000 Operational Resilience Expert Implementer course**, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-03-14T07:12:47.507Z",
"datePublished" : "2026-02-16T05:39:56.000Z",
"headline" : "[OR] [BI] [E3] [CBS] [2] [ITo] Establish Impact Tolerances",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-bi-e3-cbs-2-ito-establish-impact-tolerances",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```