[OR] [BI] [E3] [CBS] [2] [MD] Map Dependency

Written by Moh Heng Goh | Feb 16, 2026 5:13:44 AM

CBS-2 Payments and Funds Transfer Services

Introduction

Payments and Funds Transfer Services represent one of the most systemically important critical business services within Bank Islam. Any disruption to this service can immediately affect customers, counterparties, financial market infrastructures, and regulatory standing. Mapping interconnections and interdependencies for CBS-2 enables the bank to clearly identify which people, processes, technologies, and third parties are essential to sustain service delivery within impact tolerance.

The table below provides a structured dependency mapping aligned to operational resilience principles and industry good practice.

Table P2: Map Dependency for CBS-2

Sub-CBS Code	Sub-CBS	Dependency Type	Dependency Detail (What/Who is involved)	Connectivity (How it connects/interacts with CBS or other components)
2-01	Customer Payment Initiation	People	Branch staff, Contact Centre, Digital Banking Ops	Capture payment instructions via branch, mobile, internet, and API channels
		Process	Customer onboarding, mandate validation, transaction input procedures	Validates customer eligibility before routing to the processing engine
		Technology	Mobile banking, Internet banking, ATM/CDM, API gateway	Front-end channels connect to the payment switch/core banking
		Third Party	Telco providers, device vendors	Network connectivity enabling digital access
2-02	Funds Transfer Processing (Intra-bank)	People	Payment operations team	Monitor internal transfers and cut-off times
		Process	Internal routing logic, posting rules	Routes transactions within core banking accounts
		Technology	Core banking system	Executes debit/credit within Bank Islam accounts
2-03	Interbank Transfer Processing (IBFT & RENTAS)	People	Treasury ops, payment ops	Manage high-value and retail interbank flows
		Process	Clearing cut-off, liquidity management	Coordinates settlement timelines
		Technology	Payment gateway, SWIFT interface	Connects to the national payment infrastructure
		Third Party	Payments Network Malaysia (PayNet), Bank Negara Malaysia	IBFT & RENTAS clearing and settlement
2-04	DuitNow & Instant Payment Services	People	Digital ops monitoring team	Oversees 24/7 instant payment performance
		Process	Real-time validation & routing	Immediate transaction confirmation
		Technology	Real-time payment switch	API connectivity to the PayNet DuitNow platform
		Third Party	Payments Network Malaysia	Instant payment infrastructure
2-05	Payment Clearing & Settlement	People	Settlement & treasury team	Manage liquidity buffers
		Process	End-of-day settlement cycle	Reconciles net positions
		Technology	Settlement system interface	Interfaces with central bank systems
		Third Party	Bank Negara Malaysia	Final settlement authority
2-06	Corporate & Bulk Payment Processing	People	Corporate banking ops	Validate bulk files
		Process	File validation, batch scheduling	Connects the corporate portal to the processing engine
		Technology	Host-to-host system, file transfer server	Secure integration with corporate clients
2-07	Cross-Border Payment Processing	People	Trade finance & FX desk	Manage FX conversion & compliance
		Process	FX rate application, correspondent routing	Routes payments to overseas banks
		Technology	SWIFT messaging system	Cross-border transaction messaging
		Third Party	Correspondent banks, SWIFT	International settlement routing
2-08	Payment Authorization & Authentication	People	Fraud monitoring team	Review suspicious approvals
		Process	MFA, transaction limits, approval matrix	Controls transaction release
		Technology	OTP server, biometric auth, fraud engine	Integrated with digital channels & core banking
2-09	Sanctions Screening & AML Monitoring	People	Compliance & AML analysts	Investigate flagged transactions
		Process	Real-time screening & case management	Blocks high-risk transactions
		Technology	AML screening system	Integrated before posting & settlement
		Third Party	Sanctions list data providers	External watchlist feeds
2-10	Transaction Posting & Core Banking Update	People	IT application support	Monitor posting failures
		Process	GL update, ledger balancing	Updates customer accounts
		Technology	Core banking system, GL module	Central accounting engine
2-11	Exception Handling & Reversal Management	People	Ops resolution team	Investigate rejected or failed payments
		Process	Reversal workflow & escalation	Interfaces with customer service & finance
		Technology	Case management system	Tracks and logs exceptions
2-12	Reconciliation & Nostro/Vostro Management	People	Finance & treasury	Monitor nostro balances
		Process	Daily reconciliation cycle	Matches internal vs external records
		Technology	Reconciliation engine	Pulls data from core & external statements
		Third Party	Correspondent banks	Provide nostro statements
2-13	Customer Notification & Confirmation	People	Customer service	Manage failed notification cases
		Process	SMS/email alert triggers	Sends confirmation after posting
		Technology	SMS gateway, email server, app push service	Triggered by core banking events
		Third Party	Telco providers	Message delivery network
2-14	Payment Reporting & Regulatory Submission	People	Regulatory reporting team	Prepare BNM submissions
		Process	Regulatory aggregation & validation	Extracts data from payment systems
		Technology	MIS & reporting platform	Interfaces with the compliance database
		Third Party	Bank Negara Malaysia	Regulatory reporting recipient
2-15	Payment Channel Availability & Infrastructure Support	People	IT infrastructure & SOC team	24/7 monitoring
		Process	Incident management & DR activation	Supports all CBS-2 sub-services
		Technology	Data centre, cloud infrastructure, network, firewall	Backbone supporting all channels
		Third Party	Data centre provider, cloud vendor	Hosting & redundancy services

Mapping dependencies for CBS-2 enables Bank Islam to move beyond process documentation into true operational resilience. By clearly identifying critical people roles, core systems, third-party infrastructures, and regulatory touchpoints, the bank gains visibility over concentration risks, single points of failure, and recovery prioritisation requirements.

This structured dependency view strengthens impact tolerance validation, scenario testing, third-party risk oversight, and recovery planning. More importantly, it supports informed decision-making during disruption—ensuring that Payments and Funds Transfer Services remain available, secure, and compliant even under severe but plausible stress conditions.

Implementing Operational Resilience for Bank Islam: Aligning with BNM and Global Best Practices
eBook 3: Starting Your OR Implementation
CBS-2 Payments and Funds Transfer Services
CBS-2 DP	CBS-2 MD	CBS-2 MPR	CBS-2 ITo	CBS-2 SuPS	CBS-2 ST

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.



	If you have any questions, click to contact us.

View full post