![[OR] [BI] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/b78af26b-21f2-4eb5-be89-d10901d460fb.png)
CBS-4 SME and Corporate Financing Services
Introduction
![[OR] [BI] [E3] [CBS] [4] [MPR] SME and Corporate Financing Services](https://no-cache.hubspot.com/cta/default/3893111/7612bc12-de2e-40c0-a068-905cee413460.png)
Operational resilience requires financial institutions to identify, map, and understand the resources that support the delivery of their Critical Business Services (CBS), so that they can remain within defined impact tolerances during severe but plausible disruptions. In line with expectations set out in the 2025 BNM Discussion Paper on Operational Resilience issued by Bank Negara Malaysia, this chapter provides a comprehensive mapping of processes and resources supporting CBS-4: SME and Corporate Financing Services.
This mapping exercise links each Sub-CBS to its supporting processes, people, technology, third-party vendors, and upstream/downstream dependencies.
The objective is to:
- Provide end-to-end visibility of service delivery
- Identify concentration risks and single points of failure
- Support scenario testing and impact tolerance validation
- Strengthen recovery planning and governance oversight
The mapping below is structured to align with regulatory expectations for traceability, accountability, and resilience testing readiness.
![Banner [Table] [OR] [E3] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/8a44ad9d-681b-48ff-90b1-b994a1c12a64.png)
Table P3: Map Processes and Resources for CBS-4
|
Sub-CBS Code |
Sub-CBS |
Processes |
People |
Technology (Applications & Infrastructure) |
Third-Party Vendors |
Upstream / Downstream Dependencies |
|
4.1 |
Customer Onboarding and Financing Application Initiation |
Customer due diligence (CDD), KYC, account opening, financing application capture, document collection, initial screening (AML/sanctions), Shariah eligibility screening |
Relationship Managers (RM), SME/Corporate Banking Officers, Compliance (AML), Onboarding Operations, Shariah Secretariat |
Core Banking System (CBS), Digital Onboarding Platform, e-KYC tools, AML/Sanctions Screening System, Document Management System (DMS), CRM, Network & End-User Devices |
e-KYC service providers, Credit Bureau (e.g. CTOS Data Systems), Company registry search (Suruhanjaya Syarikat Malaysia), Cloud hosting providers |
Upstream: Customer data, identity verification systems, regulatory guidelines. Downstream: Credit assessment, risk scoring, approval workflow |
|
4.2 |
Credit Assessment and Risk Evaluation |
Financial statement analysis, cashflow modelling, risk grading, internal rating assignment, collateral valuation, Shariah compliance review |
Credit Analysts, Risk Management, Shariah Review Officers, Valuation Officers |
Credit Risk Rating System, Financial Spreading Tools, Collateral Management System, Data Warehouse, BI Tools, Secure Database Servers |
External valuers, Credit bureaus (CTOS), Industry data providers |
Upstream: Onboarding documentation, customer financial data. Downstream: Credit committee approval, financing structuring |
|
4.3 |
Credit Approval and Governance |
Credit paper preparation, delegated authority review, credit committee deliberation, documentation of decision, and limit approval entry |
Credit Committee Members, Senior Management, Risk Oversight, Governance Secretariat |
Workflow & Approval System, Board Portal, CBS limit module, Email & Collaboration Tools |
Secure communication providers, Managed IT services |
Upstream: Credit assessment outputs. Downstream: Documentation, facility setup |
|
4.4 |
Financing, Structuring, and Documentation |
Structuring Shariah-compliant contracts (e.g. Murabahah, Tawarruq, Ijarah), preparation of legal agreements, documentation review, execution |
Product Structuring Team, Legal Department, Shariah Advisory, External Legal Counsel |
Product Configuration Module, Document Generation System, e-Signature Platform, DMS |
External law firms, e-signature provider, Shariah advisors |
Upstream: Approved credit terms. Downstream: Facility setup, collateral perfection |
|
4.5 |
Facility Setup and Limit Activation |
Account creation in CBS, limit setup, collateral tagging, system validation checks, and customer notification |
Operations Team, Credit Administration, IT Support |
Core Banking System, Limit Management Module, Collateral System, User Access Management (IAM), Data Centre Infrastructure |
Data centre provider, System integrator |
Upstream: Signed legal documents. Downstream: Disbursement and payment execution |
|
4.6 |
Financing Disbursement and Payment Execution |
Disbursement instruction processing, payment validation, fund release (intra/interbank), accounting entries, customer confirmation |
Operations Processing Team, Treasury (if applicable), Payment Operations |
Payment Gateway, Core Banking System, SWIFT interface, RENTAS/IBG connectivity, Accounting System |
Payment network providers (e.g. SWIFT), Clearing operators, Correspondent banks |
Upstream: Active facility limits. Downstream: Customer accounts, monitoring & servicing |
|
4.7 |
Trade and Working Capital Financing Processing |
LC issuance, Bank Guarantee processing, Trade Murabahah, invoice financing, document checking |
Trade Finance Officers, Operations, Risk & Compliance |
Trade Finance System, SWIFT Interface, Document Checking Platform, Imaging System |
Shipping document verification agents, SWIFT, and Correspondent banks |
Upstream: Approved trade limits. Downstream: Customer settlement, exposure monitoring |
|
4.8 |
Financing Account Maintenance and Servicing |
Instalment processing, profit calculation, restructuring requests, variation processing, and customer inquiries handling |
Account Servicing Team, Call Centre, RMs, IT Support |
Core Banking System, Call Centre Platform, CRM, Profit Computation Engine, Data Backup Systems |
Cloud telephony provider, IT maintenance vendors |
Upstream: Active financing accounts. Downstream: Portfolio monitoring, regulatory reporting |
|
4.9 |
Collateral and Security Management |
Collateral registration, perfection of charge, periodic valuation updates, and insurance monitoring |
Credit Administration, Legal, Collateral Management Team |
Collateral Management System, Valuation Database, Policy Tracking System |
Valuers, Insurance providers, Land Registry Offices |
Upstream: Financing documentation. Downstream: Risk monitoring, recovery process |
|
4.10 |
Monitoring, Early Warning and Portfolio Management |
Covenant monitoring, EWI triggers, portfolio stress testing, impairment assessment, Shariah compliance review |
Risk Analytics, Portfolio Management Team, Finance, Shariah Review |
Risk Dashboard, Early Warning System (EWS), IFRS9/Impairment Engine, Data Warehouse |
Analytics vendors, External auditors |
Upstream: Account servicing data. Downstream: Recovery & remedial management, regulatory reporting |
|
4.11 |
Recovery, Remedial and Legal Management |
Restructuring negotiations, recovery strategies, legal proceedings initiation, collateral realisation, write-off approval |
Recovery Officers, Legal Counsel, External Lawyers, Senior Management |
Recovery Management System, Legal Case Tracking System, Document Archive, Secure File Servers |
External law firms, Auctioneers, Insolvency practitioners |
Upstream: Early warning signals, impaired accounts. Downstream: Financial reporting, capital impact |
|
4.12 |
Regulatory Reporting and Shariah Governance Oversight |
Regulatory returns submission, capital adequacy reporting, Shariah audit, internal audit reviews, and management reporting |
Regulatory Reporting Team, Finance, Compliance, Shariah Committee, Internal Audit |
Regulatory Reporting System, Data Warehouse, BI Dashboard, Secure Reporting Channels (BNM portals), Backup Infrastructure |
Regulatory submission portals (BNM), External auditors |
Upstream: Portfolio data, impairment data, recovery updates. Downstream: Supervisory review, board oversight |
Alignment with BNM Operational Resilience Expectations
In accordance with the 2025 Discussion Paper by Bank Negara Malaysia, this mapping supports:
- Identification of important business services (IBS/CBS)
- Documentation of critical resource dependencies
- Identification of single points of failure and concentration risks
- Readiness for severe but plausible scenario testing (e.g., core banking outage, cyberattack, key third-party failure, Shariah non-compliance event)
- Validation against defined impact tolerances
This structured mapping enables scenario testing across operational, cyber, third-party and governance risk dimensions.
![Banner [Summing] [OR] [E3] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/61e5330e-051c-4874-b6da-a1be8393c283.png)
The detailed mapping of processes and resources for CBS-4 SME and Corporate Financing Services establishes a clear end-to-end view of how financing services are delivered, supported and governed within Bank Islam Malaysia Berhad.
By linking each Sub-CBS to its operational processes, accountable personnel, enabling technologies and third-party dependencies, the bank strengthens its ability to:
- Anticipate vulnerabilities
- Prioritise resilience investments
- Conduct effective scenario testing
- Maintain services within defined impact tolerances during disruptions
This mapping forms a foundational component of Bank Islam’s operational resilience framework, ensuring SME and Corporate customers continue to receive critical financing support even under severe but plausible stress conditions.
![[OR] [BI] [E3] [CBS] [4] [DP] SME and Corporate Financing Services](https://no-cache.hubspot.com/cta/default/3893111/b810f94d-d8ee-4a6f-8ee4-4097d35e2c25.png)
![[OR] [BI] [E3] [CBS] [4] [MD] SME and Corporate Financing Services](https://no-cache.hubspot.com/cta/default/3893111/3c1160f8-6f1e-4880-9755-3fe0a51322bb.png)
![[OR] [BI] [E3] [CBS] [4] [ITo] SME and Corporate Financing Services](https://no-cache.hubspot.com/cta/default/3893111/5ff72d9f-0058-4cfa-959f-a792526cf5a8.png)
![[OR] [BI] [E3] [CBS] [4] [SuPS] SME and Corporate Financing Services](https://no-cache.hubspot.com/cta/default/3893111/d4ebc6ff-efc6-4b49-9b26-f7e0ac181370.png)
![[OR] [BI] [E3] [CBS] [4] [ST] SME and Corporate Financing Services](https://no-cache.hubspot.com/cta/default/3893111/e10a35b9-a49c-489d-a67a-630b2e5ee77b.png)
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
More Information About OR-5000 [OR-5] or OR-300 [OR-3]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
![[BL-OR] [3-4-5] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)
![[BL-OR] [3] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)
![Email to Sales Team [BCM Institute]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)
