[OR] [CB] [E3] [CBS] [1] [ITo] Establish Impact Tolerances

Written by Moh Heng Goh | Jun 2, 2026 7:35:30 AM

CBS-1 Retail Deposit & Account Services

Operational resilience requires financial institutions to define the maximum level of disruption that can be tolerated before customers, the financial system, or the organisation itself experiences unacceptable harm.

In this chapter, impact tolerances are established for the critical business service CBS-1 Retail Deposit & Account Services at Clarien Bank.

These tolerances represent the bank’s predefined thresholds for disruption, including maximum tolerable downtime (MTD) and maximum tolerable data loss (MTDL) across the key processes that support retail deposit accounts and everyday banking activities.

By defining tolerances for each Sub-CBS process, the bank can better understand the severity of potential disruptions, prioritise recovery activities, and ensure alignment with regulatory expectations for operational resilience.

This approach enables the organisation to determine whether existing operational capabilities—including technology platforms, operational procedures, third-party services, and contingency arrangements—are sufficient to maintain essential banking services during severe but plausible disruptions.

Table P4: Establish Impact Tolerance for CBS-1

Sub-CBS Code	Sub-CBS	Maximum Tolerable Downtime (MTD)	Maximum Tolerable Data Loss (MTDL)	Customer Impact	Regulatory Impact	Impact Type	Current Resilience Status	Action Required
1.1	Customer Onboarding & Account Opening	24 hours	4 hours	Delayed account opening and customer onboarding	Moderate AML/KYC compliance delay	Operational / Compliance	Adequate with manual fallback	Improve digital onboarding redundancy
1.2	Customer Identity Verification & Compliance Screening	12 hours	Near-zero	Delayed compliance screening may halt onboarding	High AML/KYC regulatory exposure	Compliance / Financial Crime	Strong automated screening	Strengthen vendor resilience
1.3	Account Setup & Product Configuration	8 hours	1 hour	Delay in activation of newly opened accounts	Moderate regulatory oversight risk	Operational	Core banking redundancy in place	Improve configuration automation
1.4	Deposit Processing (Cash, Cheque, Electronic)	4 hours	Near-zero	Customers are unable to deposit funds promptly	High operational and financial risk	Financial / Operational	High resilience payment infrastructure	Enhance cheque clearing contingency
1.5	Withdrawal & Funds Access	2 hours	Near-zero	Customers are unable to access their funds	Severe customer trust and liquidity risk	Financial / Customer	Strong ATM & digital channel resilience	Expand channel redundancy
1.6	Internal & External Account Transfers	2 hours	Near-zero	Payment delays between accounts	High regulatory scrutiny if prolonged	Financial / Systemic	Real-time processing supported	Improve payment network failover
1.7	Digital Banking Access Management	4 hours	Near-zero	Customers are unable to log into online banking	Moderate service disruption	Customer / Technology	MFA and identity systems resilient	Implement additional IAM redundancy
1.8	Payment & Bill Payment Processing	4 hours	Near-zero	Bill payments are delayed or missed	Potential regulatory complaints	Financial / Customer	Payment gateway resilience adequate	Add alternate payment routing
1.9	Debit Card Issuance & Transaction Processing	2 hours (transactions) / 24 hours (issuance)	Near-zero	Card transactions may fail	Payment network obligations affected	Financial / Operational	Card processor redundancy	Test card network failover
1.10	Account Monitoring & Fraud Detection	1 hour	Near-zero	Fraud may go undetected temporarily	Severe regulatory and financial exposure	Financial Crime / Compliance	Real-time fraud monitoring	Improve analytics redundancy
1.11	Transaction Posting & Account Ledger Update	1 hour	Near-zero	Incorrect balances or delayed updates	High financial reporting impact	Financial / Accounting	Core banking replication active	Strengthen data replication monitoring
1.12	Customer Notification & Statement Generation	24 hours	8 hours	Delay in alerts or statements	Low to moderate compliance exposure	Customer / Compliance	Notification systems available	Improve multi-channel messaging resilience
1.13	Exception Handling & Dispute Management	48 hours	12 hours	Customer complaints unresolved	Consumer protection risk	Customer / Regulatory	Case management system available	Enhance dispute automation
1.14	Reconciliation & Financial Control	24 hours	4 hours	Internal financial discrepancies	Financial reporting and audit impact	Financial / Regulatory	Daily reconciliation processes	Implement automated reconciliation
1.15	Regulatory Reporting & Compliance Monitoring	24 hours	4 hours	No direct customer impact initially	Significant regulatory penalties if delayed	Compliance / Regulatory	Regulatory reporting platform in place	Enhance data aggregation resilience
1.16	Business Continuity & Account Services Recovery	Immediate activation (≤1 hour)	Near-zero	Extended outages across deposit services	Major regulatory breach if recovery fails	Enterprise / Operational	DR site and BCM framework implemented	Conduct frequent resilience scenario testing

Establishing impact tolerances for CBS-1 Retail Deposit & Account Services enables Clarien Bank to clearly define the acceptable limits of disruption for its core retail banking operations.

By determining thresholds such as maximum tolerable downtime and allowable data loss for each process, the bank gains a structured understanding of where resilience capabilities must be strongest—particularly in areas directly affecting customer access to funds, payment processing, and financial crime monitoring.

The defined tolerances also provide a measurable benchmark for scenario testing, resilience investments, and continuous improvement.

Where gaps exist between the established tolerance and current operational capability, targeted remediation actions—such as improving system redundancy, strengthening third-party resilience, or enhancing monitoring and automation—must be implemented.

Through this disciplined approach, Clarien Bank strengthens its ability to maintain critical retail banking services even during severe disruptions, thereby protecting customers, maintaining regulatory compliance, and preserving financial stability.

eBook 3: Starting Your OR Implementation
CBS-1 CBS-1 Retail Deposit & Account Services
CBS-1 DP	CBS-1 MD	CBS-1 MPR	CBS-1 ITo	CBS-1 SbPS	CBS-1 ST

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.



	If you have any questions, click to contact us.

View full post