---
title: [OR] [CB] [E3] [CBS] [1] [SbPS] Identify Severe but Plausible Scenarios
description: [OR] [CB] [E3] [CBS] [1] [SbPS] Identify Severe but Plausible Scenarios
image: https://blog.bcm-institute.org/hubfs/eBook%20Generic%20Morepost/OR/OR%20GEN%20E3%20Morepost/%5BOR%5D%20%5BGEN%5D%20%5BE3%5D%20%5BCBS%5D%20%5BSuPS%5D%20Identify%20Severe%20but%20Plausible%20Scenarios.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Operational Resilience Implementation at Clarien Bank: A Strategic Framework
# \[OR\] \[CB\] \[E3\] \[CBS\] \[1\] \[SbPS\] Identify Severe but Plausible Scenarios
[![\[OR\] \[CB\] ](https://no-cache.hubspot.com/cta/default/3893111/c33383cd-a572-4508-b3d7-e10db08ce094.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c33383cd-a572-4508-b3d7-e10db08ce094)
Operational resilience requires financial institutions to anticipate disruptions that could threaten the continuity of their critical business services (CBS).
For CBS-1 Retail Deposit & Account Services at Clarien Bank, identifying severe but plausible scenarios enables the bank to evaluate how extreme yet realistic events could disrupt account services, including deposits, withdrawals, transfers, and customer account management.
These scenarios represent conditions that could arise from technology failures, cyber incidents, third-party outages, operational errors, or regulatory disruptions.
By mapping such scenarios to each Sub-CBS, Clarien Bank can assess potential operational impacts, understand dependencies across people, processes, technology, and third parties, and strengthen preventive controls.
Integrating Cyber and ICT risk considerations ensures that technology-driven disruptions—such as cyberattacks, infrastructure outages, or digital channel failures—are incorporated into resilience planning.
The following table outlines recommended severe yet plausible scenarios, along with potential impacts and proactive risk management measures.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/c9c3fddf-009e-4d50-b91c-b18d1228e9ef)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Jun 2, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![\[OR\] \[CB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/f01cecfa-bf90-40d0-98df-38c4f5cb9706.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f01cecfa-bf90-40d0-98df-38c4f5cb9706)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c9c3fddf-009e-4d50-b91c-b18d1228e9ef)CBS-1 Retail Deposit & Account Services
[![\[OR\] \[CB\] \[E3\] \[CBS\] \[1\] \[SbPS\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/1c28607e-763a-4e89-b1b4-166e973303ff.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1c28607e-763a-4e89-b1b4-166e973303ff)
Operational resilience requires financial institutions to anticipate disruptions that could threaten the continuity of their critical business services (CBS).
For CBS-1 Retail Deposit & Account Services at Clarien Bank, identifying severe but plausible scenarios enables the bank to evaluate how extreme yet realistic events could disrupt account services, including deposits, withdrawals, transfers, and customer account management.
These scenarios represent conditions that could arise from technology failures, cyber incidents, third-party outages, operational errors, or regulatory disruptions.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/b82f4b68-92a3-4741-a22a-c2df4a0479f2)By mapping such scenarios to each Sub-CBS, Clarien Bank can assess potential operational impacts, understand dependencies across people, processes, technology, and third parties, and strengthen preventive controls.
Integrating Cyber and ICT risk considerations ensures that technology-driven disruptions—such as cyberattacks, infrastructure outages, or digital channel failures—are incorporated into resilience planning.
The following table outlines recommended severe yet plausible scenarios, along with potential impacts and proactive risk management measures.
[![Banner \[Table\] \[OR\] \[E3\] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/f4f3c007-e864-48cd-8bc1-0242c8b7fd86.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f4f3c007-e864-48cd-8bc1-0242c8b7fd86)
Table P5: Identify Severe but Plausible Scenarios for CBS-1
| Sub-CBS Code | Sub-CBS | Severe but Plausible Scenario | Impact / Effect | Proactive Risk Management Action | Link to Integration of Cyber and ICT Risks |
| --- | --- | --- | --- | --- | --- |
| 1.1 | Customer Onboarding & Account Opening | Digital onboarding platform outage due to cloud service disruption | Customers unable to open new accounts; onboarding backlog | Implement alternate manual onboarding procedures and DR failover for onboarding systems | ICT infrastructure resilience, cloud provider outage management |
| 1.2 | Customer Identity Verification & Compliance Screening | Failure of the KYC/AML screening system due to vendor system outage | Delayed customer verification; regulatory compliance risk | Maintain secondary compliance screening provider and manual verification process | Third-party cyber resilience and vendor system security |
| 1.3 | Account Setup & Product Configuration | Core banking configuration error during system upgrade | Incorrect account setup or delayed activation | Pre-deployment testing, configuration control and rollback procedures | Change management and application security controls |
| 1.4 | Deposit Processing (Cash, Cheque, Electronic) | Cheque clearing network disruption or payment network outage | Deposits not processed or delayed; liquidity concerns for customers | Alternative clearing arrangements and transaction queuing mechanisms | Payment network cybersecurity and ICT infrastructure monitoring |
| 1.5 | Withdrawal & Funds Access | ATM network outage due to a cyberattack or telecom failure | Customers unable to withdraw funds; reputational impact | ATM network redundancy and cash withdrawal fallback through branch channels | ATM cybersecurity monitoring and telecom resilience |
| 1.6 | Internal & External Account Transfers | Payment gateway or SWIFT connectivity disruption | Delayed or failed transfers; customer complaints | Implement alternate payment routing and transaction retry logic | Secure network connectivity and payment messaging protection |
| 1.7 | Digital Banking Access Management | Authentication platform compromised by credential-stuffing attack | Customers locked out or fraudulent access attempts | Deploy multi-factor authentication, anomaly detection, and account lockout controls | Identity and access management cybersecurity integration |
| 1.8 | Payment & Bill Payment Processing | Bill payment aggregator outage due to a cyber incident | Customers are unable to pay bills; payment deadlines are missed | Establish multiple payment aggregators and backup payment channels | Third-party ICT resilience and API security monitoring |
| 1.9 | Debit Card Issuance & Transaction Processing | Card processor service disruption affecting POS transactions | Customers are unable to complete card payments | Maintain alternate card processing capability and transaction authorisation fallback | Card network cybersecurity and transaction monitoring |
| 1.10 | Account Monitoring & Fraud Detection | Fraud monitoring system failure during a high-volume transaction period | Increased fraud exposure and delayed detection | Deploy redundant fraud monitoring engines and real-time alert escalation | Security analytics and cyber threat monitoring integration |
| 1.11 | Transaction Posting & Account Ledger Update | Core banking database corruption after system crash | Incorrect balances or delayed transaction posting | Automated data integrity checks and database recovery procedures | Data integrity protection and database security controls |
| 1.12 | Customer Notification & Statement Generation | The messaging platform outage is preventing alerts and statements | Customers are unaware of transactions; reduced transparency | Implement secondary messaging platform and batch notification fallback | ICT communication platform resilience |
| 1.13 | Exception Handling & Dispute Management | The case management system is unavailable due to a ransomware attack | Delayed investigation of disputes; customer dissatisfaction | Maintain offline case tracking procedures and secure backup systems | Cyber incident response and ransomware recovery |
| 1.14 | Reconciliation & Financial Control | Settlement reconciliation system failure during end-of-day processing | Financial reporting discrepancies; operational delays | Implement automated reconciliation validation and manual reconciliation capability | Financial system security and operational monitoring |
| 1.15 | Regulatory Reporting & Compliance Monitoring | Regulatory reporting platform compromised, or data unavailable | Missed regulatory submission deadlines | Maintain secure regulatory reporting backup systems and contingency reporting procedures | Data protection and regulatory system cybersecurity |
| 1.16 | Business Continuity & Account Services Recovery | Data centre outage due to a natural disaster or a major cyber incident | Retail deposit services unavailable for an extended period | Activate DR site, failover core banking, and execute continuity recovery plans | DR infrastructure resilience and cyber-incident recovery integration |
[![Banner \[Summing\] \[OR\] \[E3\] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/446ccb83-e056-40d0-aae5-834d73c13f43.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/446ccb83-e056-40d0-aae5-834d73c13f43)
Identifying Severe but Plausible Scenarios for CBS-1: Core Deposit & Account Services enables Clarien Bank to rigorously test its resilience posture against high-impact, realistic disruptions.
These scenarios ensure that the bank moves beyond theoretical risk assessment to practical stress-testing of operational capabilities.
By integrating cybersecurity, ICT resilience, third-party risk management, and governance controls into scenario planning, CB strengthens its ability to anticipate, withstand, and recover from operational shocks.
This structured identification of SbP scenarios supports regulatory compliance, safeguards customer interests, and reinforces confidence in the bank’s core deposit and payment services—ensuring sustainable operational resilience in an increasingly digital and interconnected banking environment.
[![3/4 \[OR\] \[Thin Banner\] \[CB\] Title Banner](https://no-cache.hubspot.com/cta/default/3893111/66a8fd88-7df1-4b59-81da-55a073bc382c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/66a8fd88-7df1-4b59-81da-55a073bc382c)
| **eBook 3: Starting Your OR Implementation** | | | | | |
| --- | --- | --- | --- | --- | --- |
| **CBS-1 CBS-1 Retail Deposit & Account Services** | | | | | |
| **CBS-1 DP** | **CBS-1 MD** | **CBS-1 MPR** | **CBS-1 ITo** | **CBS-1 SbPS** | **CBS-1 ST** |
| [![\[OR\] \[CB\] \[E3\] \[CBS\] \[1\] \[DP\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/12da1f7b-13f5-4a11-9612-2a33b2558131.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/12da1f7b-13f5-4a11-9612-2a33b2558131) | [![\[OR\] \[CB\] \[E3\] \[CBS\] \[1\] \[MD\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/f053448b-1b54-40d2-bdaf-9dfedf37efcf.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f053448b-1b54-40d2-bdaf-9dfedf37efcf) | [![\[OR\] \[CB\] \[E3\] \[CBS\] \[1\] \[MPR\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/a7f3eed0-21d2-4c75-a2c1-66550cf8a858.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a7f3eed0-21d2-4c75-a2c1-66550cf8a858) | [![\[OR\] \[CB\] \[E3\] \[CBS\] \[1\] \[DP\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/87c14388-9f5d-4bb8-885d-28e01472997f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/87c14388-9f5d-4bb8-885d-28e01472997f) | [![\[OR\] \[CB\] \[E3\] \[CBS\] \[1\] \[SbPS\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/1c28607e-763a-4e89-b1b4-166e973303ff.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1c28607e-763a-4e89-b1b4-166e973303ff) | [![\[OR\] \[CB\] \[E3\] \[CBS\] \[1\] \[ST\] Retail Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/3cd5c8c5-8a03-478b-b88d-00f7e8944d13.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3cd5c8c5-8a03-478b-b88d-00f7e8944d13) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-06-03T03:25:30.573Z",
"datePublished" : "2026-06-02T07:41:21.000Z",
"headline" : "[OR] [CB] [E3] [CBS] [1] [SbPS] Identify Severe but Plausible Scenarios",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-cb-e3-cbs-1-sbps-identify-severe-but-plausible-scenarios",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```