. .

Operational Resilience in Practice: The China Bank Approach
OR BB FI MY Gen-2

[OR] [CBC] [E2] [P1 to P3] [C1] OR Planning Methodology

x [OR] [CBC] Title BannerNew call-to-action As one of the oldest and most established financial institutions in the Philippines, China Banking Corporation (China Bank) operates within a highly interconnected, technology-driven, and regulator-intensive environment.

With increasing exposure to cyber threats, third-party dependencies, digital banking disruptions, and systemic risks, the need for a structured and comprehensive Operational Resilience (OR) framework has become imperative.

To address these evolving challenges, China Bank adopts a three-phased Operational Resilience Planning MethodologyPlan, Implement, and Sustain—designed to ensure the bank can prevent, respond to, recover from, and adapt to disruptions while continuing to deliver its critical business services.

This methodology aligns with regulatory expectations such as the BSP Circular No. 1203, which emphasises resilience over traditional recovery by focusing on service continuity under severe but plausible scenarios.

Each phase builds upon the previous one, forming a continuous lifecycle of resilience enhancement.

The Plan phase establishes the strategic foundation, the Implement phase operationalises resilience capabilities across critical services, and the Sustain phase ensures long-term embedding through governance, culture, and continuous improvement.

New call-to-action

Moh Heng Goh
Operational Resilience Certified Planner-Specialist-Expert

x [OR] [CBC] Legal Disclaimer Banner

New call-to-action

Operational Resilience Planning Methodology for BDO Unibank

Introduction

[OR] [BDO] [PH] [E2] [P1 to P3] [C1] OR Planning Methodology
eBook Cover [OR] [BDO] [PH] [E2] [2D]

As one of the oldest and most established financial institutions in the Philippines, China Banking Corporation (China Bank) operates within a highly interconnected, technology-driven, and regulator-intensive environment.

With increasing exposure to cyber threats, third-party dependencies, digital banking disruptions, and systemic risks, the need for a structured and comprehensive Operational Resilience (OR) framework has become imperative.

To address these evolving challenges, China Bank adopts a three-phased Operational ResilienceNew call-to-action  Planning MethodologyPlan, Implement, and Sustain—designed to ensure the bank can prevent, respond to, recover from, and adapt to disruptions while continuing to deliver its critical business services. This methodology aligns with regulatory expectations such as the BSP Circular No. 1203, which emphasises resilience over traditional recovery by focusing on service continuity under severe but plausible scenarios.

Each phase builds upon the previous one, forming a continuous lifecycle of resilience enhancement. The Plan phase establishes the strategic foundation, the Implement phase operationalises resilience capabilities across critical services, and the Sustain phase ensures long-term embedding through governance, culture, and continuous improvement.

Purpose of the Chapter

The purpose of this chapter is to provide a structured overview of China Bank’s Operational Resilience Planning Methodology, enabling readers to clearly understand how the organisation systematically builds, implements, and sustains resilience across its operations.

Specifically, this chapter aims to:

  • Explain the three phases of the Operational Resilience lifecycle and how they interrelate
  • Clarify the objectives and outcomes of each stage within the phases
  • Provide a practical framework that can be replicated or adapted by financial institutions pursuing compliance with regulatory requirements such as BSP Circular No. 1203
  • Prepare the reader for deeper exploration of each phase in subsequent chapters

By the end of this chapter, the reader is expected to gain a clear conceptual roadmap of how operational resilience is designed, executed, and continuously enhanced within China Bank.

 

 

Overview of the Three Phases of Operational Resilience Planning Methodology

The Operational Resilience Planning Methodology is structured into three key phases:

 


New call-to-action

Phase 1: Plan – Establishing the Foundations

Stages in Phase 1

 

Stage

Description

Assess Capability and Maturity

Evaluate China Bank’s existing business continuity, risk management, IT resilience, and crisis management capabilities against recognised frameworks and regulatory expectations.

Analyse Gap

Identify gaps between current capabilities and target resilience objectives, particularly in relation to critical business services and regulatory compliance.

Develop Strategy and Roadmap

Define a structured roadmap outlining initiatives, priorities, timelines, and resource requirements to enhance resilience capabilities.

Confirm Risk Appetite

Establish the bank’s tolerance for disruption, including acceptable levels of operational, financial, and reputational impact.

Develop and Embed Governance

Create governance structures, roles, and accountability mechanisms to oversee operational resilience implementation and decision-making.

 New call-to-action 

Outcome of Phase 1 
 

This phase delivers a clear strategic blueprint for operational resilience, ensuring alignment
  between business objectives, regulatory expectations, and risk tolerance.


 


 

Implement Phase Management Report

Phase 2: Implement – Translating Strategy into Action

New call-to-action

The Implement phase translates strategy into action by focusing on the identification, analysis, and strengthening of critical business services (CBS).

Stages in Phase 2

Stage

Description

Identify Critical Business Services

Determine the services that, if disrupted, would have significant impact on customers, financial stability, or regulatory obligations.

Map Processes and Resources

Identify and map the people, processes, technology, facilities, and third parties that support each critical business service.

Set Impact Tolerance

Define maximum tolerable levels of disruption (e.g., downtime, data loss, customer impact) for each critical service.

Conduct Scenario Testing

Test resilience capabilities against severe but plausible scenarios such as cyberattacks, system failures, or third-party disruptions.

Improve Lesson Learnt

Analyse test outcomes and real incidents to identify weaknesses and implement corrective actions.


Outcome of Phase 2

This phase ensures that China Bank develops operationally resilient capabilities, supported by tested processes, defined tolerances, and a deep understanding of service dependencies.


New call-to-action

Phase 3: Sustain – Embedding and Continuously Improving Resilience

New call-to-action

The Sustain phase ensures that operational resilience becomes an integral part of China Bank’s culture, governance, and continuous improvement processes.

Stages in Phase 3

 

Stage

Description

Introduce Cultural Change

Foster a resilience-first mindset across all levels of the organisation, from leadership to operational staff.

Develop Communication Strategy

Establish clear communication protocols for both normal operations and crisis situations, including internal and external stakeholders.

Implement Training and Awareness

Conduct regular training, simulations, and awareness programmes to ensure staff readiness.

Provide Self-assessment

Enable business units to regularly assess their resilience capabilities and compliance with established standards.

Conduct Independent Quality Review

Perform independent audits or reviews to validate the effectiveness of the operational resilience framework.


Outcome of Phase 3

This phase ensures long-term sustainability, with resilience continuously monitored, improved, and embedded into the organisation’s DNA.

x [Banner] [Summing] [OR] [E2] [C1] Overview of Operational Resilience Planning Methodology

China Bank’s three-phased Operational Resilience Planning Methodology represents a holistic and iterative approach to managing disruption in an increasingly complex banking environment. By systematically progressing from planning to implementation and ultimately to sustainability, the bank ensures that resilience is not a one-time initiative but an ongoing strategic capability.

This structured methodology not only supports compliance with regulatory frameworks such as BSP Circular No. 1203 but also strengthens China Bank’s ability to protect customers, maintain trust, and ensure financial stability, even in the face of severe disruptions.

BL-OR-3-5 Blog Under Construction

Blogs marked [x] are under construction.x [OR] [BDO] Title Banner

ebook 2: Implementing Operational Resilience for BDO      
C1 C2 [x] C8 [x]  C14 [x]      
 [OR] [BDO] [PH] [E2] [P1 to P3] [C1] OR Planning Methodology  [OR] [GEN] [P1] [S1-S5] [C2] Five Stages of the _Plan_ Phase [OR] [GEN] [P2] [S1-S5] [C8] Five Stages of the _Implement_ Phase [OR] [GEN] [E2] [P3] [C14] The Five Stages of the Sustain Phase      
  ebook 2: Implementing Operational Resilience for BDO
   BSP OR Policy eBook 1 eBook 2 eBook 3   C20 [x] C21 [x] 
   [OR][BSP Guidelines] Key Implementation and Components  New call-to-action eBook Cover [OR] [BDO] [PH] [E2] [2D] eBook Cover [OR] [BDO] [PH] [E3] [2D] [OR] [GEN] [E2] [C20] Conclusion for eBook 2 [OR] [GEN] [E2] [C21] [Back Cover] for eBook 2
  "Plan" Phase of the Operational Resilience Planning Methodology
  C2 [x] C3 [x] C4 [x] C5 [x] C6 [x] C7 [x]
New call-to-action [OR] [GEN] [P1] [S1-S5] [C2] Five Stages of the _Plan_ Phase [OR] [GEN] [E2] [P1] [S1] [C3] Assessing Capability and Maturity [OR] [GEN] [E2] [P1] [S2] [C4] Analysing Gaps [OR] [GEN] [E2] [P1] [S3] [C5] Developing Strategy and Roadmap [OR] [GEN] [E2] [P1] [S4] [C6] Confirming Risk Appetite [OR] [GEN] [E2] [P1] [S5] [C7] Developing and Embedding Governance
  "Implement" Phase of the Operational Resilience Planning Methodology
  C8 [x] C9 [x] C10 [x] C11 [x] C12 [x] C13 [x]
  [OR] [GEN] [P2] [S1-S5] [C8] Five Stages of the _Implement_ Phase [OR] [GEN] [E2] [P2] [S1] [C9] Identifying Critical Business Services [OR] [GEN] [E2] [P2] [S2] [C10] Mapping of Processes and Resources [OR] [GEN] [E2] [P2] [S3] [C11] Establishing Impact Tolerance [OR] [GEN] [E2] [P2] [S4] [C12] Performing Scenario Testing [OR] [GEN] [E2] [P2] [S5] [C13] Improving Lessons Learned
  "Sustain" Phase of the Operational Resilience Planning Methodology
  C14 [x] C15 [x] C16 [x] C17 [x] C18 [x] C19 [x]
  [OR] [GEN] [E2] [P3] [C14] The Five Stages of the Sustain Phase [OR] [GEN] [E2] [P3] [S1] [C15] Introducing Cultural Change Management [OR] [GEN] [E2] [P3] [S2] [C16] Developing a Communication Strategy [OR] [GEN] [E2] [P3] [S3] C17] Implementing Training and Awareness [OR] [GEN] [E2] [P3] [S4] [C18] Providing Self-Assessment [OR] [GEN] [E2] [P3] [S5] [C19] Conducting Independent Quality Reviews
  

New call-to-actionFor organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

BL-OR-3 Register Now BL-OR-3_Tell Me More BL-OR-3_View Schedule
BL-OR-5_Register Now BL-OR-5_Tell Me More  [BL-OR] [3-4-5] View Schedule
[BL-OR] [3] FAQ OR-300

If you have any questions, click to contact us.Email to Sales Team [BCM Institute]

FAQ BL-OR-5 OR-5000
OR Implementer Landing Page

New call-to-action

New call-to-action

 

Comments:

 

CTA Banner_OR

CTA Banner_ORA

CTA Banner_BCM

CTA Banner_ITDR

CTA Banner_CM