![[OR] [CCB] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/6b0c36e9-6fb9-4705-a42a-089010976426.png)
CBS-1 Core Deposit & Account Services
Introduction
![[OR] [CCB] [E3] [CBS] [1] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/33402972-1850-4473-8b4e-941bff695fb6.png)
CBS-1 Core Deposit & Account Services form a foundational critical business service of China Construction Bank (Malaysia) Berhad, enabling customers to open accounts, maintain deposits, execute transactions, and access funds securely.
In accordance with operational resilience principles, mapping processes and resources provides end-to-end visibility of how this service is delivered, including the people, technology, facilities, and third parties required to sustain operations within defined impact tolerances.
This mapping supports:
- Identification of single points of failure
- Assessment of concentration risks
- Scenario testing (e.g., system outage, third-party failure, cyberattack, liquidity stress)
- Recovery planning and business continuity alignment
- Regulatory compliance with Bank Negara Malaysia (BNM) expectations
The table below maps each Sub-CBS to its supporting processes and resources.
![Banner [Table] [OR] [E3] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/5af5497a-aa7f-41e4-b5ed-c9da8601d4ef.png)
Table P3: Detailed Processes for CBS-1
|
Sub-CBF Code |
Sub-CBS |
Processes |
People |
Technology (Applications & Infrastructure) |
Third-Party Vendors |
Upstream / Downstream Dependencies |
|
1.1 |
Account Opening & Onboarding |
Customer identification (KYC/CDD/EDD); Sanctions screening; Risk profiling; Account approval workflow; Data capture & validation |
Relationship Managers; Branch Officers; Compliance Officers; AML Analysts; Operations Support |
Core Banking System (CBS); eKYC platform; AML/Sanctions Screening System; Document Management System; CRM; Identity & Access Management (IAM); Branch network infrastructure |
Credit Bureau (CTOS/CCRIS); Sanctions list providers; National ID verification vendors; IT system vendors |
Upstream: Customer application; Regulatory requirements; Identity verification databases. Downstream: Account creation in CBS; Deposit transaction processing (1.3); Payment services (1.6) |
|
1.2 |
Deposit Maintenance & Account Administration |
Customer data updates; Mandate/signatory changes; Limit setting; Account status management; Dual-control authorization |
Branch Operations Staff; Customer Service; Back Office Operations; Compliance Review Team |
CBS customer master module; CRM; IAM; Data center servers; Backup systems; Network infrastructure |
Regulatory reporting service providers; IT infrastructure vendors |
Upstream: Account onboarding (1.1). Downstream: Transaction processing (1.3); Statement generation (1.5); Regulatory reporting |
|
1.3 |
Deposit Transactions Processing |
Cash deposit/withdrawal; Internal fund transfers; Clearing & settlement; Reconciliation; Cut-off management |
Tellers; Operations Processing Team; Treasury Back Office; Reconciliation Team |
Core Banking Transaction Engine; Payment Gateway; ATM/CDM switch; Online & Mobile Banking platforms; Batch processing engine; Data center; DR site |
PayNet (DuitNow); RENTAS (BNM); ATM network operators; Card scheme providers |
Upstream: Account maintenance (1.2); Liquidity availability (Treasury). Downstream: GL posting (1.4); Statement services (1.5); Payment execution (1.6) |
|
1.4 |
Interest & Charges Calculation & Posting |
Interest rate configuration; Fee assessment; End-of-Day (EOD) batch processing; GL reconciliation; Financial reporting |
Finance Department; Product Management; System Support Team; Internal Audit |
Interest calculation module in CBS; Batch processing engine; General Ledger system; Financial reporting system; Data storage & backup infrastructure |
External auditors; Financial reporting software vendors |
Upstream: Deposit balances (1.3); Product configuration. Downstream: Financial reporting; Customer statements (1.5); Regulatory submissions |
|
1.5 |
Account Inquiry & Statement Services |
Balance inquiry; Transaction history retrieval; Statement generation; Secure data distribution; PDPA compliance controls |
Contact Centre Officers; Branch CSOs; IT Support; Data Protection Officer |
Online Banking; Mobile Banking App; CRM; Statement generation system; Secure email/SMS gateway; Print servers; Cybersecurity tools |
SMS/Email gateway providers; Printing & mail vendors; Cloud hosting providers (if applicable) |
Upstream: Transaction records (1.3); Interest posting (1.4). Downstream: Customer notification; Complaint handling; Regulatory audit requests |
|
1.6 |
Transfer & Payment Execution |
Payment initiation; Authorization workflow; Fraud monitoring; Transaction screening; SWIFT/RENTAS processing; Settlement reconciliation |
Payment Operations Team; Treasury; Fraud Monitoring Team; Compliance; IT Support |
Payment Hub; SWIFT interface; RENTAS interface; Fraud Monitoring System; AML screening engine; Network connectivity; Encryption infrastructure |
SWIFT Network; PayNet (DuitNow); Correspondent banks; Cybersecurity vendors |
Upstream: Account balance validation (1.3); AML screening (1.1). Downstream: External settlement networks; Customer notification; Liquidity management |
|
1.7 |
Foreign Currency Deposit Services |
FX rate setting; Multi-currency account management; Daily revaluation; FX settlement; Regulatory reporting |
Treasury Desk; FX Operations Team; Finance; Risk Management |
Treasury Management System (TMS); Core Banking FX module; Real-time FX rate feed; SWIFT interface; Data center & DR infrastructure |
FX rate providers (Reuters/Bloomberg), Correspondent banks, SWIFT, Custodian banks |
Upstream: Global FX market data; Liquidity lines. Downstream: Payment execution (1.6); Financial reporting (1.4); Regulatory compliance |
|
1.8 |
Account Closure & Dormancy Management |
Dormancy monitoring; Customer notification; AML re-screening; Account closure approval; Unclaimed monies transfer; Record retention |
Branch Operations; Compliance Team; Legal; Finance; Records Management |
CBS dormancy module; Regulatory reporting system; Document archival system; Backup storage; Secure destruction controls |
Registrar of Unclaimed Monies (Malaysia); Regulatory portals; Archival storage vendors |
Upstream: Account inactivity data (1.3). Downstream: Regulatory reporting; Financial reconciliation; Customer reactivation processes |
![Banner [Summing] [OR] [E3] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/61e5330e-051c-4874-b6da-a1be8393c283.png)
The mapping of processes and resources for CBS-1 Core Deposit & Account Services demonstrates that the service relies on a complex ecosystem of operational processes, skilled personnel, critical banking applications, infrastructure resilience, and interconnected third-party networks. The Core Banking System, payment interfaces (RENTAS, SWIFT, DuitNow), FX data feeds, and regulatory reporting platforms represent high-criticality technology dependencies. Likewise, compliance, treasury, operations, and fraud monitoring teams form essential human control layers supporting service integrity.
By mapping these elements end-to-end, China Construction Bank (Malaysia) Berhad can:
- Identify potential single points of failure
- Evaluate concentration risks (e.g., reliance on payment networks or FX data providers)
- Design scenario testing (cyberattack, system outage, third-party disruption, liquidity shock)
- Establish realistic impact tolerances
- Strengthen recovery time objectives (RTO) and service restoration strategies
- KYC provider failure
- Fraud system malfunction
- Data breach incident
Facilitating Impact Tolerance Validation
Assesses:
-
- Maximum tolerable downtime for login access
- Acceptable delay in onboarding
- Maximum disruption to fraud detection
Enabling Remediation Planning
Supports decisions on:
-
- Redundancy improvements
- Vendor diversification
- Backup authentication methods
- Enhanced monitoring controls
![[OR] [CCB] [E3] [CBS] [1] [DP] Core Deposit & Account Services](https://no-cache.hubspot.com/cta/default/3893111/70b3123a-bbfb-4846-abc4-03afd7ed6295.png)
![[OR] [CCB] [E3] [CBS] [1] [MD] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/7783bc34-2caf-41dd-8a79-f49495b3fa7c.png)
![[OR] [CCB] [E3] [CBS] [1] [ITo] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/031102ef-eb14-442d-822e-f4779c89cd15.png)
![[OR] [CCB] [E3] [CBS] [1] [SuPS] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/b42bebcb-9b67-4235-a6be-d107512cf0de.png)
![[OR] [CCB] [E3] [CBS] [1] [ST] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/7ce11b80-4ff1-48c5-8b98-d245d2b2558f.png)
![eBook Cover [OR] [CCB] [E2] [2D]](https://no-cache.hubspot.com/cta/default/3893111/9b21eac0-621d-41c1-a95b-81665c719a89.png)
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
More Information About OR-5000 [OR-5] or OR-300 [OR-3]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
![[BL-OR] [3-4-5] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)
![[BL-OR] [3] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)
![Email to Sales Team [BCM Institute]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)
