[OR] [CCB] [E3] [CBS] [2] [MD] Map Dependency

Written by Moh Heng Goh | Mar 12, 2026 4:11:40 AM

CBS-2 Payments & Funds Transfer Services

Introduction

Operational resilience requires financial institutions to clearly understand how their critical business services (CBS) are supported by interconnected people, processes, technology, and third parties.

For CBS-2 Payments & Funds Transfer Services, dependency mapping provides visibility over the operational backbone that enables seamless domestic and cross-border fund movements.

By applying the principles outlined in the BCM Institute’s guidance on mapping interconnections and interdependencies, China Construction Bank (Malaysia) Berhad (CCB Malaysia) can identify concentration risks, single points of failure, upstream/downstream dependencies, and systemic vulnerabilities across its payment ecosystem.

This chapter maps the detailed dependencies of CBS-2, covering account transfers, real-time payments, remittances, corporate e-banking interfaces, and QR-enabled digital channels. The mapping highlights how internal operational units, core banking systems, payment gateways, regulatory interfaces, and external infrastructures integrate to deliver resilient payment services aligned with regulatory expectations.

Table P2: Detailed Processes for CBS-2

Sub-CBS Code	Sub-CBS	Dependency Type	Dependency Detail (What/Who is involved)	Connectivity (How it connects/interacts)
2.1	Account-to-Account Transfers	People	Retail Operations Team, Branch Operations Staff, Treasury Operations	Initiates, verifies, authorises, and monitors transfers within customer accounts
		Process	Funds transfer validation, AML screening, transaction posting, and reconciliation	Links customer instruction → AML screening → Core Banking posting → GL update
		Technology	Core Banking System (CBS), AML system, Payment engine, SWIFT gateway	CBS processes debit/credit entries; AML screens transactions; SWIFT handles interbank messages
		Third Party	SWIFT, Domestic clearing houses	Enables interbank settlement and message exchange
2.2	Real-Time & Instructional Payments	People	Digital Banking Team, IT Operations, Payment Operations	Oversees real-time monitoring and exception handling
		Process	Real-time payment validation, liquidity checks, and fraud monitoring	Integrates fraud engine → liquidity management → instant settlement
		Technology	Real-Time Payment Switch, Fraud Detection System, Core Banking	Connects customer digital channels to the national instant payment infrastructure
		Third Party	PayNet	Provides DuitNow/Instant Transfer infrastructure connectivity
2.3	Bill Payment & Provider Settlement	People	Corporate Banking Ops, Finance & Settlement Team	Manages settlement with billers and service providers
		Process	Bill aggregation, file validation, and settlement batching	Receives biller files → validates → posts to CBS → settlement via clearing
		Technology	Bill Payment Gateway, API Middleware, Core Banking	API connects billers to bank systems; CBS executes settlement
		Third Party	Utility Providers, Telcos, Government agencies	Receive settlement funds and remittance advice
2.4	Cross-Border Remittances	People	Remittance Operations, Compliance & Sanctions Team, Treasury	Oversees FX conversion, sanctions checks, and correspondent coordination
		Process	FX pricing, Sanctions screening, Nostro reconciliation	Transaction passes FX engine → sanctions filter → SWIFT transmission
		Technology	SWIFT Alliance, FX Trading Platform, Core Banking	Enables cross-border messaging, FX conversion, and settlement
		Third Party	Correspondent Banks, SWIFT	Facilitates overseas clearing and settlement
2.5	Batch & Bulk Payments	People	Corporate Operations Team, File Processing Unit	Validates payroll/bulk files before execution
		Process	File upload validation, limit checking, batch settlement	Corporate file → validation engine → CBS batch posting
		Technology	Corporate e-Banking Portal, Batch Processing Engine, Database servers	Portal receives files; engine processes high-volume transactions
		Third Party	Corporate Clients (Payroll processors), Clearing Houses	External payroll systems integrate via secure upload/API
2.6	Corporate e-Banking Payments Interface	People	Relationship Managers, IT Application Support, Cybersecurity Team	Ensures client onboarding, system uptime, and cyber monitoring
		Process	User authentication, transaction approval workflow, and audit logging	Multi-level approval flows integrated with core banking
		Technology	Corporate Internet Banking Platform, IAM system, Firewall, API Gateway	Secures and routes transactions from corporate clients to CBS
		Third Party	Cloud hosting providers (if applicable), Cybersecurity vendors	Provide infrastructure resilience and threat detection
2.7	QR Payment & Digital Channels	People	Digital Product Team, Mobile App Support, Fraud Monitoring Team	Monitors QR transactions and fraud alerts
		Process	QR generation, payment routing, and merchant settlement	QR scan → payment switch → merchant settlement
		Technology	Mobile Banking App, QR Payment Engine, API Gateway	Connects mobile users to an instant payment infrastructure
		Third Party	PayNet, Merchants	Facilitates DuitNow QR and merchant fund settlement

Key Interconnection Themes Across CBS-2

Core Banking System as Central Node
All sub-CBS components ultimately depend on the Core Banking System for posting, ledger updates, and balance integrity — representing a critical concentration risk.

National Payment Infrastructure Dependency
Real-time and QR services rely heavily on Malaysia’s national payment rails (PayNet), creating external systemic interdependencies.

Cross-Border Messaging Concentration
SWIFT dependency introduces geopolitical, cyber, and network availability risks affecting remittance services.

Cyber & ICT Risk Integration
Digital interfaces (corporate e-banking and QR channels) increase exposure to:

Cyber attacks
API vulnerabilities
Identity & access management failures
Distributed denial-of-service (DDoS) incidents

Liquidity & Treasury Interdependency
Real-time payments and remittances depend on treasury liquidity buffers and nostro account balances.

Mapping dependencies for CBS-2 Payments & Funds Transfer Services enables China Construction Bank (Malaysia) Berhad to gain a structured and transparent view of how payment services are delivered and sustained under both normal and stressed conditions.

By identifying the interconnections between people, operational processes, enabling technologies, and critical third-party infrastructures, the bank can proactively manage single points of failure, concentration risks, and systemic exposures.

This dependency mapping strengthens operational resilience by supporting impact tolerance setting, scenario testing, third-party risk oversight, and ICT risk integration. Ultimately, a well-documented dependency framework ensures that payment services — which are core to customer trust and financial system stability — remain available, secure, and recoverable within acceptable disruption thresholds.

Building a Resilient Banking Institution: Operational Resilience Implementation at China Construction Bank (Malaysia)
eBook 3: Starting Your OR Implementation
CBS-2 Payments & Funds Transfer Services
CBS-2 DP	CBS-2 MD	CBS-2 MPR	CBS-2 ITo	CBS-2 SuPS	CBS-2 ST	eBook 2

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.



	If you have any questions, click to contact us.

View full post