![[OR] [CCB] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/6b0c36e9-6fb9-4705-a42a-089010976426.png)
CBS-2 Payments & Funds Transfer Services
Introduction
![[OR] [CCB] [E3] [CBS] [2] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/a106c656-951f-4914-a7d4-112942258094.png)
Operational resilience requires financial institutions to identify, map, and understand how their critical business services (CBS) are supported by people, processes, technology, and third parties.
For CBS-2 Payments & Funds Transfer Services, the ability to execute domestic and cross-border payments safely and reliably is fundamental to customer trust, liquidity stability, and regulatory compliance.
This chapter maps each Sub-CBS under CBS-2 to its supporting operational resources in accordance with operational resilience principles. The mapping provides end-to-end visibility of process flows, interdependencies, and concentration risks, enabling impact tolerance setting, scenario testing, and effective disruption response planning.
![Banner [Table] [OR] [E3] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/5af5497a-aa7f-41e4-b5ed-c9da8601d4ef.png)
Table P3: Detailed Processes for CBS-2
|
Sub-CBS Code |
Sub-CBS |
Processes |
People |
Technology (Applications & Infrastructure) |
Third-Party Vendors |
Upstream / Downstream Dependencies |
|
2.1 |
Account-to-Account Transfers |
Payment initiation → validation → AML/sanctions screening → core banking posting → settlement → reconciliation |
Branch Operations Officers, Payment Processing Team, AML Compliance, IT Support |
Core Banking System (CBS), Payment Gateway, AML Screening System, SWIFT Interface, Database Servers, Data Centre & DR Site |
SWIFT, Domestic clearing networks, AML screening vendor |
Upstream: Customer channels (branch, online banking). Downstream: GL posting, liquidity management, customer notification |
|
2.2 |
Real-Time & Instructional Payments |
Real-time request capture → authentication → funds availability check → instant posting → confirmation |
Digital Banking Team, Fraud Monitoring Unit, IT Operations, Treasury |
Real-Time Payment Engine, API Gateway, Authentication Server (MFA), Fraud Monitoring System, Network Infrastructure |
Real-time payment network provider (e.g., DuitNow/PayNet), Telecom providers |
Upstream: Mobile/Internet banking, Downstream: Core banking ledger, customer SMS/email alerts |
|
2.3 |
Bill Payment & Provider Settlement |
Bill request capture → biller validation → debit processing → settlement batching → provider remittance → reconciliation |
Payment Operations, Corporate Banking Team, Reconciliation Team |
Bill Payment Platform, Host-to-Host Interface, Middleware, Core Banking System |
Billers/utility providers, Payment aggregators |
Upstream: Customer digital channel, Downstream: Corporate settlement accounts, reporting system |
|
2.4 |
Cross-Border Remittances |
FX rate quotation → compliance screening → SWIFT/RTGS transmission → nostro/vostro settlement → confirmation |
Trade Finance Team, Treasury (FX Desk), AML Compliance, SWIFT Operations |
SWIFT Alliance, Treasury FX System, Sanctions Filtering Tool, Core Banking System, Network & Firewall |
SWIFT, Correspondent Banks, FX liquidity providers |
Upstream: Customer instruction, FX rate engine. Downstream: Nostro account reconciliation, regulatory reporting |
|
2.5 |
Batch & Bulk Payments |
Bulk file upload → file validation → approval workflow → scheduled batch posting → settlement → reconciliation |
Corporate Banking Operations, IT Batch Support, Risk & Compliance |
Corporate Payment Processing System, File Transfer Protocol (SFTP), Batch Scheduler, Database Servers |
Corporate clients (file submission), Secure file transmission providers |
Upstream: Corporate ERP systems, Downstream: Clearing house, GL & MIS reporting |
|
2.6 |
Corporate e-Banking Payments Interface |
User access authentication → payment creation → approval matrix validation → transaction routing → confirmation |
Corporate Relationship Managers, e-Banking Support Team, IT Security |
Corporate Internet Banking Platform, IAM System, MFA Authentication Server, API Gateway |
IT managed service providers, Cybersecurity monitoring provider |
Upstream: Corporate users, Downstream: Core banking system, payment gateway |
|
2.7 |
QR Payment & Digital Channels |
QR scan → token validation → real-time debit → settlement routing → notification |
Digital Banking Team, Fraud Risk Team, IT Application Support |
Mobile Banking App, QR Payment Engine, API Layer, Real-Time Payment Switch, Cloud Infrastructure |
QR scheme operator (e.g., DuitNow QR), Cloud service provider, Telecom operator |
Upstream: Mobile app user device. Downstream: Real-time settlement network, customer notification service |
Key Operational Resilience Considerations Embedded in the Mapping
- End-to-End Visibility – Each Sub-CBS is mapped from customer initiation to final settlement and reconciliation.
- Technology Concentration Risk – Core Banking System, Payment Gateway, and Network Infrastructure are common dependencies across multiple Sub-CBS.
- Third-Party Reliance Risk – SWIFT, real-time payment networks, correspondent banks, cloud providers, and telecom operators represent critical external dependencies.
- People & Skills Dependency – Specialized teams (AML, Treasury FX, Digital Banking, IT Security) are critical for maintaining payment integrity and regulatory compliance.
- Upstream/Downstream Linkages – Interdependencies with liquidity management, regulatory reporting, fraud monitoring, and customer communication systems are explicitly identified.
This mapping supports impact tolerance definition, scenario testing (e.g., cyberattack on payment gateway, SWIFT outage, cloud disruption), and recovery prioritisation planning.
![Banner [Summing] [OR] [E3] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/61e5330e-051c-4874-b6da-a1be8393c283.png)
The “Map Processes and Resources” exercise for CBS-2 Payments & Funds Transfer Services provides a structured and comprehensive view of how China Construction Bank (Malaysia) Berhad delivers one of its most critical financial services.
By identifying process flows, human expertise, technological enablers, third-party reliance, and interdependencies, the Bank strengthens its ability to anticipate, withstand, and recover from operational disruptions.
This mapping forms the foundation for resilience testing, concentration risk management, and regulatory compliance. Most importantly, it ensures that payment services — which are fundamental to customers, counterparties, and the financial ecosystem — remain reliable even under severe but plausible stress scenarios.
![[OR] [CCB] [E3] [CBS] [2] [MD] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/da942e74-1023-4795-be5b-7fdd6a6f7cc9.png)
![[OR] [CCB] [E3] [CBS] [2] [ITo] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/4185dac6-4c22-44da-befc-5de4fddc02b4.png)
![[OR] [CCB] [E3] [CBS] [2] [SuPS] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/c4c51f50-d65e-4de5-ae0f-84eef5617733.png)
![[OR] [CCB] [E3] [CBS] [2] [ST] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/a77d4c6b-6562-4930-a6d7-0540c23377ec.png)
![eBook Cover [OR] [CCB] [E2] [2D]](https://no-cache.hubspot.com/cta/default/3893111/9b21eac0-621d-41c1-a95b-81665c719a89.png)
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
More Information About OR-5000 [OR-5] or OR-300 [OR-3]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
![[BL-OR] [3-4-5] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)
![[BL-OR] [3] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)
![Email to Sales Team [BCM Institute]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)
