Operational resilience requires financial institutions to identify, map, and understand how their critical business services (CBS) are supported by people, processes, technology, and third parties.
For CBS-2 Payments & Funds Transfer Services, the ability to execute domestic and cross-border payments safely and reliably is fundamental to customer trust, liquidity stability, and regulatory compliance.
This chapter maps each Sub-CBS under CBS-2 to its supporting operational resources in accordance with operational resilience principles. The mapping provides end-to-end visibility of process flows, interdependencies, and concentration risks, enabling impact tolerance setting, scenario testing, and effective disruption response planning.
|
Sub-CBS Code |
Sub-CBS |
Processes |
People |
Technology (Applications & Infrastructure) |
Third-Party Vendors |
Upstream / Downstream Dependencies |
|
2.1 |
Account-to-Account Transfers |
Payment initiation → validation → AML/sanctions screening → core banking posting → settlement → reconciliation |
Branch Operations Officers, Payment Processing Team, AML Compliance, IT Support |
Core Banking System (CBS), Payment Gateway, AML Screening System, SWIFT Interface, Database Servers, Data Centre & DR Site |
SWIFT, Domestic clearing networks, AML screening vendor |
Upstream: Customer channels (branch, online banking). Downstream: GL posting, liquidity management, customer notification |
|
2.2 |
Real-Time & Instructional Payments |
Real-time request capture → authentication → funds availability check → instant posting → confirmation |
Digital Banking Team, Fraud Monitoring Unit, IT Operations, Treasury |
Real-Time Payment Engine, API Gateway, Authentication Server (MFA), Fraud Monitoring System, Network Infrastructure |
Real-time payment network provider (e.g., DuitNow/PayNet), Telecom providers |
Upstream: Mobile/Internet banking, Downstream: Core banking ledger, customer SMS/email alerts |
|
2.3 |
Bill Payment & Provider Settlement |
Bill request capture → biller validation → debit processing → settlement batching → provider remittance → reconciliation |
Payment Operations, Corporate Banking Team, Reconciliation Team |
Bill Payment Platform, Host-to-Host Interface, Middleware, Core Banking System |
Billers/utility providers, Payment aggregators |
Upstream: Customer digital channel, Downstream: Corporate settlement accounts, reporting system |
|
2.4 |
Cross-Border Remittances |
FX rate quotation → compliance screening → SWIFT/RTGS transmission → nostro/vostro settlement → confirmation |
Trade Finance Team, Treasury (FX Desk), AML Compliance, SWIFT Operations |
SWIFT Alliance, Treasury FX System, Sanctions Filtering Tool, Core Banking System, Network & Firewall |
SWIFT, Correspondent Banks, FX liquidity providers |
Upstream: Customer instruction, FX rate engine. Downstream: Nostro account reconciliation, regulatory reporting |
|
2.5 |
Batch & Bulk Payments |
Bulk file upload → file validation → approval workflow → scheduled batch posting → settlement → reconciliation |
Corporate Banking Operations, IT Batch Support, Risk & Compliance |
Corporate Payment Processing System, File Transfer Protocol (SFTP), Batch Scheduler, Database Servers |
Corporate clients (file submission), Secure file transmission providers |
Upstream: Corporate ERP systems, Downstream: Clearing house, GL & MIS reporting |
|
2.6 |
Corporate e-Banking Payments Interface |
User access authentication → payment creation → approval matrix validation → transaction routing → confirmation |
Corporate Relationship Managers, e-Banking Support Team, IT Security |
Corporate Internet Banking Platform, IAM System, MFA Authentication Server, API Gateway |
IT managed service providers, Cybersecurity monitoring provider |
Upstream: Corporate users, Downstream: Core banking system, payment gateway |
|
2.7 |
QR Payment & Digital Channels |
QR scan → token validation → real-time debit → settlement routing → notification |
Digital Banking Team, Fraud Risk Team, IT Application Support |
Mobile Banking App, QR Payment Engine, API Layer, Real-Time Payment Switch, Cloud Infrastructure |
QR scheme operator (e.g., DuitNow QR), Cloud service provider, Telecom operator |
Upstream: Mobile app user device. Downstream: Real-time settlement network, customer notification service |
This mapping supports impact tolerance definition, scenario testing (e.g., cyberattack on payment gateway, SWIFT outage, cloud disruption), and recovery prioritisation planning.
The “Map Processes and Resources” exercise for CBS-2 Payments & Funds Transfer Services provides a structured and comprehensive view of how China Construction Bank (Malaysia) Berhad delivers one of its most critical financial services.
By identifying process flows, human expertise, technological enablers, third-party reliance, and interdependencies, the Bank strengthens its ability to anticipate, withstand, and recover from operational disruptions.
This mapping forms the foundation for resilience testing, concentration risk management, and regulatory compliance. Most importantly, it ensures that payment services — which are fundamental to customers, counterparties, and the financial ecosystem — remain reliable even under severe but plausible stress scenarios.
|
Building a Resilient Banking Institution: Operational Resilience Implementation at China Construction Bank (Malaysia) |
|
|
|
|
||||||
| eBook 3: Starting Your OR Implementation |
||||||||||
| CBS-2 Payments & Funds Transfer Services | ||||||||||
| CBS-2 DP | CBS-2 MD | CBS-2 MPR | CBS-2 ITo | CBS-2 SuPS | CBS-2 ST | eBook 2 | ||||
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
|
If you have any questions, click to contact us. |
||
|
|