eBook OR

[OR] [CIMB] [E3] [CBS] [2] [ITo] Establish Impact Tolerances

Written by Dr Goh Moh Heng | Mar 13, 2026 8:14:06 AM

 CBS-2 Payment & Fund Transfer Services

Introduction


In the context of operational resilience, financial institutions are expected to identify and map their critical business services and the detailed processes that support them.

This ensures that entities like CIMB Bank comprehend the essential activities required to maintain continuity of service during disruptions—whether caused by cyber incidents, system outages, or external shocks.

  Mapping detailed processes for each critical service is a foundational step in resilience planning, allowing the organisation to align operational practices with regulatory expectations and risk management frameworks, such as those discussed in the 2025 Bank Negara Malaysia (BNM)   Discussion Paper on Operational Resilience, which emphasises the protection of critical financial services to preserve financial stability and customer trust.

Purpose of the Chapter

This chapter aims to provide a clear understanding of the detailed business processes underlying CBS3: Cash Access & Branch Services at CIMB Bank.

By breaking down this highlevel service into specific components, readers will learn how branch infrastructure, cash operations, customer service functions, and related activities interconnect to deliver physical banking services.

This processlevel view is critical for assessing vulnerability points, designing resilience measures, and ensuring that branches continue to fulfil customer needs and regulatory obligations during operational disruptions.

 

Table P4: Establish Impact Tolerance for CBS-2

SubCBS Code

Name of SubCBS

Description of SubCBS

3.1

ATM & Self-Service Terminal Operations

Management, maintenance, cash loading, and reconciliation of Automated Teller Machines (ATMs) and SelfService Terminals (SSTs) to ensure customers have access to cash and other basic services outside branch hours. Includes coordination with cash logistics vendors and reconciliation of cash balances.

3.2

Branch Cash Teller Operations

Daily cash withdrawal, deposit, and transaction processing performed by branch tellers; includes handling of large cash transactions, verification procedures, adherence to antifraud controls, and customer service at physical branch counters.

3.3

Branch Customer Service & Sales Support

Frontline interaction with customers at branch locations, covering account opening, service enquiries, product advisory, and execution of branchbased financial service requests with proper authentication and verification.

3.4

Cash Inventory & Security Management

Tracking, forecasting, and physical security of cash inventory at branches and ATMs; includes secure storage, vault reconciliation, surveillance, and adherence to security procedures to protect assets and personnel.

3.5

Card Issuance & PickUp

Processes related to inbranch issuance of debit/credit cards, secure activation, handling of replacement cards, and customer authentication for card collection.

3.6

Queue & Appointment Management

Systems and procedures for managing customer flow within branches, including digital queue systems, appointment scheduling, and prioritisation of services to minimise wait times and support social distancing protocols when required.

3.7

Branch Risk & Compliance Controls

Implementation of branchlevel risk mitigation measures, including fraud detection, AML/CFT checks at point of service, transaction limits enforcement, and adherence to internal policies and regulatory requirements.

3.8

Business Continuity & Incident Response at Branches

Activation and execution of branch continuity plans during disruptions (e.g., IT outages, natural events); includes communication protocols, fallback procedures to alternative service delivery channels, and rapid triage of customer needs.

3.9

Cash Logistics & Vendor Coordination

Coordination with external cashhandling vendors (e.g., armored carriers) for timely cash replenishment, secure cash movements, and reconciliation; includes vendor resilience assessment and communication protocols.

3.10

Branch Infrastructure & Facilities Management

Operational oversight of physical branch infrastructure (power, connectivity, security systems, access control) to ensure branches remain functional, safe, and compliant with regulatory and safety standards.

Mapping the detailed processes within CBS3: Cash Access & Branch Services is essential to operational resilience for CIMB Bank, as it translates a highlevel service into concrete practices that support continuity, security, and customer experience.

Understanding these subcomponents enables the Bank to prioritise risk mitigation efforts, optimise response strategies for disruptions, and align branch operations with regulatory expectations such as those outlined in BNM’s operational resilience discussion paper, which underscores the importance of protecting critical services amidst increasing digitalisation and external threats.

This process breakdown not only supports compliance and risk assessment but also informs scenario testing, impact tolerance setting, and resilience planning to ensure customers can continue to access cash and branch services even under stress conditions.

Consistent review and enhancement of these detailed processes will strengthen CIMB Bank’s resilience posture and maintain customer trust in both routine and challenging operating environments.

 

Operational Resilience in Practice: The CIMB Bank Approach

eBook 3: Starting Your OR Implementation
CBS-2 Payment & Fund Transfer Services
CBS-2 DP CBS-2 MD CBS-2 MPR CBS-2 ITo CBS-2 SuPS CBS-2 ST
               

 

For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

 



More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

To learn more about the course and schedule, click the buttons below for the [OR-3] OR-300 Operational Resilience Implementer course and the [OR-5] OR-5000 Operational Resilience Expert Implementer course.

If you have any questions, click to contact us.