[OR] [CIMB] [E3] [CBS] [2] [MD] Map Dependency

Written by Dr Goh Moh Heng | Mar 13, 2026 8:00:51 AM

CBS-2 Payment & Fund Transfer Services

Introduction

In today’s digital‑first banking environment, Payment & Fund Transfer Services (CBS‑2) represent a mission‑critical capability that directly impacts customer trust, regulatory compliance and financial stability.

This service encompasses all mechanisms enabling customers to move funds — domestically or cross‑border — with accuracy and speed, while safeguarding against fraud and disruption.

Operational resilience frameworks, such as the emerging perspectives in the BNM 2025 Discussion Paper on Operational Resilience, underscore that understanding dependencies — human resources, processes, technology, and third parties — is not only a risk management exercise but a strategic imperative to ensure continuity under stress scenarios, whether from cyber incidents, system failures or external shocks.

Table P2: Map Dependency for CBS-2

Sub‑CBS Code	Sub‑CBS Name	Dependency Type	Dependency Detail	Connectivity / Interaction
2.1	Customer Initiated Transfers	People	Customer service staff, online support agents	Handle customer queries, validate unusual requests; trigger fund movement processes.
		Process	AML/CFT screening, transaction authorization workflow	Interacts with compliance engines and authentication systems before execution.
		Technology	Mobile app, internet banking platform, authentication servers	Interfaces front‑end channels with core payments engine and security controls.
		Third Party	SMS/Email notification providers, biometric identity services	Sends OTPs, alerts; verifies identity for secure access.
2.2	Internal Processing & Routing	People	Operations team, payment processors	Manages payment queues, exception tickets, routing adjustments.
		Process	Payment routing logic, batching procedures	Routes transactions to appropriate ledger or clearing engines.
		Technology	Core banking system, message queues, middleware	Connects customer entry points to downstream systems reliably.
		Third Party	Payment switch providers, bank partners	Interacting with external processing platforms for transfers (e.g., FAST, MEPS).
2.3	Clearing & Settlement Interface	Process	Clearing house interface workflows	Ensures funds are passed to national or regional clearing systems.
		Technology	ISO 20022‑compliant clearing interface, APIs	Communicates with external clearinghouses securely.
		Third Party	Clearing networks (e.g., RTGS, MEPS), correspondent banks	Exchange of instructions, settlement files.
2.4	Foreign & Cross‑Border Payments	People	FX traders, compliance specialists	Manage foreign exchange risk and cross‑border compliance checks.
		Process	FX pricing, regulatory reporting	Ensures proper rates and reporting for cross‑border flows.
		Technology	SWIFT interface, cross‑border payment gateways	Connects bank to global payment networks.
		Third Party	SWIFT, correspondent banks, FX liquidity providers	Provides network access and liquidity for global transfers.
2.5	Payment & Transfer Compliance Controls	People	AML/KYC analysts, compliance officers	Monitor alerts, review high‑risk transactions.
		Process	Screening rulesets, escalation protocols	Automatic filtering against sanctions lists, fraud patterns.
		Technology	AML/CFT engines, AI fraud detection systems	Automated detection and blocking integration with transaction flow.
		Third Party	Watchlist providers, fraud analytics services	Provides up‑to‑date risk intelligence feeds.
2.6	Notification & Status Reporting	Technology	Notification systems (email/SMS/push APIs)	Real‑time updates to customers on transaction progress.
		Third Party	Messaging providers	Deliver status updates across channels.
2.7	Exception Handling & Remediation	People	Back‑office exception team, support specialists	Investigate failed / problematic transfers.
		Process	Issue classification, remediation workflows	Triggers corrective actions, customer callbacks, re‑submission.
		Technology	Case management platform	Tracks exceptions and resolutions.
2.8	Settlement & Reconciliation Accounting	People	Finance/settlement accountants	Confirm ledger accuracy and settlement integrity.
		Process	Daily reconciliation routines	Matches internal records with external clearing results.
		Technology	Reconciliation systems, core finance ledger	Connects payments ledger to accounting records.
2.9	Service & Channel Monitoring	People	IT monitoring team, NOC	24x7 monitoring for outages or degraded performance.
		Process	Incident detection & escalation procedures	Rapid detection triggers alerts to IT/Operations.
		Technology	Application performance monitoring (APM)	Tracks availability, throughput, response time of services.
2.10	Customer Support & Dispute Resolution	People	Contact centre agents, dispute resolution specialists	Handles payment queries, disputes, refunds.
		Process	SLA protocols, escalation paths	Ensures timely response and resolution to issues.
		Technology	CRM, support ticketing systems	Interface for tracking customer cases.

Key Observations from the Dependency Mapping

Multidimensional Dependencies:
Each Sub‑CBS relies on interwoven layers of people, processes, technologies, and third‑party services, making visibility critical to resilience planning.

Technology Centrality:
Modern payment services depend heavily on secure IT systems (mobile/internet banking, APIs, messaging, AML engines) — highlighting why regulators emphasise technology risk management and resilience.

Third‑Party Risk Exposure:
Interfaces with SWIFT, payment switches, clearinghouses and messaging providers create systemic interconnections beyond the bank, which must be factored into resilience and continuity planning.

Governance & Monitoring:
Ongoing monitoring and compliance controls — both automated and manual — are essential for detecting, responding to and recovering from disruptions, aligning with operational resilience principles.

Mapping dependencies for CBS‑2 Payment & Fund Transfer Services reveals the complex ecosystem that underpins the delivery of uninterrupted, compliant, and secure fund transfer capabilities at CIMB Bank. As operational resilience frameworks — such as those highlighted in the BNM 2025 Discussion Paper on Operational Resilience — continue to evolve, institutions must deepen their understanding of how people, processes, technologies and third‑party partners interact across each sub‑service.

This informs targeted continuity strategies, strengthens risk controls, and ensures that critical payment operations remain robust in the face of disruptions — safeguarding customer confidence and systemic stability.

Operational Resilience in Practice: The CIMB Bank Approach
eBook 3: Starting Your OR Implementation
CBS-2 Payment & Fund Transfer Services
CBS-2 DP	CBS-2 MD	CBS-2 MPR	CBS-2 ITo	CBS-2 SuPS	CBS-2 ST

For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

To learn more about the course and schedule, click the buttons below for the [OR-3] OR-300 Operational Resilience Implementer course and the [OR-5] OR-5000 Operational Resilience Expert Implementer course.



	If you have any questions, click to contact us.

View full post