[OR] [ESB] [E3] [CBS] [1] [MD] Map Dependency

Written by Moh Heng Goh | May 25, 2026 7:22:31 AM

CBS-1 Deposit and Account Services

This chapter maps the dependencies supporting CBS-1 Deposit and Account Services for Equicom Savings Bank.

Dependency mapping identifies how people, processes, technology, and third-party providers connect to deliver a critical business service, allowing the bank to detect vulnerabilities, single points of failure, and resilience gaps before a disruption occurs.

The BCM Institute guidance describes mapping as the identification of dependencies and connections between people, processes, information, technology, facilities and third-party providers required to deliver each critical business service.

For Philippine banks, BSP Circular No. 1203 expects BSP-supervised financial institutions to identify critical operations, map interconnections and interdependencies, assess third-party dependencies, identify vulnerabilities, keep mapping updated, integrate BCM and testing, and ensure response and recovery plans support delivery through disruption.

Table P2: Map Dependency for CBS-1

Sub-CBS Code	Sub-CBS	Dependency Type	Dependency Detail (What/Who is involved)	Connectivity
1.1	Customer Onboarding and Account Application	People	Branch staff, sales officers, customer service personnel	Capture customer requirements and initiate the account application.
	Customer Onboarding and Account Application	Process	Account application, document collection, and eligibility checks	Feeds customer data into KYC, approval and account opening.
	Customer Onboarding and Account Application	Technology	Account opening platform, CRM, document imaging	Connects front-office intake to core banking and records repository.
	Customer Onboarding and Account Application	Third Party	ID/document verification providers, courier or document storage services	Supports validation and secure handling of onboarding records.
1.2	Customer Identification and Verification (KYC/CDD)	People	Compliance, branch operations, AML officers	Review identity, risk profile and due diligence results.
	Customer Identification and Verification (KYC/CDD)	Process	KYC, CDD, enhanced due diligence, sanctions screening	Controls whether an account can proceed to approval.
	Customer Identification and Verification (KYC/CDD)	Technology	AML screening tools, customer database, watchlist systems	Interfaces with onboarding and compliance monitoring systems.
	Customer Identification and Verification (KYC/CDD)	Third Party	Credit bureau, government ID validation, and sanctions data providers	Provides external verification and risk-screening data.
1.3	Account Approval and Opening	People	Branch manager, operations approver, compliance reviewer	Authorise account creation based on policy and risk checks.
	Account Approval and Opening	Process	Approval workflow, maker-checker control, and account creation	Converts an approved application into an active deposit account.
	Account Approval and Opening	Technology	Core banking system, workflow engine, and user access controls	Creates account number and activates product parameters.
	Account Approval and Opening	Third Party	Core banking vendor or managed service provider	Supports system availability and issue resolution.
1.4	Initial Funding and Deposit Booking	People	Teller, branch operations, cash officer	Accept initial cash, cheque or transfer funding.
	Initial Funding and Deposit Booking	Process	Deposit booking, cash validation, cheque clearing, and receipt issuance	Links funding transaction to new account activation.
	Initial Funding and Deposit Booking	Technology	Teller system, core banking, payment/clearing interface	Post initial balance and update customer account records.
	Initial Funding and Deposit Booking	Third Party	Clearing house, correspondent bank, payment switch	Enables cheque or electronic funding settlement.
1.5	Product Terms Setup and Account Parameter Maintenance	People	Product management, deposit operations, and IT administrators	Define interest rates, fees, limits and product rules.
	Product Terms Setup and Account Parameter Maintenance	Process	Parameter setup, change approval, product maintenance	Determines how accounts behave after opening.
	Product Terms Setup and Account Parameter Maintenance	Technology	Core banking parameter tables, configuration tools	Controls account features, charges, rates and restrictions.
	Product Terms Setup and Account Parameter Maintenance	Third Party	Core banking support vendor	Assists in system configuration and change deployment.
1.6	Deposit Transactions Processing	People	Tellers, branch operations, back-office operations	Process cash, cheque and transfer deposits.
		Process	Deposit acceptance, validation, posting, and end-of-day balancing	Updates customer balances and accounting records.
		Technology	Teller platform, core banking, cash management system	Enables real-time or batch posting of deposit transactions.
		Third Party	Payment networks, cheque clearing providers, and cash logistics providers	Supports external settlement and physical cash movement.
1.7	Withdrawal and Funds Access Processing	People	Tellers, branch officers, operations approvers	Validate and approve customer withdrawal requests.
		Process	Signature verification, balance validation, transaction approval	Ensures authorised access to customer funds.
		Technology	Core banking, teller system, transaction monitoring	Checks balance, posts debit and updates available funds.
		Third Party	ATM switch, payment network, cash logistics provider	Enables access to funds through physical and electronic channels.
1.8	Account Servicing and Customer Maintenance	People	Customer service, branch operations, contact centre	Handle customer updates and account maintenance requests.
		Process	Change of address, mandate update, and account amendments	Keeps customer and account information accurate.
		Technology	CRM, core banking, document management system	Synchronises updated customer data across service channels.
		Third Party	Contact centre support, outsourced document storage if applicable	Supports servicing capacity and records retrieval.
1.9	Interest, Fees, and Charges Processing	People	Deposit operations, finance, and product control	Monitor the accuracy of rates, fees, and charges.
		Process	Interest accrual, fee computation, posting and reversal	Impacts customer balances and bank income recognition.
		Technology	Core banking batch engine, general ledger interface	Calculates and posts interest, fees and charges.
		Third Party	Core banking vendor	Supports batch processing and issue remediation.
1.10	Statement, Passbook, and Balance Reporting	People	Branch staff, operations, and customer service	Provide balances, statements and passbook updates.
		Process	Statement generation, passbook update, balance enquiry	Provides customers with account information and evidence of transactions.
		Technology	Core banking, statement system, printing or e-statement platform	Extracts transaction history and delivers customer reporting.
		Third Party	Statement printing, mailing, SMS/email gateway providers	Supports physical and digital delivery of account information.
1.11	Digital Account Access and Channel Integration	People	Digital banking team, IT operations, customer support	Maintain digital access and resolve access issues.
		Process	Online/mobile banking login, account enquiry, transaction initiation	Connects deposit accounts to digital self-service channels.
		Technology	Internet/mobile banking, API gateway, authentication services	Integrates core banking with customer-facing digital channels.
		Third Party	Digital banking vendor, OTP/SMS provider, cloud or hosting provider	Supports secure and available digital access.
1.12	ATM and Card-Based Access Management	People	Card operations, ATM operations, and customer support	Support ATM card issuance, PIN and dispute handling.
		Process	Card issuance, PIN management, ATM withdrawal, and balance enquiry	Provides card-based access to deposit accounts.
		Technology	Card management system, ATM switch, core banking interface	Connects card transactions to account balances.
		Third Party	ATM network, card processor, payment switch provider	Enables access across ATM and card networks.
1.13	Account Reconciliation and Exception Handling	People	Reconciliation team, finance, operations risk	Investigate mismatches and unresolved entries.
		Process	Daily reconciliation, suspense review, exception escalation	Confirms transaction integrity across systems and ledgers.
		Technology	Reconciliation tool, core banking, general ledger	Matches customer transactions with accounting records.
		Third Party	Payment processors, clearing partners	Provide settlement files and exception data.
1.14	Dormancy, Holds, Restrictions, and Account Control Administration	People	Branch operations, compliance, legal, and fraud team	Manage account controls and restriction requests.
		Process	Dormancy tagging, freeze orders, lien marking, and account restrictions	Controls account availability and regulatory/legal compliance.
		Technology	Core banking controls, case management, and audit logs	Applies account status changes and maintains evidence.
		Third Party	Courts, regulators, law enforcement, and external legal counsel	Triggers or validates account control requirements.
1.15	Fraud Monitoring and Transaction Surveillance for Deposit Accounts	People	Fraud analysts, AML team, operations risk	Review alerts and suspicious activity.
		Process	Alert triage, investigation, escalation, suspicious transaction reporting	Protects customer funds and supports compliance obligations.
		Technology	Fraud monitoring, AML surveillance, transaction analytics	Detects unusual deposit and withdrawal behaviour.
		Third Party	Watchlist providers, fraud intelligence providers, and payment networks	Supplies external risk signals and transaction intelligence.
1.16	Complaints, Disputes, and Service Recovery	People	Customer service, complaints unit, and branch management	Receive, investigate and resolve customer complaints.
		Process	Complaint logging, dispute investigation, correction, and customer notification	Restores service confidence and mitigates customer harm.
		Technology	Complaint management system, CRM, case tracking	Tracks the complaint lifecycle and resolution status.
		Third Party	Payment partners, card processors, and outsourced contact centre	Provides transaction evidence or supports customer communication.
1.17	Regulatory Reporting and Compliance Monitoring	People	Compliance, risk management, finance, internal audit	Prepare reports and monitor regulatory compliance.
		Process	Regulatory returns, AML reporting, incident reporting, compliance review	Demonstrates control over deposit operations and resilience obligations.
		Technology	Regulatory reporting tools, data warehouse, and core banking extracts	Provides data for BSP, AML and internal governance reporting.
		Third Party	Regulatory reporting solution vendors, auditors, and external advisers	Supports assurance, validation and reporting capability.

Operational Resilience Requirements and Examples for a Philippine Bank

BSP Circular No. 1203 requires banks to identify critical operations, set tolerances for disruption, determine severe but plausible scenarios, map interconnections and interdependencies, plan for and manage delivery risks, integrate BCM and testing, and review/refine the operational resilience framework.

For CBS-1, this means Equicom Savings Bank should be able to demonstrate which people, systems, branches, digital channels, payment networks, vendors, and controls are required to keep deposit and account services operating during a disruption.

Examples of BSP-aligned requirements for this CBS include: identifying personnel responsible for dependency mapping; documenting third-party providers involved in critical operations; assessing vulnerabilities from outsourced or technology dependencies; keeping the dependency map updated; assessing substitutability of critical third parties; and testing ICT protection, detection, response and recovery processes under severe but plausible scenarios.

The dependency map for CBS-1 shows that Deposit and Account Services depend on a tightly connected operating model that involves branch personnel, compliance teams, core banking platforms, digital channels, ATM/card networks, payment and clearing arrangements, fraud monitoring tools, customer service processes, and third-party providers.

For Equicom Savings Bank, this mapping should not be treated as a static inventory; it should become a living resilience artefact used to identify single points of failure, validate recovery plans, support impact tolerance setting and design scenario tests.

This approach aligns with BSP Circular No. 1203’s expectation that Philippine banks understand, manage and test the interdependencies that support their critical operations.

eBook 3: Starting Your OR Implementation
CBS-1 Deposit and Account Services
CBS-1 DP	CBS-1 MD	CBS-1 MPR	CBS-1 ITo	CBS-1 SbPS	CBS-1 ST

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.



	If you have any questions, click to contact us.

View full post