---
title: [OR] [GCash] [E1] [C5] Identifying Critical Business Services
description: [OR] [GCash] [E1] [C5] Identifying Critical Business Services
image: https://blog.bcm-institute.org/hubfs/GCash%20Graphic%20Folder/%5BOR%5D%20%5BGCash%5D%20%5BE1%5D%20%5BC5%5D%20Identifying%20Critical%20Business%20Services.jpg
---
.
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Strengthening Operational Resilience at GCash: An Enterprise Implementation Guide
# \[OR\] \[GCash\] \[E1\] \[C5\] Identifying Critical Business Services
[![\[OR\] \[GCash\] \[Full Banner\] Strengthening Operational Resilience at GCash](https://no-cache.hubspot.com/cta/default/3893111/3a39ca09-f7ed-4e75-858f-941c41224c31.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3a39ca09-f7ed-4e75-858f-941c41224c31)
Operational resilience begins with understanding which operations an organisation must continue to perform, even during severe disruptions.
While traditional business continuity management often focuses on recovering business functions or technology, operational resilience concentrates on ensuring that the organisation can continue executing its most critical operational activities that enable the delivery of financial products and services.
For a digital financial services provider such as GCash, the uninterrupted execution of critical operations is essential to maintaining customer trust, protecting financial stability, meeting regulatory obligations, and supporting the Philippine digital economy.
Identifying these Critical Operations (CO) provides the foundation for establishing impact tolerances, understanding operational dependencies, prioritising resilience investments, and preparing for severe but plausible disruption scenarios.
This chapter introduces the concept of Critical Operations within the context of GCash's Operational Resilience Programme.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/166119c4-828b-4bdc-89ed-fb335170f89c)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Jul 21, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![\[OR\] \[GCash\] \[Disclaimer\] Legal Disclaimers and Usage of eBook Banner](https://no-cache.hubspot.com/cta/default/3893111/454a0c6c-3084-45f4-b724-65b4ca4eb6d1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/454a0c6c-3084-45f4-b724-65b4ca4eb6d1)
### Chapter 5
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/166119c4-828b-4bdc-89ed-fb335170f89c)
### **What Are GCash's Critical Operations When Implementing an Operational Resilience Program?**
#### **Introduction**
[![\[OR\] \[GCash\] \[E1\] \[C5\] Identifying Critical Business Services](https://no-cache.hubspot.com/cta/default/3893111/d6eaf971-de08-4db7-b16d-d8dcd953210b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d6eaf971-de08-4db7-b16d-d8dcd953210b)While traditional business continuity management often focuses on recovering business functions or technology, operational resilience concentrates on ensuring that the organisation can continue executing its most critical operational activities that enable the delivery of financial products and services.
For a digital financial services provider such as GCash, the uninterrupted execution of critical operations is essential to maintaining customer trust, protecting financial stability, meeting regulatory obligations, and supporting the Philippine digital economy.
Identifying these Critical Operations (CO) provides the foundation for establishing impact tolerances, understanding operational dependencies, prioritising resilience investments, and preparing for severe but plausible disruption scenarios.
This chapter introduces the concept of Critical Operations within the context of GCash's Operational Resilience Programme.
It explains how critical operations are identified, proposes a practical list of operations appropriate for GCash's business model, illustrates severe but plausible scenarios that could disrupt these operations, and demonstrates alignment with the Bangko Sentral ng Pilipinas (BSP) Circular No. 1203 – Guidelines on Operational Resilience.
#### **What is a Critical Operation (CO)?**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/370958ec-db7b-40e9-856f-91d58007cf38)A **Critical Operation (CO)** is an operational activity that an organisation must continue to perform, or recover within an acceptable period, because prolonged disruption could result in unacceptable harm to customers, financial markets, the organisation, or the wider economy.
Critical Operations encompass the people, processes, technology, information, facilities, and third-party services that collectively enable an organisation to perform its essential operational responsibilities. They represent the operational capabilities required to deliver products and services reliably under both normal and disrupted conditions.
Unlike traditional business continuity planning, which often identifies critical departments or business functions, Operational Resilience focuses on the operational activities whose interruption would create significant adverse consequences.
Each Critical Operation therefore becomes the primary focus for resilience planning, dependency mapping, impact tolerance setting, scenario testing, governance, and continuous improvement.
For GCash, identifying Critical Operations ensures resilience efforts focus on the operational capabilities most essential to maintaining confidence in the organisation and supporting the continuity of the Philippine financial ecosystem.
#### **Key Considerations for Identifying Critical Operations at GCash**
Identifying Critical Operations should follow a structured assessment that considers the potential consequences of operational disruption rather than organisational structure.
Key considerations include:
##### **Customer Harm**
Would disruption prevent customers from accessing or managing their electronic money, making payments, receiving funds, or completing essential financial transactions?
##### **Financial Stability**
Would prolonged disruption significantly affect payment activities, digital financial services, or confidence in the Philippine financial system?
##### **Regulatory Obligations**
Would disruption result in non-compliance with BSP regulatory expectations or other applicable legal and supervisory requirements?
##### **Market Confidence**
Would extended operational disruption undermine public confidence in digital financial services or electronic payment platforms?
##### **Operational Interdependencies**
Does the operation depend upon multiple business units, technology platforms, telecommunications providers, cloud services, banking partners, payment networks, or outsourced service providers?
##### **Recovery Complexity**
Would restoration require coordinated recovery across numerous systems, operational teams, external vendors, and infrastructure providers?
##### **Reputational Impact**
Would disruption attract widespread public attention, regulatory scrutiny, or significant reputational damage?
Collectively, these considerations enable GCash to identify the operations that require the highest levels of resilience planning, governance, testing, and investment.
#### **Proposed Critical Operations of GCash**
The following Critical Operations are fundamental to GCash's ability to deliver digital financial services and maintain operational resilience.
##### **CO-1 Digital Wallet Operations**
Operating and maintaining customer electronic money accounts, balance management, account administration, and wallet availability.
##### **CO-2 Digital Payment and Funds Transfer Operations**
Processing peer-to-peer transfers, merchant payments, QR payments, bank transfers, and other electronic payment transactions.
##### **CO-3 Cash-In and Cash-Out Operations**
Managing the operational processes supporting deposits and withdrawals through banks, agents, ATMs, and retail partners.
##### **CO-4 Merchant Payment Operations**
Supporting payment acceptance across retail merchants, online businesses, government agencies, and commercial partners.
##### **CO-5 Bills Payment Operations**
Processing payments for utilities, telecommunications providers, educational institutions, government agencies, and recurring customer obligations.
##### **CO-6 Digital Financial Product Operations**
Supporting operational delivery of lending, insurance, investment, savings, and other financial products offered through GCash's ecosystem partners.
##### **CO-7 Customer Identity and Authentication Operations**
Managing customer registration, identity verification, login authentication, multi-factor authentication, access control, and digital identity services.
##### **CO-8 Fraud Detection and Financial Crime Operations**
Monitoring transactions, identifying fraudulent activities, supporting anti-money laundering controls, and protecting customers against financial crime.
##### **CO-9 Customer Support and Dispute Management Operations**
Managing customer enquiries, complaints, dispute investigations, transaction reversals, and service recovery activities.
##### **CO-10 Digital Platform and Technology Operations**
Operating and maintaining the technology infrastructure, cloud services, APIs, networks, applications, databases, and supporting platforms that enable all GCash operational activities.
#### **Example: Severe but Plausible Scenarios Affecting GCash Critical Operations**
Operational resilience requires organisations to prepare for realistic disruption scenarios that could significantly affect their ability to perform Critical Operations.
Examples include:
##### **Large-scale Cyberattack**
A ransomware attack compromises multiple production environments, preventing execution of payment processing, customer authentication, and wallet operations.
##### **Cloud Infrastructure Failure**
A cloud infrastructure failure disrupts transaction processing, customer access, and supporting operational platforms.
##### **Nationwide Telecommunications Outage**
Major telecommunications failures prevent customers from accessing mobile applications, completing authentication, or receiving transaction notifications.
##### **Payment Infrastructure Failure**
Disruption affecting payment gateways or interbank payment infrastructure delays or prevents payment processing.
##### **Third-Party Service Provider Failure**
Critical vendors supporting cloud hosting, digital identity verification, fraud monitoring, payment processing, or API services become unavailable.
##### **Distributed Denial-of-Service (DDoS) Attack**
Sustained attacks overwhelm network infrastructure, degrading platform performance and preventing customer access.
##### **Insider Threat**
Malicious or negligent actions by privileged personnel compromise critical operational systems or financial data.
##### **Technology Change Failure**
A defective software release or configuration error causes widespread application instability and transaction failures.
##### **Pandemic or Workforce Disruption**
Significant workforce shortages affect fraud monitoring, operational support, customer service, and technology operations.
##### **Natural Disaster**
Typhoons, earthquakes, flooding, or regional infrastructure failures disrupt facilities, telecommunications, technology infrastructure, and operational teams.
#### **Regulatory Alignment for GCash with Bangko Sentral ng Pilipinas**
Identifying Critical Operations is a fundamental component of the Operational Resilience framework expected under **Bangko Sentral ng Pilipinas (BSP) Circular No. 1203 (Series of 2024) – Guidelines on Operational Resilience**.
The BSP expects supervised financial institutions to identify the operations that are essential to maintaining financial stability, protecting customers, and supporting the continued delivery of important financial activities.
Institutions should understand the people, processes, technology, information, facilities, and third-party relationships supporting these operations, establish impact tolerances for operational disruption, and conduct mapping and scenario testing to validate resilience capabilities.
For GCash, identifying Critical Operations enables management to prioritise resilience investments, understand operational dependencies, evaluate vulnerabilities, establish recovery priorities, and strengthen governance over operational risk.
It also supports integration across Operational Risk Management, Business Continuity Management, Cyber Resilience, Third-Party Risk Management, Crisis Management, and Technology Risk Management, creating a coordinated enterprise-wide Operational Resilience capability that aligns with BSP regulatory expectations and international good practice.
##### **Proposed Critical Operations (CO) of GCash**
| CO No. | Critical Operation | Primary Stakeholders | Operational Impact if Disrupted | Overall Criticality |
| --- | --- | --- | --- | --- |
| CO-1 | Digital Wallet Operations | Retail and Business Customers | Customers are unable to access electronic money or account balances | Very High |
| CO-2 | Digital Payment and Funds Transfer Operations | Consumers, Merchants, Banks | Payment transactions cannot be processed, affecting the digital payment ecosystem | Very High |
| CO-3 | Cash-In and Cash-Out Operations | Customers, Agents, Banking Partners | Customers are unable to deposit or withdraw electronic money | Very High |
| CO-4 | Merchant Payment Operations | Merchants and Consumers | Commercial payment activities are interrupted | Very High |
| CO-5 | Bills Payment Operations | Consumers, Utilities, Government Agencies | Essential bill payments cannot be completed | High |
| CO-6 | Digital Financial Product Operations | Customers and Financial Partners | Lending, insurance, investment, and savings services become unavailable | High |
| CO-7 | Customer Identity and Authentication Operations | All Customers | Customers are unable to securely access GCash services | Very High |
| CO-8 | Fraud Detection and Financial Crime Operations | Customers, Regulators | Increased fraud exposure and financial crime risks | Very High |
| CO-9 | Customer Support and Dispute Management Operations | Customers | Delayed complaint handling and reduced customer confidence | High |
| CO-10 | Digital Platform and Technology Operations | Entire GCash Ecosystem | Multiple operational activities become unavailable simultaneously | Very High |
#### From CBS Identification to Operational Resilience
Identifying Critical Business Services is not an end in itself. The CBS inventory becomes the organising structure for the remainder of GCash's Operational Resilience programme.
A practical progression is:
[![\[OR\] \[PM\] \[P1\] \[P2\] \[P3} From CBS Identification to Operational Resilience](https://no-cache.hubspot.com/cta/default/3893111/662fb60b-ee37-45af-8bf9-760bcd95a270.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/662fb60b-ee37-45af-8bf9-760bcd95a270)
This represents an important shift in management perspective.
Instead of asking:
##### "Is the Digital Wallet Operations resilient?"
**GCash should increasingly ask:**
##### "Can customers continue accessing their funds and completing critical transactions in their electronic money accounts if the core system, telecommunications network, authentication platform or another critical dependency fails?"
**The second question provides a much stronger basis for Operational Resilience.**
##### [![Banner \[Summing\] \[OR\] \[E1\] \[C5\] Identifying Critical Business Services](https://no-cache.hubspot.com/cta/default/3893111/d4f76ec3-d236-4b43-994d-728dbeb2e9d1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d4f76ec3-d236-4b43-994d-728dbeb2e9d1)
Identifying Critical Operations is a foundational activity in implementing an Operational Resilience Programme at GCash.
Rather than concentrating solely on organisational units or technology systems, the organisation should focus on the operational capabilities that are essential to maintaining customer confidence, meeting regulatory obligations, and supporting the stability of the Philippine financial ecosystem.
These Critical Operations provide the basis for determining impact tolerances, understanding operational dependencies, prioritising resilience investments, and validating preparedness through scenario testing.
The proposed Critical Operations presented in this chapter establish a practical framework for strengthening operational resilience at GCash.
In the following chapters, each Critical Operation will be analysed in greater detail by identifying its supporting people, processes, technology, facilities, information, and third-party dependencies.
This service-oriented operational view enables GCash to better anticipate, withstand, respond to, recover from, and adapt to severe but plausible disruptions while continuing to perform the operations that matter most to its customers and stakeholders.
[![\[OR\] \[GCash\] \[3/4 Banner\] Strengthening Operational Resilience at GCash](https://no-cache.hubspot.com/cta/default/3893111/f32c765b-c3ba-4ed6-bd15-6dc928547f19.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f32c765b-c3ba-4ed6-bd15-6dc928547f19)
| ##### Understanding Your Organisation | | | | | | |
| --- | --- | --- | --- | --- | --- | --- |
| **C1** | **C2** | **C3** | **C4** | **C5** | | |
| [![\[OR\] \[GCash\] \[E1\] \[C1\] Introducing OR Case Study](https://no-cache.hubspot.com/cta/default/3893111/49375b92-7717-4d7f-82a3-f5ca7b4c5ca4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/49375b92-7717-4d7f-82a3-f5ca7b4c5ca4) | [![\[OR\] \[GCash\] \[E1\] \[C2\] Understanding Your Organisation](https://no-cache.hubspot.com/cta/default/3893111/eb990ab7-3dbf-4f68-b9cb-e4116375e810.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/eb990ab7-3dbf-4f68-b9cb-e4116375e810) | [![\[OR\] \[GCash\] \[E1\] \[C3\] Examining Operating Environment](https://no-cache.hubspot.com/cta/default/3893111/e60a4256-bfe8-4290-94ed-f179c7ada080.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/e60a4256-bfe8-4290-94ed-f179c7ada080) | [![\[OR\] \[GCash\] \[E1\] \[C4\] Composing the OR Team](https://no-cache.hubspot.com/cta/default/3893111/b6d68856-f047-4039-b59e-70477d278ac9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b6d68856-f047-4039-b59e-70477d278ac9) | [![\[OR\] \[GCash\] \[E1\] \[C5\] Identifying Critical Business Services](https://no-cache.hubspot.com/cta/default/3893111/d6eaf971-de08-4db7-b16d-d8dcd953210b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d6eaf971-de08-4db7-b16d-d8dcd953210b) | | |
| **C6** | **C7** | **C8** | **C9** | **eBook Cover** | | |
| [![\[OR\] \[GCash\] \[E1\] \[C6\] Analysing Key Characteristics](https://no-cache.hubspot.com/cta/default/3893111/f46b1de5-6d77-4fca-b7a6-c57f0adf20da.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f46b1de5-6d77-4fca-b7a6-c57f0adf20da) | [![\[OR\] \[GCash\] \[E1\] \[C7\] Establishing Organisational Goals](https://no-cache.hubspot.com/cta/default/3893111/45763717-cdcc-4b7b-b83d-d21494bbfdc9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/45763717-cdcc-4b7b-b83d-d21494bbfdc9) | [![\[OR\] \[GCash\] \[E1\] \[C8\] Summary](https://no-cache.hubspot.com/cta/default/3893111/5b0ed315-15e9-46c7-82f4-09c1a1d17139.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5b0ed315-15e9-46c7-82f4-09c1a1d17139) | [![\[OR\] \[GCash\] \[E1\] \[C9\] Back Cover](https://no-cache.hubspot.com/cta/default/3893111/015a1be7-2368-4cbd-978a-f15eecfbd6f9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/015a1be7-2368-4cbd-978a-f15eecfbd6f9) | [![x eBook Cover \[OR\] \[GCash\] \[E1\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/6be54ccc-e74c-4dc1-9dca-7f943817ad55.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6be54ccc-e74c-4dc1-9dca-7f943817ad55) | | |
| | | | | | | |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-09-14T11:26:22.001Z",
"datePublished" : "2026-07-21T10:54:05.000Z",
"headline" : "[OR] [GCash] [E1] [C5] Identifying Critical Business Services",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-gcash-e1-c5-identifying-critical-business-services",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```