[OR] [GCash] [E3] [CBS] [1] [MII] Map Interconnections and Interdependencies

Chapter: Mapping Interconnections and Interdependencies for CO-1 Digital Wallet Operations

Introduction

Digital Wallet Operations (CO-1) is one of GCash's most critical operational services, providing customers with continuous access to electronic money, digital payments, fund transfers, merchant payments, and financial transactions. Delivering this Critical Operation requires far more than the successful execution of individual business processes.

It depends upon a complex network of interconnected operational activities, supporting technologies, information flows, specialist personnel, third-party service providers, payment ecosystem participants, and regulatory oversight.

Operational Resilience requires organisations to understand not only how each Sub-Critical Business Service (Sub-CBS) operates independently, but also how these processes interact with one another and rely upon supporting resources.

Mapping interconnections identifies the operational relationships that enable services to function, while mapping interdependencies identifies the reliance on people, systems, data, facilities, external service providers, and other Critical Operations that are essential for sustained service delivery.

For GCash, this mapping provides an end-to-end operational view of Digital Wallet Operations. It enables the organisation to identify critical hand-offs, shared resources, potential concentration risks, and single points of failure that could affect service continuity.

The resulting analysis supports dependency management, impact tolerance assessments, scenario development, recovery planning, and regulatory engagement with the Bangko Sentral ng Pilipinas (BSP).

The following sections present a structured mapping of interconnections and interdependencies for each Sub-CBS supporting CO-1 Digital Wallet Operations.

Table 2: Map Interconnections

Name of Sub-CBS	Connected Component	Connection Type	Interconnection Description	Upstream Interconnections	Downstream Interconnections
CO-1.1 Digital Wallet Registration and Provisioning	Customer onboarding, Identity verification, Customer support	Process	Initiates the lifecycle of Digital Wallet Operations by establishing wallet accounts and customer records.	Customer application, customer information, onboarding request	CO-1.2 Identity Verification, Wallet activation, Customer profile management
CO-1.2 Customer Identity Verification and Account Validation	Identity validation, Compliance, Fraud controls	Process	Verifies customer identity and regulatory eligibility before wallet activation.	CO-1.1 Registration, customer identity documents	CO-1.3 Wallet Funding, CO-1.7 Transaction Authorisation
CO-1.3 Wallet Funding and Value Loading	Banking channels, Cash-in partners, Payment gateways	Transaction	Receives funds from multiple funding channels and credits customer wallets.	Customer bank transfers, remittance partners, payment channels	CO-1.4 Wallet Balance Management
CO-1.4 Wallet Balance Management	Transaction engine, Ledger management	Information	Maintains the official wallet balance following every approved financial transaction.	CO-1.3 Funding, CO-1.5 Payment Processing, CO-1.6 Transfers	CO-1.5 Payments, CO-1.6 Transfers, CO-1.13 Reconciliation
CO-1.5 Payment Transaction Processing	Merchant payment ecosystem	Transaction	Executes customer payments while validating transaction requests and updating balances.	CO-1.4 Wallet Balance, CO-1.7 Authorisation	CO-1.8 Merchant Payment Enablement, CO-1.10 Customer Notification
CO-1.6 Funds Transfer and Settlement Processing	Banking systems, Settlement network	Financial	Processes wallet-to-wallet, wallet-to-bank and bank-to-wallet transfers and settlement activities.	CO-1.4 Balance Management, CO-1.7 Risk Controls	CO-1.13 Financial Reconciliation
CO-1.7 Transaction Authorisation and Risk Controls	Fraud monitoring, Authentication services	Control	Evaluates each transaction for authentication, fraud risk and transaction limits before approval.	CO-1.2 Identity Validation, transaction request	CO-1.5 Payment Processing, CO-1.6 Funds Transfer
CO-1.8 Merchant Payment Enablement	Merchant ecosystem	Service	Enables merchants to receive payments through QR, APIs and payment interfaces.	CO-1.5 Payment Processing	Merchant settlement, CO-1.10 Customer Notification
CO-1.9 Digital Wallet Service Integration Management	Banking interfaces, Payment ecosystem	Integration	Maintains operational connectivity between Digital Wallet Operations and external financial ecosystems.	Internal transaction requests	CO-1.5 Payment Processing, CO-1.6 Settlement, CO-1.8 Merchant Services
CO-1.10 Customer Transaction Notification and Communication	Notification platform	Communication	Provides customers with transaction confirmations, alerts and account notifications.	CO-1.5 Payments, CO-1.6 Transfers	Customer service interactions, CO-1.12 Exception Handling
CO-1.11 Transaction Monitoring and Operational Surveillance	Operational monitoring platform	Monitoring	Continuously monitors transaction performance, operational thresholds and service availability.	Transaction events from all operational processes	CO-1.14 Incident Management
CO-1.12 Exception Handling and Transaction Resolution	Operations support, Customer support	Resolution	Investigates failed or disputed transactions and coordinates corrective actions.	Alerts from CO-1.10 and CO-1.11	CO-1.13 Financial Reconciliation, CO-1.14 Incident Management
CO-1.13 Financial Reconciliation and Operational Reporting	Finance, Accounting, Regulatory reporting	Financial	Reconciles operational records with settlement records and prepares operational reports.	CO-1.4 Balance Management, CO-1.6 Settlement, CO-1.12 Resolution	Regulatory reporting, financial management
CO-1.14 Operational Incident Management	Operational Resilience, Technology Operations	Incident	Coordinates operational response, escalation and recovery during service disruptions.	CO-1.11 Monitoring, CO-1.12 Exception Handling	CO-1.15 Service Recovery
CO-1.15 Service Recovery and Operational Restoration	Business Continuity, Disaster Recovery	Recovery	Restores Digital Wallet Operations following operational disruption and validates normal service delivery before business resumption.	CO-1.14 Incident Management	All operational processes resume normal operations

Table 3: Map Interdependencies

Name of Sub-CBS	People	Systems and Technology	Data and Information Flows	Facilities	Third Parties / External Entities	Interconnected CO	Nature of Dependency	Disruption Impact
CO-1.1 Digital Wallet Registration and Provisioning	Customer onboarding specialists, Operations staff, Customer Support	Customer Registration Platform, Identity & Access Management System, Customer Relationship Management (CRM) Platform	Customer registration details, wallet profile data, onboarding records	Operations Centre, Data Centre	Identity verification providers, Mobile Network Operators	CO-2 Customer Account Management, CO-5 Customer Support Services	Successful wallet creation depends on accurate customer information, identity verification and account provisioning before downstream services can commence.	New customers cannot register or activate wallets, delaying customer acquisition and preventing access to Digital Wallet Operations.
CO-1.2 Customer Identity Verification and Account Validation	Compliance officers, Fraud analysts, AML specialists	KYC Platform, Fraud Detection System, Identity Verification Services	Customer identity records, KYC results, AML screening results	Compliance Operations Centre	Government identity databases, Identity verification service providers	CO-4 Fraud Risk Management, CO-7 Regulatory Compliance	Customer eligibility must be confirmed before financial transactions are permitted, ensuring compliance with BSP regulations.	Customers cannot complete verification, resulting in suspended onboarding, increased compliance risks and delayed service activation.
CO-1.3 Wallet Funding and Value Loading	Payment Operations, Treasury Operations	Payment Processing Platform, Banking Gateway, Transaction Processing Engine	Cash-in transactions, funding confirmations, settlement instructions	Operations Centre	Banking and Payment Service Providers, Cash-in Partners, Remittance Providers	CO-3 Payment Services	Funding relies on successful communication with banking channels and payment partners before wallet balances can be updated.	Customers are unable to add funds, significantly affecting wallet usability and reducing transaction volumes.
CO-1.4 Wallet Balance Management	Financial Operations, Transaction Processing Team	Wallet Ledger Platform, Core Transaction Database	Account balances, transaction ledger, adjustment records	Primary Data Centre	Banking Settlement Partners	CO-6 Financial Management	Accurate balance management underpins every financial transaction and must remain synchronised across all processing systems.	Incorrect balances may result in failed payments, duplicate transactions, customer disputes and financial exposure.
CO-1.5 Payment Transaction Processing	Payment Operations, Merchant Support Team	Payment Processing Platform, API Gateway, Authentication Services	Payment requests, authorisation responses, transaction records	Operations Centre	Merchants, Payment Networks, Banking Partners	CO-3 Payment Services	Payment execution depends upon real-time connectivity with merchants, banks and transaction authorisation services.	Customers cannot complete purchases, affecting merchant confidence and disrupting digital payment services.
CO-1.6 Funds Transfer and Settlement Processing	Settlement Specialists, Treasury Team	Settlement Engine, Banking Gateway, Transaction Processing Platform	Transfer requests, settlement records, clearing confirmations	Treasury Operations Centre	Banking Institutions, Payment Clearing Networks	CO-6 Financial Management	Settlement activities depend on external banking infrastructure and financial clearing processes to complete transfers.	Interbank transfers are delayed or fail, creating liquidity issues and customer dissatisfaction.
CO-1.7 Transaction Authorisation and Risk Controls	Fraud Analysts, Cybersecurity Analysts, Risk Operations	Authentication Platform, Fraud Monitoring Engine, Risk Analytics Platform	Authentication data, fraud indicators, transaction risk scores	Security Operations Centre	Authentication Service Providers	CO-4 Fraud Risk Management, CO-8 Cybersecurity Operations	Secure transaction approval depends upon continuous availability of authentication and fraud detection capabilities.	Increased fraud exposure or widespread rejection of legitimate transactions, resulting in financial loss or customer disruption.
CO-1.8 Merchant Payment Enablement	Merchant Operations Team, Business Relationship Managers	Merchant Integration Platform, QR Payment Platform, API Management Gateway	Merchant profiles, payment confirmations, settlement information	Merchant Operations Centre	Merchants, Payment Aggregators	CO-3 Payment Services	Merchant payment acceptance relies on stable connectivity between GCash and merchant ecosystems.	Merchant payment acceptance becomes unavailable, affecting commercial transactions and revenue generation.
CO-1.9 Digital Wallet Service Integration Management	Integration Engineers, Enterprise Architects	Enterprise Service Bus, API Gateway, Integration Platform	API transactions, interface messages, service status information	Technology Operations Centre	Banks, Government Payment Platforms, Financial Networks	All Connected Critical Operations	End-to-end service delivery depends upon reliable integration across multiple internal and external digital ecosystems.	Multiple Critical Operations may fail simultaneously due to integration outages, creating significant concentration risk.
CO-1.10 Customer Transaction Notification and Communication	Customer Communications Team, Contact Centre	Notification Platform, SMS Gateway, Email Services, Mobile Push Notification Platform	Transaction alerts, notifications, customer messages	Contact Centre	Telecommunications Providers	CO-5 Customer Support Services	Customers rely on timely transaction notifications for confidence, fraud detection and dispute management.	Customers lose visibility of transaction status, increasing enquiries, disputes and fraud concerns.
CO-1.11 Transaction Monitoring and Operational Surveillance	Operations Monitoring Team, Service Reliability Engineers	Operational Monitoring Platform, Event Management System, Dashboard Platform	System health data, operational metrics, transaction monitoring information	Network Operations Centre	Cloud Monitoring Services	CO-8 Technology Operations	Continuous operational monitoring enables early detection of degradation before customer impact becomes widespread.	Service issues remain undetected, increasing outage duration and delaying incident response.
CO-1.12 Exception Handling and Transaction Resolution	Customer Support, Operations Specialists, Financial Operations	Case Management System, Transaction Investigation Platform	Exception reports, dispute records, investigation outcomes	Customer Service Centre	Banking Partners, Payment Networks	CO-5 Customer Support Services	Effective resolution depends upon accurate transaction history and coordination with payment ecosystem participants.	Customer complaints increase, transaction recovery slows, and regulatory obligations may not be met.
CO-1.13 Financial Reconciliation and Operational Reporting	Finance Team, Reconciliation Specialists, Regulatory Reporting Team	Reconciliation Platform, Financial Reporting System	Settlement reports, accounting records, reconciliation files	Finance Operations Centre	Banking Partners, External Auditors, BSP reporting interfaces	CO-6 Financial Management, CO-7 Regulatory Compliance	Financial integrity depends upon timely reconciliation between internal transaction records and external settlement data.	Financial discrepancies accumulate, regulatory reporting becomes inaccurate and operational risk increases.
CO-1.14 Operational Incident Management	Incident Managers, Crisis Management Team, Technology Operations	Incident Management Platform, Service Desk, Communication Platform	Incident records, escalation logs, operational status reports	Command Centre	Critical Service Providers, Regulatory Authorities (where required)	CO-9 Operational Resilience Management	Coordinated incident response depends upon timely information from monitoring systems and operational teams.	Recovery activities become uncoordinated, increasing outage duration and regulatory reporting risks.
CO-1.15 Service Recovery and Operational Restoration	Business Continuity Team, Disaster Recovery Team, Infrastructure Engineers	Disaster Recovery Platform, Backup Systems, Recovery Management Tools	Recovery procedures, backup data, restoration validation reports	Primary and Recovery Data Centres	Cloud/Data Hosting Service Providers, Telecommunications Providers	CO-9 Operational Resilience Management, CO-8 Technology Operations	Recovery depends upon restoration of technology infrastructure, data integrity and coordinated recovery across interconnected Critical Operations.	Digital Wallet Operations remain unavailable for an extended period, potentially exceeding impact tolerances, affecting customers, merchants, and regulatory obligations.

The mapping of interconnections and interdependencies for CO-1 Digital Wallet Operations provides GCash with a comprehensive end-to-end understanding of how this Critical Operation is delivered across its operational ecosystem.

Rather than viewing Digital Wallet Operations as a standalone service, the mapping demonstrates that successful service delivery depends upon a tightly integrated network of business processes, technology platforms, operational teams, data flows, facilities, third-party providers, financial institutions, and regulatory interfaces.

The analysis highlights critical operational relationships and identifies potential vulnerabilities, including shared technology platforms, common integration services, banking connectivity, authentication services, and payment network dependencies. These represent potential concentration risks and single points of dependency that warrant enhanced monitoring, redundancy, and resilience controls. Understanding these relationships enables GCash to prioritise resilience investments where disruptions would have the greatest impact on customers and the wider digital payments ecosystem.

This mapping also provides the foundation for establishing and validating impact tolerances. By understanding which upstream and downstream dependencies are essential to each Sub-CBS, GCash can determine the maximum tolerable disruption period, identify critical recovery priorities, and evaluate whether current resilience capabilities are sufficient to remain within acceptable service thresholds.

Furthermore, the completed interconnection and interdependency maps support the design of severe but plausible operational disruption scenarios, including cyber incidents, payment network outages, cloud infrastructure failures, telecommunications disruptions, third-party service failures, and liquidity or settlement issues. These scenarios can be used in operational resilience testing to assess recovery effectiveness, identify capability gaps, and strengthen organisational preparedness.

Finally, the mapping should be maintained as a living component of GCash's Operational Resilience programme. As business processes evolve, technology platforms are modernised, third-party relationships change, or regulatory expectations develop, the interconnection and interdependency maps should be reviewed and updated to ensure they continue to accurately reflect the operational environment. Maintaining this information enables GCash to make informed resilience investment decisions, improve governance, and demonstrate to the Bangko Sentral ng Pilipinas that its Digital Wallet Operations remain resilient under severe but plausible disruption scenarios.

eBook 3: Starting Your OR Implementation
CBS-1 Insurance Policy Application and Issuance
CBS-1 DP	CBS-1 MII	CBS-1 ITo	CBS-1 SbPS	CBS-1 ST

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.



	If you have any questions, click to contact us.

Strengthening Operational Resilience at GCash: An Enterprise Implementation Guide

[OR] [GCash] [E3] [CBS] [1] [MII] Map Interconnections and Interdependencies

Operational Resilience Planner-Specialist-Expert

Chapter: Mapping Interconnections and Interdependencies for CO-1 Digital Wallet Operations

Introduction

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Your Comments Here:

Strengthening Operational Resilience at GCash: An Enterprise Implementation Guide

[OR] [GCash] [E3] [CBS] [1] [MII] Map Interconnections and Interdependencies

Operational Resilience Planner-Specialist-Expert

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, '454a0c6c-3084-45f4-b724-65b4ca4eb6d1', {"useNewLoader":"true","region":"na1"});

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, '677f466a-109d-4603-b6e8-82e42e2f6e0b', {"useNewLoader":"true","region":"na1"}); Chapter: Mapping Interconnections and Interdependencies for CO-1 Digital Wallet Operations

Introduction

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Your Comments Here:

Chapter: Mapping Interconnections and Interdependencies for CO-1 Digital Wallet Operations