---
title: [OR] [KIB] [E3] [CBS] [1] [ST] Perform Scenario Testing
description: [OR] [KIB] [E3] [CBS] [1] [ST] Perform Scenario Testing
image: https://blog.bcm-institute.org/hubfs/Kenangan%20Investment%20Bank%20Berhad%20Graphic%20Folder/Kenanga%20CBS%201/%5BOR%5D%20%5BKIB%5D%20%5BE3%5D%20%5BCBS%5D%20%5B1%5D%20%5BST%5D%20Securities%20Broking%20%26%20Trade%20Execution.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Resilience by Design: Kenanga Investment Bank’s Operational Resilience Journey
# \[OR\] \[KIB\] \[E3\] \[CBS\] \[1\] \[ST\] Perform Scenario Testing
**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/48d52e8f-4ce1-4b3f-8281-d865c450eba0)**
Scenario testing is a core capability within Kenanga Investment Bank’s Operational Resilience framework, enabling the organisation to assess its ability to continue delivering CBS-1 Securities Broking & Trade Execution during severe but plausible disruptions.
Rather than testing isolated systems or departments, scenario testing evaluates the end-to-end service impact, spanning people, processes, technology, third-party dependencies, and data.
This approach is consistent with regulatory expectations outlined in the 2025 BNM Discussion Paper on Operational Resilience, which emphasises forward-looking preparedness, ICT and cyber resilience, and management’s ability to respond decisively under stress.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c32e9b3-ea88-44c3-9182-fa3e6a9aadee)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Feb 3, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![x \[OR\] \[KIB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/b6372811-fb39-4c3e-b0fc-b669eb2b0056.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b6372811-fb39-4c3e-b0fc-b669eb2b0056)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c32e9b3-ea88-44c3-9182-fa3e6a9aadee)**CBS-1 Securities Broking & Trade Execution**
#### Introduction
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/92ce4e02-e15d-4eb6-895e-606361d86a79)Scenario testing is a core capability within Kenanga Investment Bank’s Operational Resilience framework, enabling the organisation to assess its ability to continue delivering CBS-1 Securities Broking & Trade Execution during severe but plausible disruptions.
Rather than testing isolated systems or departments, scenario testing evaluates the end-to-end impact on service, spanning people, processes, technology, third-party dependencies, and data.
This approach is consistent with regulatory expectations outlined in the 2025 BNM Discussion Paper on Operational Resilience, which emphasises forward-looking preparedness, ICT and cyber resilience, and management’s ability to respond decisively under stress.
For CBS-1, scenario testing focuses on disruptions that could impair market access, trade execution, settlement integrity, and regulatory reporting—areas where operational failure could result in significant financial loss, regulatory breaches, and reputational damage.
The following table outlines recommended scenario-testing themes for each Sub-CBS, explicitly integrating Cyber and ICT risk scenarios and highlighting evidence of proactive risk-management actions expected of a resilient investment bank.
[![Banner \[Table\] \[OR\] \[E3\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/a45e9708-7139-4f4e-8e0e-41179f5cacc3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a45e9708-7139-4f4e-8e0e-41179f5cacc3)
###### Table P6: Perform Scenario Testing for CBS-1
| Sub-CBS Code | Sub-CBS | Recommended Scenario Test Themes | Impact / Effect | Evidence of Proactive Risk Management Action |
| --- | --- | --- | --- | --- |
| 1.1 | Client Onboarding & Order Intake | Cyber attack on client onboarding platform; identity data compromise; CRM system outage | Inability to onboard new clients or accept orders; data confidentiality breach | Regular cyber penetration testing; dual onboarding channels; data encryption and access reviews |
| 1.2 | Order Validation & Pre-Trade Checks | Corrupted market reference data; rules engine failure due to ICT outage | Invalid or non-compliant orders processed; regulatory exposure | Automated validation controls; manual override procedures tested; periodic rule-set integrity checks |
| 1.3 | Order Routing & Trade Execution | Exchange connectivity failure; DDoS attack on the order routing gateway | Trades fail to reach the market; missed execution opportunities | Multi-exchange connectivity; alternate routing paths; cyber DDoS mitigation drills |
| 1.4 | Trade Capture & Enrichment | Trade capture system outage; interface failure between front and middle office | Incomplete or inaccurate trade records | Near-real-time trade replication; fallback capture tools; reconciliation rehearsals |
| 1.5 | Trade Validation & Verification | Data integrity failure due to malware; middle-office system degradation | Undetected trade errors; downstream settlement issues | Segregation of duties; automated exception alerts; ICT resilience testing |
| 1.6 | Trade Confirmation & Affirmation | Secure messaging platform outage (e.g., SWIFT or equivalent); cyber spoofing attempt | Delayed or disputed confirmations | Alternate confirmation channels; message authentication controls; cyber fraud simulations |
| 1.7 | Trade Settlement Instruction & Clearing | Clearing system unavailability; ransomware attack on settlement systems | Settlement failure; liquidity and counterparty risk | Offline settlement procedures; immutable backups; coordination tests with clearing houses |
| 1.8 | Post-Trade Reconciliation & Exception Handling | Reconciliation tool failure; data mismatch from ICT integration error | Unresolved breaks; operational backlog | Daily reconciliation thresholds; surge staffing plans; system recovery time testing |
| 1.9 | Trade Reporting & Regulatory Compliance | Regulatory reporting platform outage close to submission deadline; data loss incident | Late or inaccurate regulatory submissions; supervisory findings | Pre-submission data validation; manual reporting templates; ICT recovery drills aligned to reporting timelines |
| 1.10 | Client Settlement & Confirmation Delivery | Client portal outage; email system compromise; data leakage incident | Clients do not receive settlement advice; trust erosion | Multi-channel delivery (portal/email/SFTP); cyber awareness drills; client communication playbooks |
[![Banner \[Summing\] \[OR\] \[E3\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/11895c06-91e9-4cec-acb6-4356741952e4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/11895c06-91e9-4cec-acb6-4356741952e4)
Scenario testing for CBS-1 Securities Broking & Trade Execution enables Kenanga Investment Bank to move beyond compliance-driven continuity planning toward demonstrable operational resilience.
By designing scenarios that reflect realistic market stress, ICT failures, cyber threats, and third-party disruptions, management gains clarity on whether important business services can remain within defined impact tolerances—even under extreme conditions.
Consistent with the BNM 2025 Operational Resilience Discussion Paper, the emphasis is not on preventing disruption entirely, but on anticipating failure, limiting harm, and recovering in an orderly manner.
The evidence of proactive risk management—such as tested fallback arrangements, cyber-resilience measures, and cross-functional response playbooks—provides regulators, clients, and stakeholders with confidence that Kenanga Investment Bank can continue to execute securities trades safely, fairly, and reliably in times of stress.
| Resilience by Design: Kenanga Investment Bank’s Operational Resilience Journey | | | | | |
| --- | --- | --- | --- | --- | --- |
| **eBook 3: Starting Your OR Implementation** | | | | | |
| **CBS-1 Securities Broking & Trade Execution** | | | | | |
| **CBS-1 DP** | **CBS-1 MD** | **CBS-1 MPR** | **CBS-1 ITo** | **CBS-1 SuPS** | **CBS-1 ST** |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/36711fdb-750a-4fca-a0ff-bf2b7b7fc8f0) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7703bc84-d558-43fd-b952-018fbb9e62b4) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/13236bf6-fc90-4b35-bdfb-0885d3386459) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/9a892033-bb00-4fa0-a863-e40bae4060b4) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/97ee5b7e-f986-4aa7-a290-fdc1357c349a) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/92ce4e02-e15d-4eb6-895e-606361d86a79) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/13a448f1-f09c-42da-a57e-0988e41658c5)Gain Competency:** For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the **OR-5000 Operational Resilience Expert Implementer course**, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-02-20T07:06:07.425Z",
"datePublished" : "2026-02-03T08:24:42.000Z",
"headline" : "[OR] [KIB] [E3] [CBS] [1] [ST] Perform Scenario Testing",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-kib-e3-cbs-1-st-perform-scenario-testing",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```