---
title: [OR] [MAS] [E1] [C3] Key Principles of Operational Resilience
description: [OR] [MAS] [E1] [C3] Key Principles of Operational Resilience
image: https://blog.bcm-institute.org/hubfs/MAS%20Graphic%20Folder/MAS%20E1%20Morepost/%5BOR%5D%20%5BMAS%5D%20%5BE1%5D%20%5BC3%5D%20Key%20OR%20Principles.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Achieving Operational Resilience in Singapore’s Financial Sector: A Practical Guide to MAS Compliance and Implementation
![BB OR \[D\] 6](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/OR%20Pictures%20A/BB%20OR%20Folder%20D/BB%20OR%20%5BD%5D%206.jpg?width=2000&height=1333&name=BB%20OR%20%5BD%5D%206.jpg "BB OR [D] 6")
# \[OR\] \[MAS\] \[E1\] \[C3\] Key Principles of Operational Resilience
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/23a20024-f0ef-49c9-b977-9368b9e21491)
This chapter outlines the **core principles of operational resilience** expected of financial institutions in Singapore, guided by the framework established by the Monetary Authority of Singapore (MAS).
Drawing from MAS’s guidance on *“Achieving Operational Resilience for Financial Institutions in Singapore”* and the **Business Continuity Management (BCM) Guidelines (2022)**, this chapter focuses on four foundational pillars:
- Identification of **Critical Business Services (CBS)**
- Establishment of **Recovery Time Objectives (RTO / SRTO)**
- **Dependency mapping** across the operating ecosystem
- Adoption of a **risk-based and proportional implementation approach**
Together, these principles form the backbone of a **service-centric resilience framework**.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/af4e7abf-3775-4632-811f-7d71e11f8bca)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Apr 27, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/97502c2e-fa28-4958-9771-0b307990443a)
### eBook 1: Chapter 3
### Monetary Authority of Singapore's (MAS) Key Principles of Operational Resilience
#### **Purpose of the Chapter**
This chapter outlines the **core principles of operational resilience** expected of financial institutions in Singapore, guided by the framework established by the Monetary Authority of Singapore (MAS).[![\[OR\] \[MAS\] \[E1\] \[C3\] Key OR Principles](https://no-cache.hubspot.com/cta/default/3893111/f30956fd-74b3-4130-a316-1777e0ad5de3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f30956fd-74b3-4130-a316-1777e0ad5de3)
Drawing from MAS’s guidance on *“Achieving Operational Resilience for Financial Institutions in Singapore”* and the **Business Continuity Management (BCM) Guidelines (2022)**, this chapter focuses on four foundational pillars:
- Identification of **Critical Business Services (CBS)**
- Establishment of **Recovery Time Objectives (RTO / SRTO)**
- **Dependency mapping** across the operating ecosystem
- Adoption of a **risk-based and proportional implementation approach**
Together, these principles form the backbone of a **service-centric resilience framework**.
#### **Identification of Critical Business Services (CBS)**
##### **Service-Centric Approach**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/9f906ebc-f9d2-4053-9e6f-586799079049)MAS requires financial institutions to identify **Critical Business Services (CBS)**—services whose disruption would:
- Impact **customers significantly**
- Affect the **institution’s safety and soundness**
- Cause **systemic disruption to the financial sector**
This represents a shift from focusing on internal functions to **external service outcomes**.
##### **Criteria for Identifying CBS**
Financial institutions should assess criticality based on:
- **Customer impact** (e.g., inability to access funds)
- **Financial impact** (e.g., revenue loss or liquidity issues)
- **Systemic importance** (e.g., interbank dependencies)
- **Regulatory obligations**
MAS emphasises that CBS identification must be **dynamic**, requiring periodic review and updates when operations or dependencies materially change.
##### **Prioritisation of Services**
Once identified, CBS must be:
- **Prioritised for recovery** during disruptions
- Supported by **targeted resilience strategies**
- Assigned clear **ownership and accountability**
This ensures that resources are directed towards maintaining **continuous delivery of the most critical services**.
#### **Setting Recovery Time Objectives (RTO / SRTO)**
##### **Definition and Purpose**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/66d1d090-2669-491e-a143-d06edc14eec2)MAS requires financial institutions to establish a **Service Recovery Time Objective (SRTO)** for each CBS.
- **SRTO**: Target time to restore a service to a minimum acceptable level
- **RTO**: Recovery time for underlying processes or systems
SRTO provides a **time-based benchmark** for resilience and recovery planning.
##### **Alignment Between SRTO and RTO**
MAS emphasises alignment:
- The **RTOs of underlying systems and processes must support the SRTO** of the CBS
- Recovery planning must ensure **end-to-end service restoration**, not isolated system recovery
This ensures the service customers experience is restored within acceptable limits.
##### **Factors in Setting SRTO**
Financial institutions must consider:
- **Customer expectations and service obligations**
- **Dependencies on other financial institutions**
- **Regulatory requirements**
- **Severity and type of disruption**
SRTOs guide:
- Resource allocation during crises
- Decision-making under stress
- Measurement of resilience effectiveness
#### **Dependency Mapping (People, Process, Technology, Third Parties)**
##### **End-to-End Mapping Requirement**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/80c8ad86-656f-496b-8f20-cb5c397300f5)MAS requires financial institutions to identify and map **end-to-end dependencies** supporting each CBS, including:
- **People** (key personnel, skills, staffing levels)
- **Processes** (business workflows and procedures)
- **Technology** (applications, infrastructure, data)
- **Third parties** (vendors, cloud providers, outsourcing partners)
This mapping must reflect **real operational interconnections**, not just organisational structures.
##### **Purpose of Dependency Mapping**
Dependency mapping enables institutions to:
- Identify **single points of failure**
- Assess **concentration risks**
- Understand **interdependencies across services**
- Design **targeted recovery strategies**
Given the increasing reliance on shared infrastructure and third-party providers, MAS highlights the importance of understanding **cascading-failure risks**.
##### **Third-Party and Ecosystem Risk**
Financial institutions must:
- Ensure third parties can meet **SRTO requirements**
- Establish **backup arrangements and exit strategies**
- Continuously monitor vendor resilience
This reflects MAS’s expectation that **outsourcing does not transfer accountability**.
#### **Risk-Based and Proportional Implementation**
##### **Proportionality Principle**
MAS adopts a **risk-based and proportional approach**, requiring financial institutions to implement resilience measures based on:
- **Size and scale of operations**
- **Complexity of services and systems**
- **Risk exposure and systemic importance**
This ensures that resilience frameworks are **practical and tailored**, rather than overly prescriptive.
##### **Risk-Based Decision Making**
Institutions must:
- Prioritise **high-impact services and risks**
- Allocate resources based on **risk severity and likelihood**
- Focus on **areas with the greatest potential disruption impact**
This approach ensures efficient resource use while maintaining **robust resilience capabilities**.
##### **Continuous Review and Improvement**
Operational resilience is not static. MAS expects:
- **Regular reviews of CBS, SRTOs, and dependencies**
- Continuous **testing and validation**
- Updates to reflect **emerging risks and changing environments**
Resilience must be embedded into **business-as-usual operations**, rather than treated as a one-off compliance exercise.
#### **Integrated View of Key Principles**
The four key principles are interdependent:
| **Principle** | **Role in Operational Resilience** |
| --- | --- |
| Critical Business Services | Defines what must be protected |
| SRTO / RTO | Defines how quickly services must recover |
| Dependency Mapping | Identifies what supports the services |
| Risk-Based Implementation | Ensures efficient and effective execution |
Together, they form a **cohesive framework** that enables financial institutions to maintain **continuous service delivery under stress**.
**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/5404effa-ac11-44ba-a782-31a19cc7ef69)**
The Monetary Authority of Singapore's key principles establish a structured,** service-centric approach to operational resilience** in Singapore’s financial sector.
By identifying critical business services, defining recovery expectations through SRTOs, mapping dependencies, and adopting a risk-based implementation approach, financial institutions can build robust,** adaptive resilience frameworks**.
These principles ensure resilience is not merely about recovering operations, but about sustaining essential services, protecting customers, and maintaining trust in the financial system, even amid increasingly complex and unpredictable disruptions.
***[](https://cta-redirect.hubspot.com/cta/redirect/3893111/af4e7abf-3775-4632-811f-7d71e11f8bca)***
| **eBook 1** | **C1** | **C2** | **C3** | **C4** |
| --- | --- | --- | --- | --- |
| [![\[OR\] \[MAS\] \[E1\] ebook Cover](https://no-cache.hubspot.com/cta/default/3893111/727b3faf-7a0f-4839-a05e-ba6681ad3b49.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/727b3faf-7a0f-4839-a05e-ba6681ad3b49) | [![\[OR\] \[MAS\] \[E1\] \[C1\] Introduction](https://no-cache.hubspot.com/cta/default/3893111/d528e243-0bd5-46c5-b3d0-45a95969a7ba.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d528e243-0bd5-46c5-b3d0-45a95969a7ba) | [![\[OR\] \[MAS\] \[E1\] \[C2\] MAS Regulatory Landscape](https://no-cache.hubspot.com/cta/default/3893111/aee1f513-fa82-4696-890a-077c846564b1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/aee1f513-fa82-4696-890a-077c846564b1) | [![\[OR\] \[MAS\] \[E1\] \[C3\] Key OR Principles](https://no-cache.hubspot.com/cta/default/3893111/f30956fd-74b3-4130-a316-1777e0ad5de3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f30956fd-74b3-4130-a316-1777e0ad5de3) | [![\[OR\] \[MAS\] \[E1\] \[C4\] Operating Environment for FI](https://no-cache.hubspot.com/cta/default/3893111/b4d80326-7dea-4476-90fb-e4e7bf28e419.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b4d80326-7dea-4476-90fb-e4e7bf28e419) |
| | **C5** | **C6** | **C7** | **C8** |
| | [![\[OR\] \[MAS\] \[E1\] \[C5\] Governance and Accountability](https://no-cache.hubspot.com/cta/default/3893111/cc5821a7-433a-40c6-b2d5-9f1bb4eee3a6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/cc5821a7-433a-40c6-b2d5-9f1bb4eee3a6) | [![\[OR\] \[MAS\] \[E1\] \[C6\] OR Framework Overview](https://no-cache.hubspot.com/cta/default/3893111/3000fe16-3eb6-4ef5-bc10-ce2ee71b0b6e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3000fe16-3eb6-4ef5-bc10-ce2ee71b0b6e) | [![\[OR\] \[MAS\] \[E1\] \[C7\] OR Challenges and Definition](https://no-cache.hubspot.com/cta/default/3893111/5494fefd-50c9-49f3-9aa8-a94151e68031.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5494fefd-50c9-49f3-9aa8-a94151e68031) | [![\[OR\] \[MAS\] \[E1\] \[C8\] Key Takeaways](https://no-cache.hubspot.com/cta/default/3893111/648124e5-630e-4510-bd01-b46c94544d56.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/648124e5-630e-4510-bd01-b46c94544d56) |
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, offer in-depth insights and practical toolkits to embed this model effectively.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-09-27T07:03:32.806Z",
"datePublished" : "2026-04-27T03:20:50.000Z",
"headline" : "[OR] [MAS] [E1] [C3] Key Principles of Operational Resilience",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-mas-e1-c3-key-principles-of-operational-resilience",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```