---
title: [OR] [MAS] [E1] [C5] Governance and Accountability
description: [OR] [MAS] [E1] [C5] Governance and Accountability
image: https://blog.bcm-institute.org/hubfs/MAS%20Graphic%20Folder/MAS%20E1%20Morepost/%5BOR%5D%20%5BMAS%5D%20%5BE1%5D%20%5BC5%5D%20Governance%20and%20Accountability.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Achieving Operational Resilience in Singapore’s Financial Sector: A Practical Guide to MAS Compliance and Implementation
![BB OR \[D\] 6](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/OR%20Pictures%20A/BB%20OR%20Folder%20D/BB%20OR%20%5BD%5D%206.jpg?width=2000&height=1333&name=BB%20OR%20%5BD%5D%206.jpg "BB OR [D] 6")
# \[OR\] \[MAS\] \[E1\] \[C5\] Governance and Accountability
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/23a20024-f0ef-49c9-b977-9368b9e21491)
This chapter examines the **governance and accountability structures** required to support operational resilience in Singapore’s financial institutions, guided by the Monetary Authority of Singapore's (MAS) expectations.
Operational resilience is not merely a technical or operational function—it is fundamentally a **leadership and governance responsibility**.
MAS emphasises that effective resilience depends on **clear accountability, strong oversight, and well-defined roles across the organisation**.
This chapter covers:
- The role of the **Board and Senior Management**
- The application of the **Three Lines of Defence model**
- Risk ownership and accountability structures
- MAS regulatory expectations on governance and oversight
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/af4e7abf-3775-4632-811f-7d71e11f8bca)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Apr 28, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/97502c2e-fa28-4958-9771-0b307990443a)
### eBook 1: Chapter 5
### Monetary Authority of Singapore's (MAS) Governance and Accountability
#### **Purpose of the Chapter**
This chapter examines the **governance and accountability structures** required to support operational resilience in Singapore’s financial institutions, guided by the Monetary Authority of Singapore's (MAS) expectations.
Operational resilience is not merely a technical or operational function—it is fundamentally a **leadership and governance responsibility**.
MAS emphasises that effective resilience depends on **clear accountability, strong oversight, and well-defined roles across the organisation**.
This chapter covers:
- The role of the **Board and Senior Management**
- The application of the **Three Lines of Defence model**
- Risk ownership and accountability structures
- MAS regulatory expectations on governance and oversight
#### **Role of Board and Senior Management**
##### **Strategic Oversight by the Board**
MAS places ultimate accountability for operational resilience on the **Board of Directors**. The Board is responsible for:
- Setting the **strategic direction** for operational resilience
- Approving the **risk appetite and resilience framework**
- Ensuring alignment with **regulatory expectations and business objectives**
- Providing **oversight of critical business services and resilience capabilities**
The MAS BCM Guidelines emphasise that the Board must ensure that **adequate resources, policies, and governance structures** are in place to support resilience initiatives.
##### **Execution by Senior Management**
Senior Management is responsible for **translating strategy into execution**, including:
- Implementing the **operational resilience framework**
- Establishing **policies, procedures, and controls**
- Ensuring **effective monitoring and reporting mechanisms**
- Managing **incident response and recovery efforts**
MAS expects senior management to maintain **active oversight of operational risks and resilience performance**, ensuring that risks are identified, assessed, and mitigated effectively.
##### **Continuous Reporting and Escalation**
Governance requires:
- Regular reporting to the Board on:
- Clear **escalation protocols** during disruptions
This ensures that leadership can make **timely and informed decisions** during crises.
#### **Three Lines of Defence Model**
##### **Overview of the Model**
The **Three Lines of Defence (3LoD)** model is a foundational governance structure for managing operational risk and resilience.
| Line of Defence | Role |
| --- | --- |
| First Line | Business and operations |
| Second Line | Risk management and compliance |
| Third Line | Internal audit |
##### **First Line of Defence (Business Units)**
The first line is responsible for:
- **Ownership and management of risks**
- Ensuring continuity of **critical business services**
- Implementing **controls and resilience measures**
Operational resilience must be embedded into **day-to-day operations**, not treated as a separate function.
##### **Second Line of Defence (Risk & Compliance)**
The second line provides:
- **Independent oversight and challenge**
- Development of **risk frameworks and policies**
- Monitoring of **risk exposure and compliance**
This ensures that resilience practices are **consistent, robust, and aligned with MAS expectations**.
##### **Third Line of Defence (Internal Audit)**
The third line ensures:
- Independent **assessment of the resilience framework**
- Validation of **controls, processes, and effectiveness**
- Identification of **gaps and improvement areas**
MAS requires financial institutions to conduct **regular BCM audits** to ensure the adequacy and effectiveness of resilience frameworks.
##### **Integration Across the Three Lines**
Effective governance requires:
- Clear **segregation of duties**
- Strong **coordination and communication**
- Consistent **accountability across all lines**
This integrated model ensures that operational resilience is **managed, monitored, and validated comprehensively**.
#### **Risk Ownership and Accountability Structures**
##### **Clear Assignment of Responsibility**
MAS expects financial institutions to establish **clear accountability for operational resilience**, including:
- Ownership of **Critical Business Services (CBS)**
- Responsibility for **risk identification and mitigation**
- Accountability for **incident response and recovery**
Each CBS should have a **designated owner** responsible for ensuring its resilience.
##### **Accountability Across the Organisation**
Accountability must be defined at multiple levels:
- **Board** → Strategic oversight
- **Senior Management** → Execution and control
- **Business Units** → Operational ownership
- **Risk Functions** → Oversight and governance
This ensures that resilience is **embedded across the organisation**, rather than centralised in a single function.
##### **Ownership of Third-Party Risks**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/de9a0dc9-38f9-4097-9e8c-a728c0fc5fb1)MAS emphasises that:
- Financial institutions remain **fully accountable** for outsourced services
- Third-party risks must be actively **managed and monitored**
Outsourcing does not transfer accountability—it requires **enhanced governance and oversight**.
#### **Regulatory Expectations on Oversight**
##### **Strong Governance Frameworks**
MAS expects financial institutions to establish **robust governance frameworks** that include:
- Clearly defined **roles and responsibilities**
- Documented **policies and procedures**
- Effective **risk management and control mechanisms**
These frameworks must support the **continuous delivery of critical business services**.
##### **Active Oversight and Monitoring**
Institutions must demonstrate:
- Continuous **monitoring of operational risks**
- Regular **testing and validation of resilience capabilities**
- Ongoing **review and improvement of frameworks**
Governance is not static—it requires **active engagement and continuous enhancement**.
##### **Audit and Assurance**
MAS mandates:
- Regular **internal and external audits**
- Independent validation of:
Audits provide assurance that resilience measures are **effective and compliant**.
##### **Alignment with Risk Appetite**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/1b620a23-ced7-40ac-a175-b9d412cf8f3a)Governance must ensure that:
- Operational resilience aligns with the institution’s **risk appetite**
- Decisions are supported by **risk-based analysis**
- Investments in resilience are **adequate and justified**
This reinforces the integration of resilience into **enterprise risk management**.
#### **Governance as a Pillar of Operational Resilience**
The MAS framework highlights governance as a **core pillar of operational resilience**, ensuring that:
- [](https://cta-redirect.hubspot.com/cta/redirect/3893111/bc513cca-b33c-4a90-9ffa-5ba56095f7dd)Leadership is **accountable and engaged**
- Risks are **owned and managed effectively**
- Controls are **independently validated**
- Continuous improvement is **institutionalised**
Without strong governance, even well-designed resilience frameworks will **fail in execution**.
**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/5404effa-ac11-44ba-a782-31a19cc7ef69)**
Governance and accountability are central to achieving operational resilience in Singapore’s financial sector.
Under the guidance of the Monetary Authority of Singapore, financial institutions are required to establish **clear leadership ownership, structured risk management frameworks, and robust oversight mechanisms**.
Active involvement from the Board and Senior Management, supported by the Three Lines of Defence model and clear accountability structures, ensures operational resilience is **embedded across all levels of the organisation**.
Ultimately, strong governance transforms operational resilience from a compliance requirement into a **strategic capability**, enabling financial institutions to **anticipate disruptions, respond effectively, and sustain critical services in an increasingly complex environment**.
***[](https://cta-redirect.hubspot.com/cta/redirect/3893111/af4e7abf-3775-4632-811f-7d71e11f8bca)***
| **eBook 1** | **C1** | **C2** | **C3** | **C4** |
| --- | --- | --- | --- | --- |
| [![\[OR\] \[MAS\] \[E1\] ebook Cover](https://no-cache.hubspot.com/cta/default/3893111/727b3faf-7a0f-4839-a05e-ba6681ad3b49.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/727b3faf-7a0f-4839-a05e-ba6681ad3b49) | [![\[OR\] \[MAS\] \[E1\] \[C1\] Introduction](https://no-cache.hubspot.com/cta/default/3893111/d528e243-0bd5-46c5-b3d0-45a95969a7ba.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d528e243-0bd5-46c5-b3d0-45a95969a7ba) | [![\[OR\] \[MAS\] \[E1\] \[C2\] MAS Regulatory Landscape](https://no-cache.hubspot.com/cta/default/3893111/aee1f513-fa82-4696-890a-077c846564b1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/aee1f513-fa82-4696-890a-077c846564b1) | [![\[OR\] \[MAS\] \[E1\] \[C3\] Key OR Principles](https://no-cache.hubspot.com/cta/default/3893111/f30956fd-74b3-4130-a316-1777e0ad5de3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f30956fd-74b3-4130-a316-1777e0ad5de3) | [![\[OR\] \[MAS\] \[E1\] \[C4\] Operating Environment for FI](https://no-cache.hubspot.com/cta/default/3893111/b4d80326-7dea-4476-90fb-e4e7bf28e419.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b4d80326-7dea-4476-90fb-e4e7bf28e419) |
| | **C5** | **C6** | **C7** | **C8** |
| | [![\[OR\] \[MAS\] \[E1\] \[C5\] Governance and Accountability](https://no-cache.hubspot.com/cta/default/3893111/cc5821a7-433a-40c6-b2d5-9f1bb4eee3a6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/cc5821a7-433a-40c6-b2d5-9f1bb4eee3a6) | [![\[OR\] \[MAS\] \[E1\] \[C6\] OR Framework Overview](https://no-cache.hubspot.com/cta/default/3893111/3000fe16-3eb6-4ef5-bc10-ce2ee71b0b6e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3000fe16-3eb6-4ef5-bc10-ce2ee71b0b6e) | [![\[OR\] \[MAS\] \[E1\] \[C7\] OR Challenges and Definition](https://no-cache.hubspot.com/cta/default/3893111/5494fefd-50c9-49f3-9aa8-a94151e68031.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5494fefd-50c9-49f3-9aa8-a94151e68031) | [![\[OR\] \[MAS\] \[E1\] \[C8\] Key Takeaways](https://no-cache.hubspot.com/cta/default/3893111/648124e5-630e-4510-bd01-b46c94544d56.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/648124e5-630e-4510-bd01-b46c94544d56) |
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-09-27T10:00:41.511Z",
"datePublished" : "2026-04-28T03:33:24.000Z",
"headline" : "[OR] [MAS] [E1] [C5] Governance and Accountability",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-mas-e1-c5-governance-and-accountability",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```