---
title: [OR] [MAS] [E2] [C3] Mapping Dependencies and Interconnections
description: [OR] [MAS] [E2] [C3] Mapping Dependencies and Interconnections
image: https://blog.bcm-institute.org/hubfs/MAS%20Graphic%20Folder/MAS%20E2%20Morepost/%5BOR%5D%20%5BMAS%5D%20%5BE2%5D%20%5BC3%5D%20Mapping%20Dependencies%20and%20Interconnections.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Achieving Operational Resilience in Singapore’s Financial Sector: A Practical Guide to MAS Compliance and Implementation
![BB OR \[D\] 6](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/OR%20Pictures%20A/BB%20OR%20Folder%20D/BB%20OR%20%5BD%5D%206.jpg?width=2000&height=1333&name=BB%20OR%20%5BD%5D%206.jpg "BB OR [D] 6")
# \[OR\] \[MAS\] \[E2\] \[C3\] Mapping Dependencies and Interconnections
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/23a20024-f0ef-49c9-b977-9368b9e21491)
A defining characteristic of operational resilience is the ability to understand **how services are delivered end-to-end**, and more importantly, **what they depend on**.
Financial institutions today operate in highly interconnected environments, where disruptions rarely remain isolated—they propagate across systems, functions, and even organisations.
The Monetary Authority of Singapore (MAS), through its operational resilience guidance, emphasises the need for institutions to **map dependencies and interconnections** supporting Critical Business Services (CBS).
This requirement is aligned with the BCM Institute’s Operational Resilience methodology, particularly \[OR-P2-S2\], which focuses on understanding how resources and relationships enable service delivery.
This chapter explores:
- The mapping of **People, Process, Technology, and Third Parties**
- The importance of **end-to-end service mapping**
- The risks arising from **interconnected systems and cascading failures**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/af4e7abf-3775-4632-811f-7d71e11f8bca)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Apr 28, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/97502c2e-fa28-4958-9771-0b307990443a)
### eBook 2: Chapter 3
### **Mapping Dependencies and Interconnections**
#### **Introduction**
A defining characteristic of operational resilience is the ability to understand[![\[OR\] \[MAS\] \[E2\] \[C3\] Mapping Dependencies and Interconnections](https://no-cache.hubspot.com/cta/default/3893111/6a2725b8-a928-4726-a249-2207a01557c5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6a2725b8-a928-4726-a249-2207a01557c5) **how services are delivered end-to-end**, and more importantly, **what they depend on**.
Financial institutions today operate in highly interconnected environments, where disruptions rarely remain isolated—they propagate across systems, functions, and even organisations.
The Monetary Authority of Singapore (MAS), through its operational resilience guidance, emphasises the need for institutions to map the interdependencies and interconnections that support Critical Business Services (CBS).
This requirement is aligned with the BCM Institute’s Operational Resilience methodology, particularly \[OR-P2-S2\], which focuses on understanding how resources and relationships enable service delivery.
This chapter explores:
- The mapping of **People, Process, Technology, and Third Parties**
- The importance of **end-to-end service mapping**
- The risks arising from **interconnected systems and cascading failures**
#### **Purpose of Mapping Dependencies and Interconnections**
Mapping dependencies and interconnections enables organisations to answer a critical question:
“What must function correctly for our Critical Business Services to be delivered without disruption?”
This mapping is essential because:
- Disruptions often originate in **supporting components**, not the service itself
- Dependencies may be **hidden or poorly understood**
- Interconnections can create **single points of failure or concentration risks**
MAS expects institutions to:
- Identify **all critical resources supporting CBS**
- Understand how these resources are **interconnected**
- Assess the **impact of disruption across the service chain**
The objective is not documentation for its own sake, but **actionable insight into vulnerabilities and resilience gaps**.
#### **Core Components of Dependency Mapping**
The BCM Institute framework identifies four primary dependency categories:
##### **People**
People represent the human element required to deliver services.
Key considerations:
- Critical roles and skill sets
- Availability of trained personnel
- Reliance on key individuals (key person risk)
- Workforce distribution (on-site, remote, offshore)
Examples:
- Operations staff processing transactions
- IT personnel maintaining critical systems
- Customer service teams handling client interactions
Risk: Staff unavailability (e.g., pandemic, industrial action) can disrupt service delivery.
##### **Process**
Processes define the **workflow and activities** required to deliver services.
Key considerations:
- Process complexity and manual dependencies
- Process standardisation and documentation
- Upstream and downstream process linkages
- Degree of automation
Examples:
- Payment processing workflows
- Account onboarding procedures
- Reconciliation and settlement processes
Risk: Process breakdowns or bottlenecks can halt service delivery.
##### **Technology**
Technology is often the **backbone of modern financial services**.
Key considerations:
- Critical applications and systems
- Infrastructure (servers, networks, data centres)
- System interdependencies
- Cybersecurity vulnerabilities
Examples:
- Core banking systems
- Payment gateways
- Digital banking platforms
Risk: Technology failures or cyber incidents can cause immediate and widespread disruption.
##### **Third Parties**
Third parties introduce **external dependencies** into the service chain.
Key considerations:
- Outsourced service providers
- Cloud service providers
- Payment networks and clearing systems
- Vendors supporting critical functions
Examples:
- Cloud hosting providers
- Payment processors
- IT service vendors
Risk: Third-party failures can create **concentration risk** and reduce direct control over resilience.
#### **End-to-End Service Mapping**
##### **From Fragmented Views to Holistic Understanding**
Traditional approaches often focus on:
- Individual systems
- Departmental processes
Operational resilience requires a shift to:
- **End-to-end service mapping**
This means mapping the entire service delivery chain:
Customer Interaction → Front-End Systems → Processing → Settlement → Confirmation
##### **Key Elements of End-to-End Mapping**
Effective mapping should capture:
- **Service boundaries**
- **Supporting resources**
- **Interconnections**
- **Data flows**
##### **MAS Expectations**
The Monetary Authority of Singapore expects financial institutions to:
- Map CBS at a **sufficient level of granularity**
- Identify **critical dependencies and single points of failure**
- Understand **cross-border and cross-entity linkages**
- Maintain mapping that is **accurate, current, and usable**
The emphasis is on **practical usability**, not overly complex diagrams.
#### **Interconnected Risks and Cascading Failures**
##### **Understanding Interconnected Risks**
Modern financial services operate within a **networked ecosystem**, where:
- Systems are interconnected
- Processes are interdependent
- Institutions rely on shared infrastructure
This creates **interconnected risks**, where a failure in one component can affect multiple services.
##### **Cascading Failures**
A cascading failure occurs when:
A disruption in one component triggers a chain reaction across interconnected systems.
Examples:
- A **cloud service outage** affects multiple applications
- A **payment gateway failure** disrupts multiple banks
- A **cyberattack** spreads across interconnected systems
##### **Types of Interconnection Risks**
**a. Concentration Risk**
- Over-reliance on a single provider or system
**b. Common Mode Failure**
- Multiple systems fail due to a shared dependency
**c. Contagion Risk**
- Disruption spreads across institutions or markets
##### **MAS Focus on Systemic Risk**
MAS places strong emphasis on:
- Managing **systemic interdependencies**
- Reducing **single points of failure**
- Ensuring **resilience across the financial ecosystem**
Institutions must consider not only internal risks but also **external ecosystem risks**.
#### **Methodology for Mapping Dependencies**
Aligned with BCM Institute’s \[OR-P2-S2\], the mapping process typically involves:
**Step 1: Identify CBS**
- Define the service to be mapped
**Step 2: Break Down into Sub-Services**
- Decompose CBS into **sub-CBS or detailed processes**
**Step 3: Identify Supporting Resources**
- Map:
**Step 4: Map Interconnections**
- Identify how each component interacts
- Highlight dependencies and linkages
**Step 5: Identify Vulnerabilities**
- Single points of failure
- Concentration risks
- Weak controls
**Step 6: Validate and Maintain**
- Engage stakeholders
- Update regularly
Output: A **comprehensive dependency and interconnection map**.
#### **Practical Example: Digital Banking Service**
For a **Digital Banking CBS**, dependencies may include:
- **People**
- **Process**
- **Technology**
- **Third Parties**
Interconnections:
- Mobile app connects to authentication service
- The authentication service connects to the core banking
- Core banking processes transactions
A failure in any component (e.g., authentication service) can disrupt the entire service.
#### **Key Challenges**
Organisations commonly face:
- **Incomplete visibility of dependencies**
- **Overly complex mapping that is difficult to maintain**
- **Siloed information across departments**
- **Underestimation of third-party dependencies**
- **Rapid technology changes are affecting accuracy**
#### **Key Success Factors**
To ensure effective mapping:
- **Focus on critical services first (CBS-driven approach)**
- **Maintain an appropriate level of detail (fit-for-purpose)**
- **Leverage technology tools for mapping and visualisation**
- **Ensure cross-functional collaboration**
- **Regularly update mappings based on changes**
**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/5404effa-ac11-44ba-a782-31a19cc7ef69)**
Mapping dependencies and interconnections is a **critical enabler of operational resilience**, providing organisations with a clear understanding of how services are delivered and where vulnerabilities lie.
Aligned with the expectations of the Monetary Authority of Singapore and the BCM Institute’s methodology, effective mapping allows financial institutions to:
- Identify critical dependencies across people, process, technology, and third parties
- Understand end-to-end service delivery
- Detect and mitigate interconnected risks
- Prevent cascading failures
Ultimately, this capability transforms operational resilience from a conceptual framework into a **practical, actionable discipline**, ensuring that organisations can anticipate disruptions, manage complexity, and sustain critical services in an increasingly interconnected world.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/d09e7f6d-fff9-4f07-9537-51e4ac8189d8)
| **eBook 1** | **C1** | **C2** | **C3** | **C4** | **C5** |
| --- | --- | --- | --- | --- | --- |
| [![\[OR\] \[MAS\] \[E1\] ebook Cover](https://no-cache.hubspot.com/cta/default/3893111/727b3faf-7a0f-4839-a05e-ba6681ad3b49.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/727b3faf-7a0f-4839-a05e-ba6681ad3b49) | [![\[OR\] \[MAS\] \[E2\] \[C1\] Operational Resilience Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/06bae8e4-3f57-43a8-ab4d-154c91c8dd92.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/06bae8e4-3f57-43a8-ab4d-154c91c8dd92) | [![\[OR\] \[MAS\] \[E2\] \[C2\] Identifying Critical Business Services (CBS)](https://no-cache.hubspot.com/cta/default/3893111/58eeaec5-b393-4a0a-9f3e-e349eb5375f7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/58eeaec5-b393-4a0a-9f3e-e349eb5375f7) | [![\[OR\] \[MAS\] \[E2\] \[C3\] Mapping Dependencies and Interconnections](https://no-cache.hubspot.com/cta/default/3893111/6a2725b8-a928-4726-a249-2207a01557c5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6a2725b8-a928-4726-a249-2207a01557c5) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/20b5f50c-4818-484d-b90e-b42e00527163) | [![\[OR\] \[MAS\] \[E2\] \[C7\] Business Continuity and Crisis Management Integration](https://no-cache.hubspot.com/cta/default/3893111/097ab46a-648b-44c3-b0f6-105f78983bb5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/097ab46a-648b-44c3-b0f6-105f78983bb5) |
| **eBook 2** | **C6** | **C7** | **C8** | **C9** | **C10** |
| [![\[OR\] \[MAS\] \[E2\] ebook Cover](https://no-cache.hubspot.com/cta/default/3893111/29bf59e4-024e-4ce8-9af2-7d831cefaf6b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/29bf59e4-024e-4ce8-9af2-7d831cefaf6b) | [![\[OR\] \[MAS\] \[E2\] \[C8\] Technology and Cyber Resilience](https://no-cache.hubspot.com/cta/default/3893111/b8d4c094-f2b8-489e-939c-b6f2f66f3cd9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b8d4c094-f2b8-489e-939c-b6f2f66f3cd9) | [![\[OR\] \[MAS\] \[E2\] \[C9\] Third-Party Risk Management (TPRM)](https://no-cache.hubspot.com/cta/default/3893111/976e1c6d-9adb-4342-af1c-79978500ec45.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/976e1c6d-9adb-4342-af1c-79978500ec45) | [![\[OR\] \[MAS\] \[E2\] \[C10\] Challenges in Implementation](https://no-cache.hubspot.com/cta/default/3893111/eacd1df5-a9b7-4b7a-85b0-3d925e4ea8cc.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/eacd1df5-a9b7-4b7a-85b0-3d925e4ea8cc) | [![\[OR\] \[MAS\] \[E2\] \[C11\] Case Study – Singapore Financial Institution](https://no-cache.hubspot.com/cta/default/3893111/870cb2bb-36ac-4ecf-9f20-bd31f2b2c67b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/870cb2bb-36ac-4ecf-9f20-bd31f2b2c67b) | [![\[OR\] \[MAS\] \[E2\] \[C12\] Key Takeaways](https://no-cache.hubspot.com/cta/default/3893111/0738f681-d810-42f9-9e89-6978c31be8e6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0738f681-d810-42f9-9e89-6978c31be8e6) |
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-05-02T07:33:41.664Z",
"datePublished" : "2026-04-28T08:51:03.000Z",
"headline" : "[OR] [MAS] [E2] [C3] Mapping Dependencies and Interconnections",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-mas-e2-c3-mapping-dependencies-and-interconnections",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```