---
title: [OR] [MBSB] [E2] [C1] OR Planning Methodology
description: [OR] [MBSB] [E2] [C1] OR Planning Methodology
image: https://blog.bcm-institute.org/hubfs/MBSB%20Graphic%20Folder/%5BOR%5D%20%5BMBSB%5D%20%5BE2%5D%20%5BC1%5D%20OR%20Planning%20Methodology.jpg
---
.
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Operational Resilience in Action: The MBSB Approach
# \[OR\] \[MBSB\] \[E2\] \[C1\] OR Planning Methodology
[![\[OR\] \[MBSB\] \[Full Banner\] Operational Resilience in Action The MBSB Bank's Approach ](https://no-cache.hubspot.com/cta/default/3893111/567eecca-dbad-4a1a-8465-5d45335ce5da.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/567eecca-dbad-4a1a-8465-5d45335ce5da)
[![eBook Cover \[OR\] \[MBSB\] \[E2\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/23693331-a4a4-43f3-8b58-f1dee8c34550.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/23693331-a4a4-43f3-8b58-f1dee8c34550)
Operational resilience is increasingly important to financial institutions operating in an environment characterised by digitalisation, interconnected financial ecosystems, cyber threats, technology dependencies, third-party concentration and heightened customer expectations.
For MBSB, resilience therefore extends beyond the recovery of individual systems or business functions. It requires the organisation to understand which services are most important to customers and other stakeholders, how those services are delivered, what they depend upon, and how disruption can be managed before unacceptable harm occurs.
Bank Negara Malaysia (BNM), in its **2025 Discussion Paper on Operational Resilience**, outlines an emerging direction to strengthen the continuity of critical financial services.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/de86b74e-d06f-49d8-bad6-d7a62c7df1b3)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Aug 27, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![x \[OR\] \[MBSB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/d779f9ab-aec0-4cdd-a906-81e7841c3e1c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d779f9ab-aec0-4cdd-a906-81e7841c3e1c)
#### eBook 2: Chapter 1
****
**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/de86b74e-d06f-49d8-bad6-d7a62c7df1b3)**
### **Introduction to MBSB’s Operational Resilience Planning Methodology**
#### Introduction
#### [![\[OR\] \[MBSB\] \[E3\] \[C1\] Starting Your OR Implementation](https://no-cache.hubspot.com/cta/default/3893111/37057c9e-bfe2-4954-becb-f394a4ed3ecd.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/37057c9e-bfe2-4954-becb-f394a4ed3ecd)
Operational resilience is increasingly important to financial institutions operating in an environment characterised by digitalisation, interconnected financial ecosystems, cyber threats, technology dependencies, third-party concentration and heightened customer expectations.
For MBSB, resilience therefore extends beyond recovering individual systems or business functions.
It requires the organisation to understand which services matter most to customers and other stakeholders, how those services are delivered, what they depend on, and how to manage disruption before unacceptable harm occurs.
Bank Negara Malaysia (BNM), in its **2025 Discussion Paper on Operational Resilience**, outlines an emerging direction to strengthen the continuity of critical financial services.
[![eBook Cover \[OR\] \[MBSB\] \[E2\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/23693331-a4a4-43f3-8b58-f1dee8c34550.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/23693331-a4a4-43f3-8b58-f1dee8c34550)The Discussion Paper highlights several foundational themes: preserving critical operations and services, mapping internal and external interdependencies, managing third-party dependencies, setting disruption tolerances, and assessing capabilities against severe but plausible scenarios.
It also emphasises strong governance, leadership, organisational learning and continuous improvement.
These principles provide an important regulatory context for MBSB. BNM observes that operational resilience should build upon, rather than replace, established disciplines such as Business Continuity Management (BCM), technology risk management, third-party management, operational risk management and governance.
The objective is to bring these capabilities together to maintain critical services during disruption.
For this implementation guide, **MBSB's Operational Resilience Planning Methodology** is structured around three interconnected phases:**Plan → Implement → Sustain**
Each phase contains five stages, creating a structured fifteen-stage methodology.
Do not regard the phases as isolated projects.
Together, they form a continuous management cycle through which MBSB can establish its operational resilience foundation, implement service-level resilience capabilities, and sustain and improve those capabilities as the organisation and its operating environment evolve.
#### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/256138b3-f543-4034-ab3e-54d2b68380ef)
This chapter provides the reader with an overall understanding of MBSB's Operational Resilience Planning Methodology before subsequent chapters address detailed implementation activities.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/8f21052d-df77-4800-a1aa-d8814f521b1f)Operational resilience involves multiple disciplines, business units and management responsibilities.
Without a common methodology, activities such as identifying critical services, setting impact tolerances, mapping dependencies, testing scenarios, managing risk, and ensuring business continuity and technology resilience can become fragmented.
A structured methodology provides a common framework to coordinate these activities and link them to the services that matter most.
By the end of this chapter, the reader should be able to:
- understand the purpose of the **Plan, Implement and Sustain** phases;
- recognise the five stages within each phase;
- understand how the fifteen stages collectively form an operational resilience lifecycle;
- relate each stage to MBSB's financial services operating environment;
- understand how the methodology supports the operational resilience themes emerging from BNM's 2025 Discussion Paper; and
- recognise that operational resilience is an ongoing management capability rather than a one-time compliance exercise.
BNM similarly emphasises that operational resilience is a continuous journey, requiring financial institutions to learn from disruptions and near misses and to periodically update testing, processes, architecture, and governance arrangements as the threat and operating environments evolve.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/1fe47037-0739-4367-a3bd-31265a1358af)
#### **Phase 1: Plan**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/99882495-4654-4d10-8cd4-41a72d1ce090)
The **Plan Phase** establishes the organisational foundation required to implement operational resilience effectively.
Before MBSB determines which services are critical or conducts detailed resilience testing, it needs to understand its existing capabilities, identify gaps, determine its strategic direction, establish acceptable risk boundaries and put appropriate governance arrangements in place.
The five stages are:[](https://cta-redirect.hubspot.com/cta/redirect/3893111/a99da3ed-fa5c-4a92-834e-b34d3c0fc089)
##### **Plan Phase – Stage 1: Assess Capability and Maturity**
MBSB begins by establishing a baseline of its existing operational resilience capabilities.
The assessment should consider capabilities already available through BCM, operational risk management, technology and cyber resilience, disaster recovery, outsourcing and third-party risk management, incident and crisis management, governance, and related disciplines.
The objective is not simply to determine whether policies and procedures exist. MBSB should assess how effectively these capabilities collectively support the continued delivery of critical services during disruption.
**MBSB Example**
MBSB could assess whether existing BCM arrangements are primarily organised around departments and critical business functions or whether they provide management with an end-to-end understanding of customer-facing services.
MBSB could then assess existing technology recovery capabilities, outsourcing arrangements, incident management processes, and governance structures against the operational resilience outcomes it seeks to achieve.
##### **Plan Phase – Stage 2: Analyse Gap**
Once MBSB understands its current maturity level, it identifies the difference between its existing capabilities and its desired operational resilience capability.
Potential gaps may relate to service identification, dependency information, third-party visibility, impact tolerance, scenario testing, governance, management information or organisational awareness.
The gap analysis helps MBSB distinguish between capabilities it can leverage from existing arrangements and areas that require enhancement.
**MBSB Example**
MBSB may already maintain detailed BCM and technology recovery documentation but determine that information is structured around individual functions and systems rather than end-to-end critical business services.
The gap would therefore not necessarily be an absence of recovery arrangements, but the need to connect existing information into a service-based resilience view.
##### **Plan Phase – Stage 3: Develop Strategy and Roadmap**
The identified gaps are translated into an operational resilience strategy and implementation roadmap.
The strategy defines what MBSB intends to achieve, while the roadmap establishes how it will prioritise, sequence, resource, and monitor improvements.
Rather than trying to implement every improvement at once, MBSB should adopt a risk-based, proportionate approach, prioritising capabilities that most directly affect the continuity of critical services.
**MBSB Example**
MBSB could establish a multi-year roadmap that begins by identifying critical business services, then mapping dependencies and setting impact tolerances.
Subsequent milestones could address scenario testing, vulnerability remediation, enhanced management reporting, and integration into business-as-usual governance.
##### **Plan Phase – Stage 4: Confirm Risk Appetite**
Operational resilience must align with MBSB's broader risk management framework.
Risk appetite sets boundaries for the level and type of operational risk the organisation is prepared to accept in pursuing its objectives.
Operational resilience should translate these organisational risk boundaries into meaningful considerations concerning disruption to critical services.
**MBSB Example**
Where MBSB has a low appetite for prolonged disruption to essential customer banking services, this position should influence investment decisions concerning system availability, redundancy, cybersecurity, recovery capabilities and critical third-party arrangements.
Risk appetite sets the strategic boundary, while service-specific impact tolerances, developed later in the methodology, provide more explicit measures of the disruption that can be tolerated.
##### **Plan Phase – Stage 5: Develop and Embed Governance**
Operational resilience requires clear ownership, accountability, decision-making authority and oversight.
BNM highlights strong board oversight and timely decision-making through cross-functional, integrated arrangements as key characteristics of institutions that can withstand disruption.
MBSB should therefore determine how existing management structures will govern operational resilience, rather than creating unnecessary parallel arrangements.
**MBSB Example**
The Board and Senior Management could receive periodic reports on critical business services, impact-tolerance positions, major vulnerabilities, scenario-testing results, and remediation programmes.
Individual critical business services could also have clearly designated senior owners accountable for ensuring that resilience risks are understood and appropriately managed.
Completing the Plan Phase gives MBSB the organisational foundation to move from strategic intent to implementation.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/ef090ab9-1328-4dad-9a77-6b9f542b9ad4)
#### **Phase 2: Implement**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/c208f922-5ed7-4afd-9d9f-6ec60522a396)
The **Implement Phase** converts MBSB's operational resilience strategy into practical service-level capabilities.
This phase emphasises understanding the services that must remain resilient, identifying the resources and dependencies that support them, setting acceptable disruption thresholds, and testing whether the organisation can stay within those thresholds.
This direction closely reflects BNM's emerging themes on critical services, interdependency mapping, disruption tolerances, and severe-but-plausible scenario testing.
The five stages are:
[![\[OR\] \[PM\] \[P2\] 5 Stage of Implement Phase](https://no-cache.hubspot.com/cta/default/3893111/936cc697-2dbe-4ede-a43d-f063ecdedf4b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/936cc697-2dbe-4ede-a43d-f063ecdedf4b)
##### **Implement Phase – Stage 1: Identify Critical Business Services**
Not every MBSB activity requires the same level of resilience.
The first implementation stage therefore identifies the business services whose disruption could cause significant harm to customers, the organisation, other stakeholders or, where relevant, the wider financial system.
This service-oriented approach shifts attention from protecting individual departments to protecting the outcomes customers and stakeholders depend on.
**MBSB Example**
MBSB may determine that customers' ability to access and transact through certain banking services represents a critical business service because prolonged unavailability could prevent customers from accessing funds or completing essential financial transactions.
BNM similarly stresses the need for financial institutions to identify which operations or services are essential to consumers and markets and to maintain their continuity.
##### **Implement Phase – Stage 2: Map Processes and Resources**
Once MBSB has identified critical business services, it needs an end-to-end understanding of how each service is delivered.
Mapping should identify relevant:
- people;
- business processes;
- technology and applications;
- data;
- facilities;
- internal business units;
- third parties and outsourced providers; and
- other infrastructure and external dependencies.
BNM emphasises that disruption can propagate through networks of people, processes, data, technology, facilities, business units and external service providers. Mapping these dependencies enables financial institutions to identify vulnerabilities and critical failure points.
**MBSB Example**
For a critical digital banking service, MBSB could map the customer interface, authentication mechanisms, supporting applications, core banking platform, telecommunications connectivity, cybersecurity services, data infrastructure, operational teams and relevant external service providers.
The resulting map should help MBSB understand how disruption to one component could affect overall service delivery.
##### **Implement Phase – Stage 3: Set Impact Tolerance**
MBSB next determines the maximum disruption level it can tolerate before the impact becomes unacceptable.
Consider impact tolerance from the perspective of the business service and its outcomes, rather than limiting it to the recovery objectives of individual systems or departments.
BNM notes that internal recovery measures such as Maximum Tolerable Downtime (MTD) and Recovery Time Objective (RTO) remain important but may not, by themselves, adequately represent the impact of disruption on customers and stakeholders.
**MBSB Example**
For a critical customer transaction service, MBSB could set a maximum tolerable service-disruption duration while also considering affected transaction volumes, the number of customers impacted, financial consequences, regulatory implications, and potential customer harm.
The impact tolerance then becomes a reference point for assessing whether existing resilience arrangements are sufficient.
##### **Implement Phase – Stage 4: Conduct Scenario Testing**
Scenario testing assesses whether MBSB can continue delivering its critical business services within established impact tolerances when confronted with **severe but plausible disruption**.
Testing should challenge assumptions rather than simply demonstrate that existing plans work under favourable conditions.
BNM specifically highlights the importance of scenarios that are sufficiently severe to expose weaknesses while remaining credible, including consideration of concurrent and multi-layered failures.
**MBSB Example**
MBSB could test a scenario involving simultaneous disruption to a critical technology platform and a supporting third-party service during a period of high customer transaction volumes.
The scenario could assess whether alternative arrangements, management escalation, customer communication, and recovery capabilities would keep the affected service within its impact tolerance.
##### **Implement Phase – Stage 5: Improve Lessons Learned**
Testing has limited value unless identified weaknesses lead to improvement.
MBSB should establish a structured process to capture findings from exercises, actual incidents, near misses, and operational disruptions, and convert them into corrective actions.
**MBSB Example**
A scenario test may identify excessive dependence on a single technology component or service provider. MBSB could respond by adding redundancy, strengthening contractual continuity arrangements, improving alternative processing capabilities, or modifying recovery procedures.
BNM emphasises continuous learning and structured incorporation of lessons from disruptions into future planning as a fundamental aspect of improving resilience.
Therefore, completing the Implement Phase does not mark the end of operational resilience. The capabilities established must subsequently be embedded, maintained and continuously challenged.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/cd40e631-43df-4dc6-85e8-3544d151d6d8)
#### **Phase 3: Sustain – Ensuring Long-term Resilience**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/a95777af-0036-479c-8f57-0f52ddb08108)
The **Sustain Phase** embeds operational resilience into MBSB's organisational culture and business-as-usual management practices.
Operational resilience cannot remain solely the responsibility of BCM, Risk or Technology functions. Individuals responsible for designing, operating, supporting and overseeing critical services must understand how their decisions influence resilience.
The five stages are:
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/62d152d9-6757-40e4-8e37-498c73bd9d50)
##### **Sustain Phase – Stage 1: Introduce Cultural Change**
The first stage focuses on creating organisational behaviours that support resilience.
Employees and management should recognise that disruption is possible despite preventive controls and that resilience therefore requires preparedness, adaptability and effective recovery.
**MBSB Example**
When evaluating a new digital banking capability, MBSB's management could routinely consider resilience implications alongside commercial, technology, and customer experience considerations. This would help move resilience from a specialist control activity into normal business decision-making.
##### **Sustain Phase – Stage 2: Develop Communication Strategy**
Operational resilience requires effective communication before, during and after disruption.
MBSB should establish communication arrangements that address internal stakeholders, customers, regulators, service providers, and other relevant parties.
**MBSB Example**
To address disruptions affecting critical customer service, MBSB could establish predetermined escalation paths, communication responsibilities, approval authorities, and customer communication channels to ensure accurate information is provided promptly during an incident.
##### **Sustain Phase – Stage 3: Implement Training and Awareness**
Different stakeholders require different levels of operational resilience knowledge.
Training should therefore be role-based rather than relying exclusively on general awareness programmes.
**MBSB Example**
Board and Senior Management training could focus on governance, accountability and decision-making under severe disruption. Critical business service owners could receive training on impact tolerance and scenario testing, while operational teams could focus on service dependencies, escalation procedures and continuity arrangements.
##### **Sustain Phase – Stage 4: Provide Self-assessment**
Self-assessment enables MBSB to periodically evaluate whether its operational resilience arrangements remain appropriate and effective.
The assessment should consider changes in critical services, dependencies, vulnerabilities, impact tolerances, testing outcomes, incidents and remediation activities.
**MBSB Example**
Each critical business service owner could periodically confirm whether dependency maps remain current, whether the service continues to operate within its approved resilience parameters, whether identified vulnerabilities have been addressed and whether significant business or technology changes have altered its resilience profile.
This creates a structured mechanism for management to identify emerging weaknesses before they become material resilience issues.
##### **Sustain Phase – Stage 5: Conduct Independent Quality Review**
Independent review provides objective challenge and assurance over the design and effectiveness of MBSB's operational resilience framework.
The review should determine not merely whether documentation exists, but whether the framework is embedded and capable of producing the intended resilience outcomes.
**MBSB Example**
An independent review could examine a sample of MBSB's critical business services and assess whether their identification criteria are appropriate, dependency maps are sufficiently comprehensive, impact tolerances are supported by clear rationale, scenario tests provide meaningful challenge and identified weaknesses are being remediated.
Report findings through appropriate governance channels and incorporate them into the next improvement cycle.
#### **Connecting the Three Phases**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/ca5bdc9d-fdc7-46cd-83d9-c0ae03d587af)View the three phases as a continuous, interconnected lifecycle rather than a linear programme that ends after implementation.
**Plan** establishes where MBSB currently stands, where it intends to go, and how it will govern operational resilience.
**Implement** identifies what must remain resilient, understands how those services are delivered, determines acceptable disruption levels and tests whether resilience arrangements are sufficient.
**Sustain** embeds those capabilities into MBSB's culture, communication, training, assurance, and continuous improvement processes.
The relationship can therefore be represented as:
This cyclical approach matters because MBSB's operating environment will continue to change. New products, digital channels, technologies, outsourcing arrangements, customer behaviours and emerging threats can alter both service dependencies and the consequences of disruption.
#### **Alignment with BNM's Emerging Operational Resilience Direction**
MBSB's Operational Resilience Planning Methodology provides a practical structure to translate BNM's emerging principles into coordinated implementation activities.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/2726ae74-56b9-4cb7-9255-428edd7e2847)BNM's 2025 Discussion Paper indicates a shift towards a more **resilience-first** approach within Malaysia's financial sector.
It highlights the importance of identifying critical services, understanding internal and external dependencies, managing third-party reliance, establishing disruption tolerances, testing against severe but plausible scenarios, maintaining strong governance, and continuously learning from disruptions.
Importantly, this direction does not mean discarding MBSB's existing risk and resilience capabilities. BNM recognises that financial institutions already operate within established requirements covering BCM, technology risk, outsourcing, operational risk, risk governance, corporate governance and responsibility mapping.
Operational resilience can provide an organising construct that brings these capabilities together around the outcome of maintaining critical services during disruption.
For MBSB, the fifteen-stage methodology therefore bridges existing capabilities with a more integrated, service-oriented approach to resilience.
[![x \[Banner\] \[Summing\] \[OR\] \[E2\] \[C1\] Overview of Operational Resilience Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/0c551e82-cf06-432c-8498-1d3c9bb2dece.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0c551e82-cf06-432c-8498-1d3c9bb2dece)
Operational resilience requires MBSB to look beyond recovering individual business functions, applications, or infrastructure components and consider whether the organisation can continue delivering its most critical business services during serious disruption.
The **Plan–Implement–Sustain** methodology provides a structured approach for achieving this objective.
The **Plan Phase** establishes the foundation through capability assessment, gap analysis, strategy, risk appetite and governance.
The **Implement Phase** translates that foundation into practical resilience through identifying and mapping critical business services, defining impact tolerance, testing scenarios, and improving processes.
The **Sustain Phase** embeds resilience through culture, communication, training, self-assessment and independent review.
Together, these fifteen stages create a continuous operational resilience lifecycle for MBSB. They also provide a practical way to connect existing BCM, operational risk, technology resilience, third-party risk, and governance capabilities around a common outcome: **maintaining the delivery of critical business services within acceptable levels of disruption**.
This foundation prepares the reader for the subsequent chapters, which translate the individual stages of MBSB's Operational Resilience Planning Methodology into more detailed implementation activities, responsibilities, deliverables, and management practices.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/3aefb2d2-3110-47c1-ad4f-d3e6e5381066)
Blogs marked \[x\] are under construction
[![\[OR\] \[MBSB\] \[3/4 Banner\] Operational Resilience in Action The MBSB Bank's Approach ](https://no-cache.hubspot.com/cta/default/3893111/8c32162b-ac29-4c9c-9413-3d8869a65490.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8c32162b-ac29-4c9c-9413-3d8869a65490)
| **C1** | **C2** | **C8** | **C14** | | | |
| --- | --- | --- | --- | --- | --- | --- |
| [![\[OR\] \[MBSB\] \[E3\] \[C1\] Starting Your OR Implementation](https://no-cache.hubspot.com/cta/default/3893111/37057c9e-bfe2-4954-becb-f394a4ed3ecd.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/37057c9e-bfe2-4954-becb-f394a4ed3ecd) | [![\[OR\] \[MBSB\] \[P1\] \[S1-S5\] \[C2\] Five Stages of the \_Plan\_ Phase](https://no-cache.hubspot.com/cta/default/3893111/75bee8c4-ed71-46d1-8116-38d39c6b2517.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/75bee8c4-ed71-46d1-8116-38d39c6b2517) | [![\[OR\] \[MBSB\] \[P1\] \[S1-S5\] \[C8\] Five Stages of the \_Implement\_ Phase](https://no-cache.hubspot.com/cta/default/3893111/ff053259-0c9d-4ce3-8910-164a360df467.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ff053259-0c9d-4ce3-8910-164a360df467) | [![\[OR\] \[MBSB\] \[P1\] \[S1-S5\] \[C14\] Five Stages of the \_Sustain\_ Phase](https://no-cache.hubspot.com/cta/default/3893111/fb67ccf2-9409-4f6f-b319-aff21f7a574d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fb67ccf2-9409-4f6f-b319-aff21f7a574d) | | | |
| | **eBook 2: Implementing Operational Resilience for MBSB** | | | | | |
| --- | --- | --- | --- | --- | --- | --- |
| | | **eBook 1** | **eBook 2** | **eBook 3** | **C20 \[x\]** | **C21 \[x\]** |
| | | [![eBook Cover \[OR\] \[MBSB\] \[E1\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/3867d3d9-951c-4b8b-83d3-d0294a5e27f8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3867d3d9-951c-4b8b-83d3-d0294a5e27f8) | [![eBook Cover \[OR\] \[MBSB\] \[E2\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/23693331-a4a4-43f3-8b58-f1dee8c34550.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/23693331-a4a4-43f3-8b58-f1dee8c34550) | [![eBook Cover \[OR\] \[MBSB\] \[E3\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/db019f65-9616-4b09-a7bf-c3c1dfb402b7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/db019f65-9616-4b09-a7bf-c3c1dfb402b7) | [![\[OR\] \[GEN\] \[E2\] \[C20\] Conclusion for eBook 2](https://no-cache.hubspot.com/cta/default/3893111/fb88d7a9-cd61-4414-add4-e284049ff375.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fb88d7a9-cd61-4414-add4-e284049ff375) | [![\[OR\] \[GEN\] \[E2\] \[C21\] \[Back Cover\] for eBook 2](https://no-cache.hubspot.com/cta/default/3893111/2e6b224b-6df5-4080-a611-383225744f4f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/2e6b224b-6df5-4080-a611-383225744f4f) |
| | **"Plan" Phase of the Operational Resilience Planning Methodology** | | | | | |
| | **C2** | **C3 \[x\]** | **C4 \[x\]** | **C5 \[x\]** | **C6 \[x\]** | **C7 \[x\]** |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2a29754-d200-4bab-9802-6081ca800251) | [![\[OR\] \[MBSB\] \[P1\] \[S1-S5\] \[C2\] Five Stages of the \_Plan\_ Phase](https://no-cache.hubspot.com/cta/default/3893111/75bee8c4-ed71-46d1-8116-38d39c6b2517.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/75bee8c4-ed71-46d1-8116-38d39c6b2517) | [![\[OR\] \[GEN\] \[E2\] \[P1\] \[S1\] \[C3\] Assessing Capability and Maturity](https://no-cache.hubspot.com/cta/default/3893111/3486f1a4-500e-42ee-a7e1-af2a6008f468.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3486f1a4-500e-42ee-a7e1-af2a6008f468) | [![\[OR\] \[GEN\] \[E2\] \[P1\] \[S2\] \[C4\] Analysing Gaps](https://no-cache.hubspot.com/cta/default/3893111/2c0fd2b3-bb2b-47b6-ad44-5e88c8422b37.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/2c0fd2b3-bb2b-47b6-ad44-5e88c8422b37) | [![\[OR\] \[GEN\] \[E2\] \[P1\] \[S3\] \[C5\] Developing Strategy and Roadmap](https://no-cache.hubspot.com/cta/default/3893111/afe40ca7-42c1-448f-9ce7-74955f58c946.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/afe40ca7-42c1-448f-9ce7-74955f58c946) | [![\[OR\] \[GEN\] \[E2\] \[P1\] \[S4\] \[C6\] Confirming Risk Appetite](https://no-cache.hubspot.com/cta/default/3893111/7228dd2d-4764-4aee-8fb5-899bd5b28874.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7228dd2d-4764-4aee-8fb5-899bd5b28874) | [![\[OR\] \[GEN\] \[E2\] \[P1\] \[S5\] \[C7\] Developing and Embedding Governance](https://no-cache.hubspot.com/cta/default/3893111/e06994e8-b682-4809-b8b8-a7a4f82d0ec7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/e06994e8-b682-4809-b8b8-a7a4f82d0ec7) |
| | **"Implement" Phase of the Operational Resilience Planning Methodology** | | | | | |
| | **C8** | **C9 \[x\]** | **C10 \[x\]** | **C11 \[x\]** | **C12 \[x\]** | **C13 \[x\]** |
| | [![\[OR\] \[MBSB\] \[P1\] \[S1-S5\] \[C8\] Five Stages of the \_Implement\_ Phase](https://no-cache.hubspot.com/cta/default/3893111/ff053259-0c9d-4ce3-8910-164a360df467.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ff053259-0c9d-4ce3-8910-164a360df467) | [![\[OR\] \[GEN\] \[E2\] \[P2\] \[S1\] \[C9\] Identifying Critical Business Services](https://no-cache.hubspot.com/cta/default/3893111/3ac7c230-3ce7-463a-813f-6907a49bdc35.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3ac7c230-3ce7-463a-813f-6907a49bdc35) | [![\[OR\] \[GEN\] \[E2\] \[P2\] \[S2\] \[C10\] Mapping of Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/e7a81126-d48f-4c84-a7b5-db4324ef1b4f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/e7a81126-d48f-4c84-a7b5-db4324ef1b4f) | [![\[OR\] \[GEN\] \[E2\] \[P2\] \[S3\] \[C11\] Establishing Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/54b6c9d1-e897-4530-8eb4-8419de7503aa.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/54b6c9d1-e897-4530-8eb4-8419de7503aa) | [![\[OR\] \[GEN\] \[E2\] \[P2\] \[S4\] \[C12\] Performing Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/fe5cc4a9-b109-417e-ba78-651a6dc4f658.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fe5cc4a9-b109-417e-ba78-651a6dc4f658) | [![\[OR\] \[GEN\] \[E2\] \[P2\] \[S5\] \[C13\] Improving Lessons Learned](https://no-cache.hubspot.com/cta/default/3893111/4e3235b4-3630-4359-89bb-8a3b3c098dc8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4e3235b4-3630-4359-89bb-8a3b3c098dc8) |
| | **"Sustain" Phase of the Operational Resilience Planning Methodology** | | | | | |
| | **C14** | **C15 \[x\]** | **C16 \[x\]** | **C17 \[x\]** | **C18 \[x\]** | **C19 \[x\]** |
| | [![\[OR\] \[MBSB\] \[P1\] \[S1-S5\] \[C14\] Five Stages of the \_Sustain\_ Phase](https://no-cache.hubspot.com/cta/default/3893111/fb67ccf2-9409-4f6f-b319-aff21f7a574d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fb67ccf2-9409-4f6f-b319-aff21f7a574d) | [![\[OR\] \[GEN\] \[E2\] \[P3\] \[S1\] \[C15\] Introducing Cultural Change Management](https://no-cache.hubspot.com/cta/default/3893111/3909fd60-d099-4324-a1d2-2040171a7300.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3909fd60-d099-4324-a1d2-2040171a7300) | [![\[OR\] \[GEN\] \[E2\] \[P3\] \[S2\] \[C16\] Developing a Communication Strategy](https://no-cache.hubspot.com/cta/default/3893111/d3bcd703-2173-4eba-90c3-7d45da459f94.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d3bcd703-2173-4eba-90c3-7d45da459f94) | [![\[OR\] \[GEN\] \[E2\] \[P3\] \[S3\] C17\] Implementing Training and Awareness](https://no-cache.hubspot.com/cta/default/3893111/1e095f66-dca9-4a83-9850-e459cebddbfa.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1e095f66-dca9-4a83-9850-e459cebddbfa) | [![\[OR\] \[GEN\] \[E2\] \[P3\] \[S4\] \[C18\] Providing Self-Assessment](https://no-cache.hubspot.com/cta/default/3893111/076a795c-4733-4fb0-b260-fcec767fb221.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/076a795c-4733-4fb0-b260-fcec767fb221) | [![\[OR\] \[GEN\] \[E2\] \[P3\] \[S5\] \[C19\] Conducting Independent Quality Reviews](https://no-cache.hubspot.com/cta/default/3893111/2cff3f12-e08e-43cf-8ca6-aaa6efe33631.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/2cff3f12-e08e-43cf-8ca6-aaa6efe33631) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/309c3a80-4c3c-4eb9-811d-bd401ccb1610)For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-10-26T14:58:03.533Z",
"datePublished" : "2026-08-27T03:58:43.000Z",
"headline" : "[OR] [MBSB] [E2] [C1] OR Planning Methodology",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-mbsb-e2-c1-or-planning-methodology",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```