[OR] [MBT] [E2] [P2] [S4] [C12] Performing Scenario Testing

Performing Scenario Testing

(Stage of the “Implement” Phase – Operational Resilience Planning Methodology for Metrobank)

Introduction

In the evolving financial landscape of the Philippines, operational resilience is no longer a reactive requirement but a strategic imperative. For Metrobank, performing Scenario Testing represents a crucial validation step in the Implement phase of its Operational Resilience Planning Methodology.

Through this exercise, Metrobank ensures that its Critical Business Services (CBS)—such as deposit and withdrawal operations, payment and fund transfers, and ATM services—can withstand severe yet plausible disruptions while maintaining continuity of essential services to customers.

In alignment with the Bangko Sentral ng Pilipinas (BSP) Circular No. 1149 (Series of 2022) on Operational Resilience of BSP-Supervised Financial Institutions (BSFIs), scenario testing is required to assess the bank’s ability to continue operations, recover within established impact tolerances, and protect the integrity of the Philippine financial system.

Metrobank’s testing program embodies BSP’s principle of “proportionate resilience”—ensuring preparedness that matches the bank’s size, complexity, and systemic importance.

Objectives of Scenario Testing

The objectives of scenario testing are to:

1. Validate whether Metrobank’s business continuity and recovery strategies can maintain service delivery within impact tolerances.
2. Identify potential weaknesses, single points of failure, and dependency risks.
3. Assess the adequacy of response and recovery capabilities under realistic stress conditions.
4. Strengthen Metrobank’s alignment with BSP’s operational resilience expectations and international best practices.

Implementation Steps for Performing Scenario Testing

Step 1: Define Scope and Objectives

Metrobank begins by defining the scope of each scenario test based on its Critical Business Services (CBS) identified in earlier phases. The objectives of each test are clearly articulated—for example, verifying that fund transfer services can recover within the set impact tolerance of two hours following a major systems outage.

Example:

A scenario may focus on testing Metrobank’s payment processing capability during a cyberattack that disrupts access to its data centres in Makati and Quezon City.

Step 2: Develop Severe but Plausible Scenarios

Scenarios must represent realistic yet challenging disruptions. BSP emphasises that BSFIs must test their resilience against both idiosyncratic (institution-specific) and systemic (market-wide) events.

Example Scenario Categories:

• Technology Failure: Core banking system outage or ATM network disruption.
• Cyber Incident: Ransomware attack impacting digital banking channels.
• Third-Party Failure: Disruption of critical vendors such as payment gateways or telecommunications providers.
• Operational Disruption: Extended power failure affecting multiple branches.
• Natural Disaster: Earthquake or typhoon causing prolonged data center downtime.

Metrobank’s Operational Risk Management (ORM) and IT Risk teams collaborate with the Business Continuity Management (BCM) Office to ensure scenarios reflect emerging threats and regulatory concerns.

Step 3: Establish Impact Tolerances and Success Criteria

Each scenario must be measured against Metrobank’s impact tolerance thresholds, which were defined during the Establish Impact Tolerance stage. These include metrics such as maximum allowable downtime, acceptable data loss, and customer transaction recovery time.

Example

For CBS-2 (Payments and Fund Transfers), the impact tolerance is defined as no more than two hours of service unavailability. The scenario test will evaluate whether the bank’s recovery plan meets this tolerance during a simulated cyberattack.

Step 4: Execute Scenario Testing

Metrobank performs scenario testing through a structured and controlled exercise that engages cross-functional teams from Operations, IT, Risk, Compliance, and Business Units. The test should simulate conditions closely resembling real-life crises while ensuring data and systems integrity.

Types of Scenario Testing:

• Tabletop Exercises: Discussion-based simulations to evaluate response decision-making.
• Live Simulations: Controlled disruption of systems or processes to test failover capabilities.
• Integrated Crisis Exercises: Multi-departmental simulation combining cyber, physical, and reputational stressors.

Example

Metrobank’s Integrated Crisis Exercise 2025 tests simultaneous loss of primary data center connectivity and ATM network outage, evaluating the effectiveness of communication and recovery coordination across business units.

Step 5: Record Results and Analyse Performance

All results from scenario tests must be documented and analysed. The BCM Office compiles detailed reports, including:

• Actual vs. expected recovery times
• Gaps in escalation or coordination
• Issues in third-party dependencies
• Resource adequacy and communication effectiveness

Example

If a simulated cyberattack test reveals delayed decision-making in the activation of the crisis management team, corrective actions such as refined escalation triggers or updated playbooks are proposed.

Step 6: Recommend Improvements and Follow-Up Actions

Post-test reviews should lead to continuous improvement. Gaps identified are addressed through action plans that may involve:

• Enhancing backup and redundancy solutions
• Updating vendor contracts to strengthen SLA resilience
• Conducting retraining for crisis response teams
• Adjusting impact tolerances based on test insights

BSP mandates periodic reviews and “lessons learned” documentation to ensure sustained improvement of operational resilience practices.

Compliance Alignment with BSP Guidelines

The following compliance principles are drawn from the BSP Operational Resilience Framework (Circular No. 1149, Series of 2022):

Template: Management Review of Scenario Testing Results

Scenario testing is the cornerstone of Metrobank’s operational resilience capability—transforming preparedness into measurable assurance.

Through rigorous simulation of adverse scenarios, Metrobank not only validates its ability to operate within impact tolerances but also strengthens its governance, risk awareness, and recovery capabilities in line with BSP’s operational resilience principles.

This proactive approach ensures that even amid severe disruptions—whether technological, cyber, or environmental—Metrobank can continue delivering essential financial services, maintaining trust, and supporting the stability of the Philippine banking system.

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.