---
title: [OR] [MBT] [E3] [CBS] [4] [ST] Perform Scenario Testing
description: [OR] [MBT] [E3] [CBS] [4] [ST] Perform Scenario Testing
image: https://blog.bcm-institute.org/hubfs/Metrobank%20PH%20Graphic%20Folder/Metrobank%20E3%20Morepost/Metrobank%20CBS%204/%5BOR%5D%20%5BMBT%5D%20%5BE3%5D%20%5BCBS%5D%20%5B4%5D%20%5BST%5D%20Perform%20Scenario%20Testing.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Building Resilient Banking Operations: The Metrobank Operational Resilience Implementation Guide
# \[OR\] \[MBT\] \[E3\] \[CBS\] \[4\] \[ST\] Perform Scenario Testing
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/87e7f49d-dbef-4f23-931f-4a1f511f70bf)
Scenario testing constitutes a core tenet of the operational resilience framework. It enables Metrobank to rigorously challenge the resilience of its Corporate Cash Management and Collections service by exposing critical processes to severe yet plausible disruption scenarios.
This structured test regime validates the bank’s ability to absorb shocks, adapt in real time, and continue delivering essential client services without breaching impact tolerances.
The scenario constructs integrate cyber and ICT risks, reflecting the heightened threat landscape in digital banking operations, while evidencing proactive risk mitigation and readiness actions undertaken by Metrobank.
This chapter outlines recommended scenario testing for CBS-3 ATM and Branch Cash Services, integrates Cyber and ICT risks, and highlights proactive actions that Metrobank should undertake.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c32e9b3-ea88-44c3-9182-fa3e6a9aadee)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Nov 11, 2025
###### Operational Resilience Certified Planner-Specialist-Expert
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/2196d2c2-e6e2-49b4-ba01-e7d03071dd00)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c32e9b3-ea88-44c3-9182-fa3e6a9aadee)
### **CBS-4 Corporate Cash Management and Collections**
[![\[OR\] \[MBT\] \[E3\] \[CBS\] \[4\] \[ST\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/dae4bbe4-a540-4056-8fb6-0c3ac6c51976.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/dae4bbe4-a540-4056-8fb6-0c3ac6c51976)
Scenario testing constitutes a core tenet of the operational resilience framework. It enables Metrobank to rigorously challenge the resilience of its Corporate Cash Management and Collections service by exposing critical processes to severe yet plausible disruption scenarios.
This structured test regime validates the bank’s ability to absorb shocks, adapt in real time, and continue delivering essential client services without breaching impact tolerances.
The scenario constructs integrate cyber and ICT risks, reflecting the heightened threat landscape in digital banking operations, while evidencing proactive risk mitigation and readiness actions undertaken by Metrobank.
[![Banner \[Table\] \[OR\] \[E3\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/a45e9708-7139-4f4e-8e0e-41179f5cacc3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a45e9708-7139-4f4e-8e0e-41179f5cacc3)
##### Table P6: Perform Scenario Testing for CBS-4
| Sub-CBS Code | Sub-CBS | Recommended Scenario Testing | Integration of Cyber & ICT Risks | Evidence of Proactive Risk Management Action |
| --- | --- | --- | --- | --- |
| 4.1 | Corporate Account Setup and Onboarding | Sudden surge in corporate onboarding requests due to competitor outage, and system workflow failure impacting KYC/AML validation | Phishing attempt compromising onboarding portal credentials; onboarding platform outage | Enhanced identity verification controls; regular anti-phishing exercises; stress test the KYC engine throughput |
| 4.2 | Receivables Management | Payment file corruption leading to inaccurate receivables posting; high-volume bulk receivables spike | Ransomware is affecting the payment file processing system | Segmented back-up environment; regular file integrity audits; ransomware simulation drills |
| 4.3 | Payables and Disbursement Services Integration | Failure of the automated payments interface is causing delayed vendor settlement | Malware-induced API disruption across the disbursement gateway | API failover testing; network segmentation; enhanced behavioural monitoring for anomalous API traffic |
| 4.4 | Electronic Banking and Treasury Platform Support | Treasury portal outage during peak trading hours | Distributed Denial of Service (DDoS) attack on online banking and treasury platforms | DDoS playbooks tested; capacity scaling exercises; real-time cyber-threat intelligence integration |
| 4.5 | Cash Concentration and Liquidity Management | Sudden liquidity stress triggered by simultaneous major client withdrawals | Cyber-initiated fraudulent transfer attempt draining liquidity pools | Dual-authentication controls; anomaly-based fund transfer monitoring; liquidity stress simulations |
| 4.6 | Cheque Clearing and Settlement Services | National cheque clearing disruption and manual fallback activation | Malware targeting clearing network interfaces | Settlement system patch governance; manual settlement drill; secure isolated recovery environment |
| 4.7 | Corporate Deposits and Cash Vault Services | Major vault system outage impacting high-value deposits processing | Internal system breach targeting deposit account management | Privileged access monitoring; vault system failover testing; enhanced audit trails |
| 4.8 | Collections Reconciliation and Reporting | Reconciliation engine latency is causing delayed corporate reporting | Data integrity breach within the reconciliation platform | Backup ledger validation; reconciliation exception handling drills; encryption reviews |
| 4.9 | Complaint, Exception, and Dispute Management | Surge in dispute cases following a payment misposting event | Customer data breach causing complaint volume spike | Incident response testing; call-centre overflow capability; automated fraud alert routing |
| 4.10 | Regulatory and Compliance Monitoring | Breakdown in automated compliance reporting feeds | Cyberattack is manipulating compliance reporting logs | Continuous monitoring dashboards; immutable audit logs; regulatory stress exercises |
[![Banner \[Summing\] \[OR\] \[E3\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/11895c06-91e9-4cec-acb6-4356741952e4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/11895c06-91e9-4cec-acb6-4356741952e4)
This scenario testing framework operationalises resilience through structured experimentation against high-impact scenarios. By embedding cyber and ICT threat vectors into service-level testing, Metrobank reinforces its governance posture and strengthens crisis readiness.
The exercises provide quantitative and qualitative assurance that CBS-4 Corporate Cash Management and Collections can maintain service continuity, uphold customer trust, and remain compliant under adverse conditions.
These drills drive proactive improvement, ensuring Metrobank continuously advances toward industry-leading operational resilience standards.
| Building Resilient Banking Operations: The Metrobank Operational Resilience Implementation Guide | | | | | |
| --- | --- | --- | --- | --- | --- |
| **eBook 3: Starting Your OR Implementation** | | | | | |
| **CBS-4 Corporate Cash Management and Collections** | | | | | |
| **CBS-4 DP** | **CBS-4 MD** | **CBS-4 MPR** | **CBS-4 ITo** | **CBS-4 SuPS** | **CBS-4 ST** |
| [![\[OR\] \[MBT\] \[E3\] \[CBS\] \[4\] \[DP\] Corporate Cash Management and Collections](https://no-cache.hubspot.com/cta/default/3893111/65e8b96f-f1f0-4e47-a203-c6c12fa7c7c1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/65e8b96f-f1f0-4e47-a203-c6c12fa7c7c1) | [![\[OR\] \[MBT\] \[E3\] \[CBS\] \[4\] \[MD\] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/816935b0-eb61-43ee-90e2-83897cbfaebe.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/816935b0-eb61-43ee-90e2-83897cbfaebe) | [![\[OR\] \[MBT\] \[E3\] \[CBS\] \[4\] \[MPR\] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/b48a4a6d-1f49-4e5b-a8bf-737b992dd2dc.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b48a4a6d-1f49-4e5b-a8bf-737b992dd2dc) | [![\[OR\] \[MBT\] \[E3\] \[CBS\] \[4\] \[ITo\] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/81ee3a29-9581-43f6-86e4-855cc5aed715.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/81ee3a29-9581-43f6-86e4-855cc5aed715) | [![\[OR\] \[MBT\] \[E3\] \[CBS\] \[4\] \[SuPS\] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/459370ef-9ccd-4d2b-b47f-74ca17b3d374.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/459370ef-9ccd-4d2b-b47f-74ca17b3d374) | [![\[OR\] \[MBT\] \[E3\] \[CBS\] \[4\] \[ST\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/dae4bbe4-a540-4056-8fb6-0c3ac6c51976.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/dae4bbe4-a540-4056-8fb6-0c3ac6c51976) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2025-11-11T06:11:26.855Z",
"datePublished" : "2025-11-11T06:10:18.000Z",
"headline" : "[OR] [MBT] [E3] [CBS] [4] [ST] Perform Scenario Testing",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-mbt-e3-cbs-4-st-perform-scenario-testing",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```