[OR] [MBT] [E3] [CBS] [4] [SuPS] Identify Severe but Plausible Scenarios

Sub-CBS Code

Sub-CBS

Impact/Effect

Severe but Plausible Scenario

Proactive Risk Management Action

Link to Integration of Cyber and ICT Risks

4.1

Corporate Account Setup and Onboarding

Inability to onboard corporate clients, delayed cash flow activation

Prolonged outage in Know-Your-Customer (KYC) and onboarding systems due to vendor software compromise

Implement redundant verification tools, enhance the vendor assurance program, and conduct onboarding resilience drills

A third-party onboarding platform cyber breach disrupts system connectivity

4.2

Receivables Management

Disrupted corporate collections, reconciliation failures

Ransomware attack immobilizes receivables processing platform

Deploy advanced endpoint protection, maintain offline backups, conduct ransomware tabletop exercises

Cloud-based receivables processing targeted by malware

4.3

Payables and Disbursement Services Integration

Inability to process corporate disbursements, financial and reputational loss

Distributed Denial of Service (DDoS) attack on the payment gateway infrastructure

Implement DDoS mitigation, resilient routing, and real-time traffic anomaly monitoring

Payment network infrastructure targeted by coordinated attack

4.4

Electronic Banking and Treasury Platform Support

Corporate users are unable to access the treasury platform and authorize transactions

Core treasury platform failure stemming from zero-day vulnerability exploitation

Deploy intrusion detection, apply secure patch management protocol, and conduct platform failover tests

Treasury workstation malware exfiltrates credentials, triggering lockouts

4.5

Cash Concentration and Liquidity Management

Inability to consolidate cash positions and manage liquidity

Critical data corruption event in the liquidity management engine due to system intrusion

Maintain immutable data backups, implement anomaly-based fraud and data tampering detection

Compromise of treasury APIs affecting cash sweep functions

4.6

Cheque Clearing and Settlement Services

Delays in cheque processing and settlement are impacting market trust

National clearinghouse cyber incident halts cheque settlement nationwide

Establish contingency manual processing procedures, coordinate with clearinghouse operators, and maintain bilateral settlement workarounds

Cyberattack on cheque clearing infrastructure

4.7

Corporate Deposits and Cash Vault Services

Disruption to vault operations and physical cash logistics

Insider collusion disrupts secure cash transport communications

Strengthen the insider threat program, implement route encryption, and conduct secure logistics audits

Secure communication channels compromised, enabling fraudulent routing

4.8

Collections Reconciliation and Reporting

Inaccurate reporting, financial loss, and regulatory breach

Data integrity breach leads to mis-reconciled corporate ledgers

Employ continuous reconciliation validation, implement ledger integrity checks, and enhance audit trails

Compromised database triggers inaccurate reporting

4.9

Complaint, Exception, and Dispute Management

Increased customer dissatisfaction and legal exposure

Surge of fraudulent dispute cases generated via a social engineering threat campaign

Strengthen identity validation controls, enhance dispute fraud analytics, and conduct staff fraud awareness training

Social engineering threat actors exploit the customer service portal

4.10

Regulatory and Compliance Monitoring

Regulatory fines, reputational damage, supervisory restrictions

Regulatory reporting module failure resulting from targeted malware

Maintain alternative compliance reporting pipeline, enhance reg-tech system hardening

Malware corrupts compliance reporting feeds and validation logic