
CBS-7 Digital and Online Banking Services
The mapping of processes and resources is a core activity within the operational resilience framework.
It ensures that Metrobank can understand and document how each critical business service (CBS) is delivered, as well as the dependencies that exist across people, processes, technology, and third parties.
For CBS-7 Digital and Online Banking Services, this mapping provides a structured view of the end-to-end digital service ecosystem, enabling customers to access banking products and services through digital channels.
This mapping exercise enables Metrobank to identify vulnerabilities, single points of failure, and dependencies across internal and external functions, ensuring that resilience strategies and impact tolerances are based on a thorough understanding of how these digital services operate in practice.
Table P3: Map Processes and Resources for CBS-7
|
Sub-CBS Code |
Sub-CBS |
Processes |
People |
Technology (Applications & Infrastructure) |
Third-Party Vendors |
Upstream / Downstream Dependencies |
|
7.1 |
Online Banking Platform Management |
Platform administration, system updates, user session management, backend integration with core banking systems |
IT operations, platform engineers, system administrators |
Online banking portal, middleware servers, load balancers, database servers |
Core banking software provider, hosting/cloud service vendors |
Upstream: Core banking systems; Downstream: Customer access channels |
|
7.2 |
Mobile Banking Application Services |
Mobile app deployment, maintenance, version control, security patching, UI/UX updates |
Mobile app developers, cybersecurity team, and digital product managers |
Mobile app framework (Android/iOS), APIs, push notification systems |
App store partners (Apple, Google), API gateway providers |
Upstream: Core banking APIs; Downstream: Customer transactions |
|
7.3 |
Digital Account Access and Authentication |
Login management, multi-factor authentication (MFA), password reset, and session monitoring |
IT security team, access control administrators |
Authentication server, identity management system, MFA solution |
Identity verification providers, SMS gateway vendors |
Upstream: User data management; Downstream: Digital channels (web/mobile) |
|
7.4 |
Online Funds Transfer and Payment Processing |
Processing of intrabank/interbank transfers, bill payments, and merchant settlements |
Payment operations, treasury support, reconciliation officers |
Payment gateway, interbank transfer system (PESONet, InstaPay), transaction monitoring tools |
Payment processors, clearinghouse providers, BSP networks |
Upstream: Core banking and payment authorization systems; Downstream: Beneficiary accounts |
|
7.5 |
Digital Customer Onboarding and e-KYC |
Customer identity verification, document upload, background checks, and account creation |
Compliance team, digital onboarding specialists |
e-KYC platform, document capture system, customer data storage |
e-KYC and AML verification vendors, credit bureaus |
Upstream: Customer data sources; Downstream: Account management systems |
|
7.6 |
Digital Customer Support and Service Channels |
Chatbot operations, live chat handling, and online query management |
Contact center agents, chatbot administrators, and customer service officers |
CRM system, chatbot platform, knowledge base, ticketing tools |
Chatbot service provider, contact center outsourcers |
Upstream: Customer information system; Downstream: Issue resolution workflows |
|
7.7 |
Card-Not-Present (CNP) and e-Commerce Transaction Processing |
Transaction authorization, fraud checks, and chargeback handling |
Payments team, fraud risk management, merchant relationship officers |
Payment processing platform, fraud detection engine, tokenization system |
Card network providers (Visa, Mastercard), fraud analytics partners |
Upstream: Card issuing system; Downstream: Merchant acquirers, settlement systems |
|
7.8 |
ATM and Electronic Channel Management |
ATM transaction processing, cash replenishment monitoring, and terminal management |
Channel operations team, ATM engineers, cash logistics |
ATM management software, switch systems, network communication tools |
ATM vendors, cash logistics partners, network providers |
Upstream: Core banking; Downstream: Customer withdrawals and deposits |
|
7.9 |
Cybersecurity and Fraud Monitoring for Digital Channels |
Threat detection, incident response, transaction anomaly analysis |
Cybersecurity analysts, fraud investigation officers |
SIEM tools, intrusion detection systems (IDS), and fraud analytics software |
Cyber threat intelligence providers, managed security service providers |
Upstream: Digital channel data; Downstream: Incident management and reporting |
|
7.10 |
Digital Banking Data Management and Reporting |
Data extraction, analytics, report generation, compliance reporting |
Data analysts, compliance reporting team, and IT support |
Data warehouse, analytics tools, and regulatory reporting systems |
Data analytics service providers, reporting solution vendors |
Upstream: Core and digital banking data sources; Downstream: BSP and internal reports |
The mapping of processes and resources for CBS-7 Digital and Online Banking Services demonstrates the extensive interconnection between Metrobank’s digital platforms, core banking infrastructure, and third-party ecosystems.
By establishing this detailed view, Metrobank ensures that each sub-service—from online banking to mobile app operations and cybersecurity—has clear accountability and dependency pathways documented.
This understanding enables Metrobank to:
- Identify potential single points of failure and operational risks.
- Support effective impact tolerance setting and scenario testing.
- Strengthen coordination between business, IT, and third-party partners during disruptions.
Ultimately, this mapping reinforces Metrobank’s ability to maintain the resilience and continuity of its digital banking services, ensuring that customers retain access to critical financial services even during adverse events.
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

![BB OR [A] 7 BB OR [A] 7](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/OR%20Pictures%20A/BB%20OR%20Folder%20A/BB%20OR%20%5BA%5D%207.jpg?width=2000&height=1333&name=BB%20OR%20%5BA%5D%207.jpg)


![Banner [Table] [OR] [E3] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/5af5497a-aa7f-41e4-b5ed-c9da8601d4ef.png)
![Banner [Summing] [OR] [E3] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/61e5330e-051c-4874-b6da-a1be8393c283.png)
![[OR] [MBT] [E3] [CBS] [7] [DP] Digital and Online Banking Services](https://no-cache.hubspot.com/cta/default/3893111/c47a4937-4109-4d28-9d0c-f7bc2461ba12.png)
![[OR] [MBT] [E3] [CBS] [7] [MD] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/9db4d0f4-354c-4fc8-b69d-808fea4879be.png)
![[OR] [MBT] [E3] [CBS] [7] [ITo] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/6f245a6c-acf7-4aee-bf23-31eafc8e55ae.png)
![[OR] [MBT] [E3] [CBS] [7] [SuPS] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/c1993c4d-a471-4596-93e6-09c5ffc74ac5.png)
![[OR] [MBT] [E3] [CBS] [7] [ST] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/7c904ed5-8d88-498a-b94e-32c80918f743.png)





![[BL-OR] [3-4-5] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)
![[BL-OR] [3] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)
![Email to Sales Team [BCM Institute]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)








