
Consolidated Report
Map Processes and Resources for CBF-1 to CBF-12
Introduction
This chapter forms a critical foundation in Metrobank’s Operational Resilience journey by systematically mapping the end-to-end processes and supporting resources that enable the delivery of its Critical Business Services (CBS-1 to CBS-12).
In an increasingly complex banking environment, service disruption rarely stems from a single failure; instead, it arises from interconnected breakdowns across people, processes, technology, third-party providers, and dependencies.
By presenting a structured view of how each CBS is delivered, this chapter equips readers with a clear understanding of how operational capabilities are assembled and where vulnerabilities may exist across Metrobank’s value chain.
The purpose of this chapter is to establish transparency and traceability between critical services and the underlying operational components that support them.
Readers are expected to learn how to identify key process flows, critical roles, enabling systems, external dependencies, and upstream and downstream linkages for each CBS.
This understanding is essential to support impact tolerance setting, scenario testing, and investment prioritisation. By the end of this chapter, stakeholders should be able to articulate not only what resources support a CBS but also how those resources interact to sustain service delivery under both normal and stressed conditions.
Table P3:-1 Map Processes and Resources for CBS-1 to CBS-12
|
Sub-CBS Code |
Name of Sub-CBS |
Processes |
People |
Technology (applications and infrastructure) |
Third-party vendors |
Upstream / Downstream Dependencies |
|
1.1 |
Cash Deposit at Branches |
Cash handling, account crediting, cashier operations |
Branch tellers, branch managers, customer service reps |
Cash deposit machines, banking software, and a branch network |
None |
Integration with central banking systems for account updating |
|
1.2 |
Deposit via ATMs |
ATM deposit transaction processing, verification |
ATM technicians, network operations team |
ATMs, backend deposit systems |
ATM maintenance providers |
ATM networks, central banking infrastructure |
|
1.3 |
Online/Internet Banking Deposits |
E-banking interface management, deposit verification |
E-banking team, IT support |
Online banking platform, secure transaction systems |
Payment gateways, cybersecurity vendors |
Core banking integration, payment processors |
|
1.4 |
Cash Withdrawal at Branches |
Withdrawal request processing, authentication |
Branch tellers, security personnel |
Cash withdrawal systems, authentication systems |
None |
Integration with account systems, cash handling logistics |
|
1.5 |
ATM Withdrawals |
ATM transaction & PIN authentication, cash disbursement |
ATM network operations, customer service |
ATMs, transaction processing systems |
ATM suppliers, maintenance providers |
ATM infrastructure, core banking systems |
|
1.6 |
Online/Internet Banking Withdrawals |
Online withdrawal request, authentication |
E-banking team, IT support |
Online banking, transaction processing |
Payment gateway providers, cybersecurity vendors |
Core banking, payment systems |
|
1.7 |
Failed Deposits or Withdrawals |
Error detection, transaction reversal, notification |
Customer service, technical support |
Transaction systems, CRM systems |
None |
Core banking error resolution |
|
1.8 |
Fraud Detection and Prevention |
Fraud monitoring, transaction analysis |
Fraud team, IT security, service reps |
Fraud systems, monitoring tools |
Cybersecurity and fraud detection providers |
Core banking and transaction systems |
|
2.1 |
Transaction Initiation |
Initiating payment requests |
Frontline staff, customer service |
Online & mobile banking platforms |
PSPs (e.g., VISA, MasterCard) |
Upstream: Customer accounts; Downstream: Validation |
|
2.2 |
Transaction Validation |
Validate transaction details |
Validation team, compliance officers |
Core banking, fraud systems |
Validation system vendors |
Upstream: Initiation; Downstream: Authorisation |
|
2.3 |
Transaction Authorization |
OTP / multi-factor authorization |
Authorisation officers, risk team |
Authentication systems |
OTP & biometrics providers |
Upstream: Validation; Downstream: Settlement |
|
2.4 |
Transaction Settlement |
Settle with counterparty banks |
Settlement team, treasury ops |
Real-time settlement, SWIFT, ACH |
Clearing houses |
Upstream: Authorisation; Downstream: Reconciliation |
|
2.5 |
Reconciliation |
Match and reconcile records |
Accounting & operations team |
Reconciliation software |
Reporting tool vendors |
Upstream: Settlement; Downstream: Dispute |
|
2.6 |
Dispute Resolution |
Resolve transaction issues |
Customer service, legal, fraud dept |
Dispute platform, CRM |
Legal, fraud investigation vendors |
Upstream: Reconciliation; Downstream: Compliance |
|
2.7 |
Compliance and Reporting |
Prepare compliance reports |
Compliance officers, auditors |
Compliance systems |
Regulatory bodies, auditors |
Upstream: Dispute; Downstream: Monitoring |
|
2.8 |
System Maintenance and Monitoring |
Systems upkeep & monitoring |
IT ops, network admins |
System monitoring tools |
Cloud & IT support vendors |
— |
|
3.1 |
ATM Cash Withdrawal Services |
ATM processing & verification |
ATM cashiers, branch managers |
ATM network, processing systems |
ATM vendors (Diebold, NCR) |
Upstream: CBS-1; Downstream: CBS-4 |
|
3.2 |
Branch Cash Withdrawal Services |
Teller cash withdrawal processing |
Bank tellers, branch managers |
Core banking, cash systems |
ATM & cash system suppliers |
Upstream: CBS-1; Downstream: CBS-4 |
|
3.3 |
Cash Deposit Services |
Deposit processing, reconciliation |
Bank tellers, deposit officers |
Cash recycler machines, transaction systems |
Cash handling vendors |
Upstream: CBS-1; Downstream: CBS-2 |
|
3.4 |
Cash Handling & Replenishment |
Ordering & moving cash |
Cash management staff, branch managers |
Cash systems, logistics tools |
Cash logistics firms (e.g., Loomis) |
Within CBS-3 |
|
3.5 |
ATM Maintenance & Troubleshooting |
ATM diagnostics & updates |
ATM engineers, IT support |
ATM monitoring & diagnostic software |
ATM service providers |
Linked within CBS-3 |
|
4.1 |
Corporate Account Setup & Onboarding |
Corporate KYC, account setup |
RMs, KYC analysts, IT access admins |
Core banking, onboarding & eKYC platforms |
External KYC verification |
Upstream: Cust info; Downstream: e-banking |
|
4.2 |
Receivables Management |
Invoice processing & posting |
Receivables ops, treasury support |
Cash mgmt system, data warehouse |
Payment processors |
Upstream: ERP; Downstream: GL systems |
|
4.3 |
Payables & Disbursement Integration |
Bulk payments processing |
Cash ops, payment analysts |
ACH/RTGS gateways |
Clearing houses, network providers |
ERP upload; Downstream: Central bank |
|
4.4 |
Electronic Banking & Treasury Support |
E-banking & treasury ops |
Digital banking engineers |
e-Banking/treasury platforms, APIs |
Platform & cybersecurity vendors |
Identity systems; Downstream: Payments |
|
4.5 |
Cash Concentration & Liquidity Mgmt |
Sweep setup & balance tracking |
Treasury liquidity desk |
Liquidity engine & reporting systems |
SWIFT providers |
Transaction systems; Downstream: Treasury |
|
4.6 |
Cheque Clearing & Settlement |
Cheque processing & settlement |
Clearing ops, branch ops |
Cheque imaging & batch servers |
National clearing system |
Branch deposits; Downstream: Core banking |
|
4.7 |
Corporate Deposits & Cash Vault Services |
Deposit acceptance & vault handling |
Vault custodians & coordinators |
Vault inventory & secure intranet |
Armored transport |
Upstream: Branch cash; Down: Treasury |
|
4.8 |
Collections Reconciliation & Reporting |
Exception matching & reports |
Reconciliation analysts, MIS |
Reconciliation engine, BI tools |
Data vendors |
Transaction systems; Down: Reporting |
|
4.9 |
Complaint, Exception & Dispute Mgmt |
Case intake & resolution |
Support, dispute analysts |
CRM, case management systems |
Complaint support providers |
Transaction logs; Down: Compliance |
|
4.10 |
Regulatory & Compliance Monitoring |
Reporting, AML monitoring |
Compliance & risk teams |
AML & reporting systems |
Reporting intermediaries |
Transaction DBs; Down: Regulators |
|
5.1 |
Retail Loan Origination & Assessment |
Loan intake & credit scoring |
Loan officers, analysts |
LOS, CRM, scoring tools |
Credit bureaus |
CRM & banking systems |
|
5.2 |
Corporate/Commercial Underwriting |
Financial analysis & collateral eval |
RMs, underwriters |
Underwriting & risk tools |
Appraisers, risk assessors |
Corporate & loan systems |
|
5.3 |
SME Financing & Credit |
SME review & approval |
SME loan officers |
SME loan systems |
SME data aggregators |
CRM & financial systems |
|
5.4 |
Credit Approval & Sanctioning |
Credit review & sanctioning |
Credit committee, underwriters |
Approval workflow systems |
Legal & audit firms |
Banking & risk systems |
|
5.5 |
Loan Documentation & Contract Execution |
Contract drafting & execution |
Legal team & loan officers |
Document mgmt & e-signature |
Legal firms, notaries |
Loan systems |
|
5.6 |
Collateral Mgmt & Security Registration |
Collateral registration |
Collateral officers, legal |
Collateral & registry systems |
Registry offices |
Loan & legal systems |
|
5.7 |
Loan Disbursement & Account Setup |
Disbursement & account creation |
Loan ops & treasury team |
Loan servicing & disb systems |
Payment processors |
Account systems |
|
5.8 |
Loan Servicing & Customer Support |
Payment tracking & queries |
Customer service agents |
Servicing & CRM platforms |
Call centres, gateways |
Loan & payment systems |
|
5.9 |
Credit Monitoring & Risk Review |
Risk assessment & review |
Risk managers & analysts |
Risk & portfolio software |
Analytics providers |
Loan & finance systems |
|
5.10 |
Collections & Delinquency Mgmt |
Debt recovery & negotiations |
Collections agents |
Collections & reminder systems |
Collection agencies, legal |
Loan & payment systems |
|
5.11 |
Regulatory Reporting & Compliance |
Compliance filings & checks |
Compliance & finance teams |
Compliance & reporting tools |
Regulatory bodies |
Financial systems |
|
5.12 |
Loan Portfolio Analytics & Strategy |
Performance & forecasting |
Portfolio managers |
BI & analytics platforms |
Data providers |
Loan & analytics systems |
|
6.1 |
Liquidity & Cash Management |
Liquidity monitoring & forecasting |
Treasury desk & risk/finance |
TMS, core banking, SWIFT |
Correspondent banks |
Upstream: deposits & payments |
|
6.2 |
Money Market Operations |
Interbank lending/borrowing |
Dealers, middle office |
TMS, market data tools |
Brokers, clearing banks |
Up: liquidity desk |
|
6.3 |
Foreign Exchange Trading & Settlement |
FX dealing & settlement |
FX traders & operations |
FX platforms, risk systems |
Correspondent banks |
Market data; downstream settlement |
|
6.4 |
Fixed Income & Securities Trading |
Bond trading & booking |
Dealers & compliance |
Trading & settlement platforms |
Exchanges, custodians |
Market data; downstream settlement |
|
6.5 |
Derivatives Trading & Risk Mgmt |
Derivatives execution & risk |
Derivatives desk & risk team |
Derivatives systems & risk tools |
CCPs & brokers |
Market data; settlement |
|
6.6 |
Treasury Ops & Back-Office Support |
Settlement, reconciliation |
Treasury ops & finance |
Settlement & reconciliation tools |
Custodians, clearing agents |
Trading desks & finance |
|
6.7 |
Collateral & Margin Management |
Collateral valuation & posting |
Collateral analysts & risk |
Collateral & risk platforms |
Custodians & CCPs |
Derivatives & repo desks |
|
6.8 |
Treasury Risk Monitoring & Compliance |
Market risk surveillance |
Risk control & compliance |
Analytics & surveillance tools |
Reporting vendors |
Treasury systems |
|
6.9 |
Investment Portfolio Management |
Strategic investment planning |
Investment & ALM teams |
Portfolio & ALM tools |
Custodians, research |
Macro data & reporting |
|
6.10 |
Market Data & Pricing Support |
Market data aggregation & pricing |
Market data analysts |
Market data distribution tech |
Data vendors |
External market sources |
Table P3:-2 Map Processes and Resources for CBS-1 to CBS-12
|
Sub-CBS Code |
Name of Sub-CBS |
Processes |
People |
Technology (applications and infrastructure) |
Third-party vendors |
Upstream / Downstream Dependencies |
|
7.1 |
Online Banking Platform Management |
Platform administration, system updates, user session management, backend integration with core banking systems |
IT operations, platform engineers, system administrators |
Online banking portal, middleware servers, load balancers, database servers |
Core banking software provider, hosting/cloud service vendors |
Upstream: Core banking systems; Downstream: Customer access channels |
|
7.2 |
Mobile Banking Application Services |
Mobile app deployment, maintenance, version control, security patching, UI/UX updates |
Mobile app developers, cybersecurity team, and digital product managers |
Mobile app framework (Android/iOS), APIs, push notification systems |
App store partners (Apple, Google), API gateway providers |
Upstream: Core banking APIs; Downstream: Customer transactions |
|
7.3 |
Digital Account Access and Authentication |
Login management, multi-factor authentication (MFA), password reset, and session monitoring |
IT security team, access control administrators |
Authentication server, identity management system, MFA solution |
Identity verification providers, SMS gateway vendors |
Upstream: User data management; Downstream: Digital channels (web/mobile) |
|
7.4 |
Online Funds Transfer and Payment Processing |
Processing of intrabank/interbank transfers, bill payments, and merchant settlements |
Payment operations, treasury support, reconciliation officers |
Payment gateway, interbank transfer system (PESONet, InstaPay), transaction monitoring tools |
Payment processors, clearinghouse providers, BSP networks |
Upstream: Core banking and payment authorization systems; Downstream: Beneficiary accounts |
|
7.5 |
Digital Customer Onboarding and e-KYC |
Customer identity verification, document upload, background checks, and account creation |
Compliance team, digital onboarding specialists |
e-KYC platform, document capture system, customer data storage |
e-KYC and AML verification vendors, credit bureaus |
Upstream: Customer data sources; Downstream: Account management systems |
|
7.6 |
Digital Customer Support and Service Channels |
Chatbot operations, live chat handling, and online query management |
Contact centre agents, chatbot administrators, and customer service officers |
CRM system, chatbot platform, knowledge base, ticketing tools |
Chatbot service provider, contact centre outsourcers |
Upstream: Customer information system; Downstream: Issue resolution workflows |
|
7.7 |
Card-Not-Present (CNP) and e-Commerce Transaction Processing |
Transaction authorisation, fraud checks, and chargeback handling |
Payments team, fraud risk management, merchant relationship officers |
Payment processing platform, fraud detection engine, tokenisation system |
Card network providers (Visa, Mastercard), fraud analytics partners |
Upstream: Card issuing system; Downstream: Merchant acquirers, settlement systems |
|
7.8 |
ATM and Electronic Channel Management |
ATM transaction processing, cash replenishment monitoring, and terminal management |
Channel operations team, ATM engineers, cash logistics |
ATM management software, switch systems, network communication tools |
ATM vendors, cash logistics partners, network providers |
Upstream: Core banking; Downstream: Customer withdrawals and deposits |
|
7.9 |
Cybersecurity and Fraud Monitoring for Digital Channels |
Threat detection, incident response, transaction anomaly analysis |
Cybersecurity analysts, fraud investigation officers |
SIEM tools, intrusion detection systems (IDS), and fraud analytics software |
Cyber threat intelligence providers, managed security service providers |
Upstream: Digital channel data; Downstream: Incident management and reporting |
|
7.10 |
Digital Banking Data Management and Reporting |
Data extraction, analytics, report generation, compliance reporting |
Data analysts, compliance reporting team, and IT support |
Data warehouse, analytics tools, and regulatory reporting systems |
Data analytics service providers, reporting solution vendors |
Upstream: Core and digital banking data sources; Downstream: BSP and internal reports |
|
8.1 |
Client Onboarding and Profiling |
Account opening, Client profiling, KYC (Know Your Customer) verification |
Relationship Managers, Client Advisors |
CRM systems, KYC verification tools, and Client data management systems |
KYC/AML service providers |
Upstream: Client inquiries, Downstream: Account management |
|
8.2 |
Investment Advisory and Portfolio Management |
Investment strategy formulation, Portfolio management, Risk assessment |
Investment Advisors, Portfolio Managers |
Portfolio management software, Risk assessment tools, Market data feeds |
Asset managers, External investment analysts |
Upstream: Market data, Downstream: Client portfolio adjustments |
|
8.3 |
Trust Account Establishment and Administration |
Trust setup, Documentation preparation, Trustee selection, Ongoing management |
Trust Officers, Legal Advisors |
Trust management software, Document storage systems, Compliance and legal review tools |
Legal consultants, Trust custodians |
Upstream: Legal and regulatory requirements, Downstream: Trust disbursements |
|
8.4 |
Fund and Asset Management Operations |
Asset allocation, Fund administration, Performance tracking |
Fund Managers, Operations Team |
Asset management platforms, Fund tracking systems, Reporting tools |
Fund custodians, External auditors |
Upstream: Market trends, Downstream: Client performance reports |
|
8.5 |
Wealth and Estate Planning Services |
Estate planning consultation, Wealth structuring, Tax optimisation |
Estate Planners, Tax Advisors |
Estate planning tools, Tax optimisation software, Client communication platforms |
Estate lawyers, Tax advisors |
Upstream: Client financial goals, Downstream: Trust account management |
|
8.6 |
Regulatory and Fiduciary Compliance Management |
Compliance monitoring, Fiduciary oversight, Regulatory reporting |
Compliance Officers, Fiduciary Managers |
Compliance tracking systems, Regulatory reporting platforms, Fiduciary oversight tools |
Regulatory bodies, Legal consultants |
Upstream: Regulatory changes, Downstream: Client reporting |
|
8.7 |
Client Reporting and Relationship Management |
Regular client reporting, Relationship review, Service updates |
Relationship Managers, Client Service Team |
Reporting platforms, CRM systems, and Communication tools |
Report generation vendors, Data analytics services |
Upstream: Client data, Downstream: Investment adjustments and account reviews |
|
8.8 |
Custodial and Safekeeping Services |
Asset safekeeping, Custody management, Transaction settlements |
Custody Officers, Operations Team |
Custody management systems, Settlement platforms, Digital vaults |
Custody service providers, Custodial banks |
Upstream: Client transactions, Downstream: Asset safekeeping operations |
|
9.1 |
Credit Card Application and Onboarding |
Customer application capture, KYC verification, credit scoring, approval workflow |
Credit analysts, customer service reps, compliance officers |
Credit Scoring System, Core Banking Platform, Customer Information File (CIF), Document Management System |
Credit bureaus (e.g., TransUnion, CIBI), ID verification providers |
Upstream: Customer channels (branch, online); Downstream: Card production system |
|
9.2 |
Card Issuance and Fulfilment |
Card production request, embossing, personalisation, dispatch and activation |
Card operations team, logistics and fulfilment staff |
Card Management System (CMS), Printing and Embossing Equipment, Secure Data Transfer System |
Card manufacturer and personalisation vendors, courier services |
Upstream: Approved customer data; Downstream: Card activation system |
|
9.3 |
Transaction Authorisation and Processing |
Real-time authorisation, clearing and settlement, chargeback handling |
Payment operations team, IT support, fraud analysts |
Transaction Switch, Payment Gateway, Visa/Mastercard Network Interface, Core Banking System |
Visa, Mastercard, network payment processors |
Upstream: POS/ATM network, merchants; Downstream: Settlement system, accounting |
|
9.4 |
Merchant Acquiring and Onboarding |
Merchant due diligence, onboarding, terminal deployment, training |
Merchant acquisition team, sales support, compliance |
Merchant Management System (MMS), CRM, Terminal Management System |
Payment terminal suppliers, merchant KYC vendors |
Upstream: Sales operations; Downstream: Transaction processing systems |
|
9.5 |
Merchant Transaction and Settlement Services |
Transaction capture, batch processing, reconciliation, settlement, and disbursement |
Settlement officers, finance and treasury teams |
Settlement Engine, General Ledger, Reconciliation Tool, Secure Payment Gateway |
Payment networks, merchant payment partners |
Upstream: Transaction authorisation; Downstream: Treasury and finance systems |
|
9.6 |
Cardholder Servicing and Collections |
Customer service inquiries, dispute resolution, billing, payment posting, and delinquency management |
Customer service centre, collection agents, finance team |
Customer Relationship Management (CRM), Billing System, Collections Platform, Telephony Infrastructure |
Collection agencies, payment collection partners |
Upstream: Card transaction data; Downstream: Credit reporting, accounting systems |
|
9.7 |
Fraud Detection and Security Monitoring |
Fraud pattern detection, alert investigation, transaction blocking, and incident escalation |
Fraud monitoring officers, cybersecurity analysts |
Fraud Detection System (FDS), Security Information and Event Management (SIEM), Data Analytics Platform |
Cybersecurity solution providers, threat intelligence partners |
Upstream: Transaction authorisation data; Downstream: Cardholder notification system |
|
9.8 |
Compliance and Regulatory Management |
Regulatory reporting, internal audit reviews, compliance tracking, AML/CFT monitoring |
Compliance officers, risk managers, and legal counsel |
Compliance Management System, AML Monitoring Tool, Regulatory Reporting Platform |
RegTech vendors, legal advisors |
Upstream: All sub-CBS processes; Downstream: Regulators (BSP, AMLC) |
|
10.1 |
International Remittance Processing |
Initiating remittance transfers; Currency conversion; Fund settlement |
Remittance officers; Currency analysts; Operations staff |
Core banking system; Remittance processing platform; Currency exchange system |
Partner banks; International remittance providers |
Core banking system; Customer onboarding system; Payment networks |
|
10.2 |
Remittance Partner & Correspondent Bank Management |
Partner onboarding; Contract management; Transaction monitoring |
Vendor relationship managers; Compliance officers |
Partner management system; Transaction monitoring system; Compliance systems |
Correspondent banks; Payment network providers |
Core banking system |
|
10.3 |
FX Conversion & Rate Management |
Rate calculation; Currency conversion execution; FX monitoring |
FX dealers, Market analysts, Risk management team |
FX trading system; Market data systems; Currency management system |
FX liquidity providers; FX systems |
Core banking system |
|
10.4 |
OFW Remittance Facilitation |
Processing OFW remittances; Disbursement; Compliance monitoring |
Remittance staff; Customer service agents |
OFW remittance system; Compliance system; Disbursement system |
OFW partner agencies; Domestic remittance networks |
Domestic payment networks |
|
10.5 |
Cross-Border Compliance & Sanctions Screening |
Sanctions monitoring; Transaction screening; Suspicious activity reporting |
Compliance officers; Legal & regulatory team |
Sanctions screening system; AML system; Monitoring tools |
Regulatory authorities; Sanctions data providers |
Correspondent banks |
|
10.6 |
Customer Enrollment & KYC for Remittance Services |
Identity verification; Risk profiling; Account setup |
KYC/AML officers; Onboarding team |
KYC system; Customer onboarding platform; Risk tools |
KYC verification service providers |
Core banking system; CRM |
|
10.7 |
Dispute Resolution & Trace Requests |
Dispute logging; Investigation; Resolution |
Dispute resolution team; Customer service agents |
Dispute management system; Trace systems; Service portal |
Payment networks; External investigators |
Core banking system; Transaction systems |
|
10.8 |
FX Transaction Settlement & Reporting |
FX settlement; Reconciliation; Regulatory reporting |
Settlement officers; Reconciliation team |
FX settlement system; Reporting platform |
Auditors; Regulators |
Core banking system; Payment networks |
|
11.1 |
Regulatory Reporting Framework |
Development of reporting frameworks |
Compliance officers |
Regulatory reporting software |
Regulatory authorities; External auditors |
Internal audit; Risk teams; Data management systems |
|
11.2 |
Compliance Monitoring and Auditing |
Continuous compliance monitoring |
Compliance officers; Internal auditors |
Audit management tools; Monitoring software |
Audit firms; Compliance consultants |
Business units; Transaction systems |
|
11.3 |
Submission of Regulatory Reports |
Compilation and submission of reports |
Reporting specialists; Data analysts |
Report generation tools; Regulatory portals |
Regulatory bodies; Data providers |
Financial systems; HR; Legal |
|
11.4 |
Risk Assessment and Mitigation in Reporting |
Risk identification; Mitigation planning |
Risk managers; Compliance officers |
Risk management software; Data visualisation tools |
Legal consultants; Cybersecurity providers |
IT; Operational risk teams |
|
11.5 |
Reporting Systems and Technology |
System maintenance; Technology upgrades |
IT administrators; Database administrators |
Reporting platforms; Cloud infrastructure |
IT support vendors; Data centres |
Data governance; Business units |
|
12.1 |
Vendor Risk Management |
Vendor due diligence; Risk assessment; Ongoing review |
Third-party risk team; Procurement; ERM; Compliance |
Vendor risk management system; GRC tools |
Cyber risk assessors; Rating agencies |
Business units; Regulatory requirements |
|
12.2 |
Third-Party Contract Management |
Contract drafting; SLA management; Renewal tracking |
Legal; Procurement; Vendor managers |
Contract lifecycle management system |
External legal counsel |
Vendor risk approval; Service monitoring |
|
12.3 |
Outsourced Service Monitoring |
SLA monitoring; Performance reporting; Issue management |
Vendor managers; Operations teams |
Performance dashboards; Service management tools |
Outsourced service providers |
Incident management; Customer services |
|
12.4 |
Service Continuity Planning |
BCP review; DR testing; Exit planning |
BCM team, Vendor managers, IT DR teams |
BCM systems; DR testing tools |
Recovery site providers; Cloud providers |
Crisis management; Recovery execution |
|
12.5 |
Compliance & Regulatory Assurance |
Regulatory checks; Audit coordination; Remediation |
Compliance; Internal audit; Risk management |
GRC systems; Audit tools |
External auditors; Advisors |
Board reporting; Regulatory submissions |
|
12.6 |
Incident Management & Response |
Detection; Escalation; Post-incident review |
Incident response, IT, and Cybersecurity teams |
Incident management systems; SIEM tools |
IT service providers; Cyber vendors |
Customer impact management; Regulatory notification |
Mapping processes and resources across CBS-1 to CBS-12 enables Metrobank to move beyond traditional silo-based resilience planning toward a service-centric and dependency-aware operational resilience model.
This chapter provides the factual baseline required to identify single points of failure, concentration risks, and systemic interdependencies that could threaten the continuity of critical services.
The consolidated mappings serve as a practical reference for business, technology, risk, and third-party management teams, ensuring a shared and consistent understanding of how services are delivered.
With this foundation in place, Metrobank is well positioned to progress into subsequent stages of operational resilience planning, including impact tolerance validation, severe but plausible scenario testing, and remediation planning.
The insights derived from this chapter should be actively used to inform decision-making, strengthen control design, and enhance coordination across functions.
Ultimately, this structured mapping exercise supports Metrobank’s ability to withstand disruption, protect customers, and meet regulatory expectations with confidence.
| Map Processes and Resources for Critical Business Services for Metrobank [CBS 1 - CBS 12] | |||||
| CBS 1 | CBS 2 | CBS 3 | CBS 4 | CBS 5 | CBS 6 |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
| CBS 7 | CBS 8 | CBS 9 | CBS 10 | CBS 11 | CBS 12 |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

![BB OR [A] 7 BB OR [A] 7](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/OR%20Pictures%20A/BB%20OR%20Folder%20A/BB%20OR%20%5BA%5D%207.jpg?width=2000&height=1333&name=BB%20OR%20%5BA%5D%207.jpg)


![Banner [Table] [OR] [E3] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/5af5497a-aa7f-41e4-b5ed-c9da8601d4ef.png)
![Banner [Summing] [OR] [E3] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/61e5330e-051c-4874-b6da-a1be8393c283.png)
![[OR] [MBT] [E3] [CR] [P1] [DP] Detailed Processes (Sub-CBS)](https://no-cache.hubspot.com/cta/default/3893111/956403a9-e874-4ded-afd0-43aced37da0d.png)
![[OR] [MBT] [E3] [CR] [P2] [MD] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/5dbdd105-cf4c-4a91-a494-f007cf56df00.png)
![[OR] [MBT] [E3] [CR] [P4] [ITo] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/b27e9958-964e-446e-84a4-c2b941da4840.png)
![[OR] [MBT] [E3] [CR] [P5] [SuPS] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/33cdff82-c01e-49ac-8b8e-3dd245afcaf0.png)
![[OR] [MBT] [E3] [CR] [P6] [ST] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/dd5352ad-3402-4f06-8bf8-2e87d9c08935.png)
![[OR] [MBT] [E3] [CBS] [1] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/adb2baeb-7bc3-484b-96b0-1f34c245c442.png)
![[OR] [MBT] [E3] [CBS] [2] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/69ed6b4f-2a69-47a1-841d-6e41d04c5afd.png)
![[OR] [MBT] [E3] [CBS] [3] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/725cfdb5-0538-4a32-ad50-d732e84eaf8f.png)
![[OR] [MBT] [E3] [CBS] [4] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/b48a4a6d-1f49-4e5b-a8bf-737b992dd2dc.png)
![[OR] [MBT] [E3] [CBS] [5] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/a910f80d-9706-4d89-9377-1c966c78054c.png)
![[OR] [MBT] [E3] [CBS] [6] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/b195a136-29d8-4140-8348-86ef0a3183b0.png)
![[OR] [MBT] [E3] [CBS] [7] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/0f03bf16-72a7-4d33-bf0a-03b28ed71a47.png)
![[OR] [MBT] [E3] [CBS] [8] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/b7e22494-a97d-4936-b6fc-17fd086e09ab.png)
![[OR] [MBT] [E3] [CBS] [9] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/2ec68e79-e822-44b3-bc6e-d8842015c697.png)
![[OR] [MBT] [E3] [CBS] [9] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/3feb6828-e332-4c3b-9b89-74eab0977ec4.png)
![[OR] [MBT] [E3] [CBS] [11] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/f7cbd86f-99b9-4f2c-8424-87d0d891733c.png)
![[OR] [MBT] [E3] [CBS] [12] [MPR] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/6e3d60b9-54c5-47d4-9b44-5c842a90a2e7.png)





![[BL-OR] [3-4-5] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)
![[BL-OR] [3] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)
![Email to Sales Team [BCM Institute]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)








