---
title: [OR] [MCIS] [E1] [C5] Critical Business Services (CBS)
description: [OR] [MCIS] [E1] [C5] Critical Business Services (CBS)
image: https://blog.bcm-institute.org/hubfs/MCIS%20Graphic%20Folder/%5BOR%5D%20%5BMCIS%5D%20%5BE1%5D%20%5BC5%5D%20Identifying%20Critical%20Business%20Services.jpg
---
.
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Implementing Operational Resilience at MCIS Insurance
# \[OR\] \[MCIS\] \[E1\] \[C5\] Critical Business Services (CBS)
[![\[OR\] \[MCIS\] \[Full Banner\] Implementing Operational Resilience at MCIS Insurance](https://no-cache.hubspot.com/cta/default/3893111/de903f72-ffd7-4be9-ad3a-b9e0a53e6711.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/de903f72-ffd7-4be9-ad3a-b9e0a53e6711)
Operational resilience begins with understanding which services are essential to customers, regulators, and the broader financial ecosystem.
For an insurance company such as **MCIS Insurance (MCIS)**, not every business activity carries the same level of importance during a disruption.
While many internal processes support daily operations, only a limited number of services are considered so important that their prolonged disruption would result in significant harm to policyholders, business partners, regulators, or the financial system.
The purpose of this chapter is to introduce the concept of **Critical Business Services (CBS)** within the context of an operational resilience programme. Rather than focusing on organisational departments or internal functions, operational resilience focuses on the services delivered to customers and external stakeholders.
These services become the foundation for subsequent resilience activities, including dependency mapping, impact tolerance setting, scenario testing, resilience improvement, and continuous monitoring.
For MCIS, identifying Critical Business Services enables management to prioritise resilience investments, allocate resources appropriately, and demonstrate compliance with regulatory expectations while maintaining customer confidence during severe disruptions.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/166119c4-828b-4bdc-89ed-fb335170f89c)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Jul 23, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![\[OR\] \[MCIS\] \[Disclaimer\] Legal Disclaimers and Usage of eBook Banner](https://no-cache.hubspot.com/cta/default/3893111/35215056-be21-4cf8-a25b-700441ed6862.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/35215056-be21-4cf8-a25b-700441ed6862)
### eBook 1: Chapter 5
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/166119c4-828b-4bdc-89ed-fb335170f89c)
### **What are the Critical Business Services (CBS) of MCIS Insurance?**
#### **Introduction**
#### [![\[OR\] \[MCIS\] \[E1\] \[C5\] Identifying Critical Business Services](https://no-cache.hubspot.com/cta/default/3893111/6b81c3ce-66a2-4fee-97a6-8a61bd406463.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6b81c3ce-66a2-4fee-97a6-8a61bd406463)
Operational resilience begins with understanding which services are essential to customers, regulators, and the broader financial ecosystem.
For an insurance company such as **MCIS Insurance (MCIS)**, not every business activity carries the same level of importance during a disruption.
While many internal processes support daily operations, only a limited number of services are considered so important that their prolonged disruption would result in significant harm to policyholders, business partners, regulators, or the financial system.
The purpose of this chapter is to introduce the concept of **Critical Business Services (CBS)** within the context of an operational resilience programme. Rather than focusing on organisational departments or internal functions, operational resilience focuses on the services delivered to customers and external stakeholders.
These services become the foundation for subsequent resilience activities, including dependency mapping, impact tolerance setting, scenario testing, resilience improvement, and continuous monitoring.
For MCIS, identifying Critical Business Services enables management to prioritise resilience investments, allocate resources appropriately, and demonstrate compliance with regulatory expectations while maintaining customer confidence during severe disruptions.
#### **What is a Critical Business Service (CBS)?**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/9f906ebc-f9d2-4053-9e6f-586799079049)A **Critical Business Service (CBS)** is a service delivered to external customers or stakeholders whose disruption would cause intolerable harm.
The emphasis is on the **service outcome**, not the internal processes supporting it.
A service is considered critical when its disruption could result in one or more of the following:
- Significant harm to policyholders
- Financial losses to customers
- Regulatory breaches
- Threats to market confidence
- Legal liabilities
- Operational instability
- Reputational damage
- Adverse impact on public confidence
Operational resilience therefore shifts organisational thinking from protecting departments toward ensuring that essential customer services remain available within acceptable levels, even during major disruptions.
Unlike Business Continuity Management (BCM), which traditionally identifies **Critical Business Functions (CBFs)**, Operational Resilience identifies **Critical Business Services**, recognising that customers are primarily concerned with service continuity rather than the internal functions delivering it.
The identification of CBS provides the foundation for:
- Process mapping
- Resource mapping
- Dependency analysis
- Third-party resilience assessment
- Technology resilience
- Impact tolerance definition
- Scenario testing
- Continuous resilience improvement
#### **Key Considerations for Identifying CBS at MCIS**
When identifying Critical Business Services, MCIS should adopt a customer-centric and regulatory-driven assessment approach.
Key considerations include:
##### **Customer Impact**
Would disruption prevent policyholders from receiving essential insurance protection or accessing benefits when required?
Examples include:
- Claim payments
- Emergency medical assistance
- Policy servicing
##### **Financial Impact**
Would disruption expose customers or MCIS to significant financial losses?
Examples include:
- Delayed claim settlements
- Premium collection failures
- Incorrect policy administration
##### **Regulatory Impact**
Would disruption result in breaches of regulatory obligations issued by Bank Negara Malaysia (BNM)?
Areas include:
- Consumer protection
- Prudential obligations
- Operational resilience expectations
- Outsourcing requirements
- Incident reporting
##### **Market Confidence**
Would prolonged disruption reduce public confidence in MCIS or Malaysia's insurance industry?
Loss of confidence may affect:
- New business acquisition
- Policy renewals
- Customer retention
- Distribution partners
##### **Operational Dependency**
Does the service rely upon:
- Core insurance platforms
- Digital channels
- Payment systems
- Call centres
- Third-party administrators
- Cloud services
- Healthcare providers
- Distribution partners
Understanding these dependencies is fundamental to resilience planning.
##### **Recovery Complexity**
Some services require multiple business units to recover simultaneously.
Recovery complexity increases when services depend on:
- External vendors
- Regulatory approvals
- Manual workarounds
- Large volumes of customer transactions
#### **Critical Business Services of MCIS Insurance**
Based on the operating model of a Malaysian life and general insurer, the following services are likely to represent MCIS's Critical Business Services.
| CBS Code | Critical Business Service | Description |
| --- | --- | --- |
| CBS-1 | Policy Issuance and Underwriting | Assessment, approval and issuance of insurance policies to customers. |
| CBS-2 | Premium Collection and Billing | Collection of premiums, payment processing and policy continuation. |
| CBS-3 | Claims Management and Settlement | Registration, assessment, approval and payment of insurance claims. |
| CBS-4 | Customer Policy Administration | Policy amendments, renewals, endorsements, cancellations and servicing requests. |
| CBS-5 | Digital Customer Services | Customer self-service portals, mobile applications and online policy servicing. |
| CBS-6 | Distribution and Agency Services | Support for agents, brokers, bancassurance partners and sales channels. |
| CBS-7 | Investment-Linked Fund Administration | Administration and valuation of investment-linked insurance products. |
| CBS-8 | Regulatory Reporting and Financial Obligations | Regulatory submissions, statutory reporting and financial obligations required by regulators. |
| CBS-9 | Contact Centre and Customer Assistance | Customer enquiries, complaints handling and emergency customer support. |
| CBS-10 | Payment and Financial Transaction Services | Claims disbursement, refunds, commissions and financial transaction processing. |
These proposed services should be validated through structured workshops involving senior management, business owners, risk management, technology, operations, and operational resilience teams.
#### **Example: Severe but Plausible Scenarios Affecting MCIS Critical Business Services**
Operational resilience programmes require organisations to evaluate events that are unlikely but credible.
Examples include:
| Severe but Plausible Scenarios | Potential CBS Affected |
| --- | --- |
| Major ransomware attack affecting core insurance systems | CBS-1, CBS-2, CBS-3, CBS-4, CBS-5 |
| Nationwide telecommunications outage | CBS-5, CBS-6, CBS-9 |
| Failure of cloud infrastructure provider | CBS-5, CBS-7 |
| Core insurance application failure | CBS-1, CBS-2, CBS-3, CBS-4 |
| Third-party claims administrator outage | CBS-3 |
| Payment gateway disruption | CBS-2, CBS-10 |
| Data centre power failure | Multiple CBS |
| Large-scale cyber data breach | All CBS |
| Pandemic causing workforce shortages | All CBS |
| Major flood affecting headquarters or operations centre | Multiple CBS |
| Regulatory sanctions requiring immediate operational changes | CBS-8 |
| Simultaneous failure of multiple outsourced service providers | Multiple CBS |
Each scenario should subsequently be used during operational resilience scenario testing to determine whether each CBS can continue operating within defined impact tolerances.
#### **Regulatory Alignment for MCIS**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/2726ae74-56b9-4cb7-9255-428edd7e2847)As a licensed insurer operating in Malaysia, MCIS should align its Operational Resilience programme with the expectations of **Bank Negara Malaysia (BNM)** and recognised international resilience practices.
The identification of Critical Business Services supports several regulatory objectives, including:
- Protection of financial consumers.
- Continuity of essential financial services during disruptions.
- Effective operational risk management.
- Governance and accountability over resilience capabilities.
- Resilience of technology, information assets and outsourced services.
- Third-party risk management.
- Incident management and regulatory reporting.
- Continuous testing and improvement of operational resilience capabilities.
A well-defined CBS inventory enables MCIS to demonstrate that resilience planning focuses on protecting services that are essential to policyholders and the wider financial system, rather than merely recovering internal technology or operational functions.
#### **Critical Business Services (CBS): Key Stakeholders and Supporting Functions**
| CBS Code | Critical Business Service | Primary Customers | Business Owner | Key Supporting Functions | Typical Recovery Priority |
| --- | --- | --- | --- | --- | --- |
| CBS-1 | Policy Issuance and Underwriting | Prospective Policyholders | Underwriting | Sales, Risk Assessment, IT | Very High |
| CBS-2 | Premium Collection and Billing | Policyholders | Finance | Banking Partners, IT | High |
| CBS-3 | Claims Management and Settlement | Policyholders and Beneficiaries | Claims | Medical Assessors, Finance, IT | Critical |
| CBS-4 | Customer Policy Administration | Existing Policyholders | Customer Operations | Contact Centre, IT | High |
| CBS-5 | Digital Customer Services | Customers | Digital Services | IT Infrastructure, Cybersecurity | High |
| CBS-6 | Distribution and Agency Services | Agents and Distribution Partners | Distribution | Agency Management, IT | Medium-High |
| CBS-7 | Investment-Linked Fund Administration | Investment-Linked Policyholders | Investment Operations | Finance, Fund Managers, IT | High |
| CBS-8 | Regulatory Reporting and Financial Obligations | Regulators | Compliance & Finance | Risk, IT, Finance | High |
| CBS-9 | Contact Centre and Customer Assistance | Customers | Customer Service | Telephony, CRM, IT | High |
| CBS-10 | Payment and Financial Transaction Services | Customers and Business Partners | Finance | Banking Network, Payment Providers | Critical |
##### [![Banner \[Summing\] \[OR\] \[E1\] \[C5\] Identifying Critical Business Services](https://no-cache.hubspot.com/cta/default/3893111/d4f76ec3-d236-4b43-994d-728dbeb2e9d1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d4f76ec3-d236-4b43-994d-728dbeb2e9d1)
Identifying Critical Business Services represents one of the most significant activities in establishing an operational resilience programme. It defines the services that must remain available, or be restored within acceptable limits, regardless of the nature of the disruption.
For MCIS Insurance Bhd, a clear understanding of its Critical Business Services enables the organisation to prioritise resilience investments, focus governance on customer outcomes, and satisfy evolving regulatory expectations.
The proposed CBS inventory presented in this chapter provides a practical starting point that should be refined through cross-functional workshops and validated against business strategy, customer impact, operational dependencies, and regulatory requirements.
In the following chapters, each identified Critical Business Service will become the basis for dependency mapping, impact tolerance definition, scenario testing, and the implementation of resilience improvements that strengthen MCIS's ability to continue serving policyholders during severe but plausible disruptions.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/3aefb2d2-3110-47c1-ad4f-d3e6e5381066)
The menu and blogs highlighted in the table below are under construction
[![\[OR\] \[MCIS\] \[34 Banner\] Implementing Operational Resilience at MCIS Insurance](https://no-cache.hubspot.com/cta/default/3893111/d36576c0-3c4c-4e4e-b025-806cbe771d0d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d36576c0-3c4c-4e4e-b025-806cbe771d0d)
| ##### Understanding Your Organisation | | | | | | |
| --- | --- | --- | --- | --- | --- | --- |
| **C1** | **C2 \[x\]** | **C3 \[x\]** | **C4 \[x\]** | **C5** | | |
| [![\[OR\] \[MCIS\] \[E1\] \[C1\] Introducing OR Case Study](https://no-cache.hubspot.com/cta/default/3893111/db9639aa-e36e-41c3-8b04-c47a92a702c8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/db9639aa-e36e-41c3-8b04-c47a92a702c8) | [![\[OR\] \[GEN\] \[E1\] \[C2\] Understanding Your Organisation](https://no-cache.hubspot.com/cta/default/3893111/ced1bdb4-c85e-4ebe-8878-082aea79ef6a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ced1bdb4-c85e-4ebe-8878-082aea79ef6a) | [![\[OR\] \[GEN\] \[E1\] \[C3\] Examining Operating Environment](https://no-cache.hubspot.com/cta/default/3893111/cc870a30-329c-416c-bda9-ffd799be3d62.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/cc870a30-329c-416c-bda9-ffd799be3d62) | [![\[OR\] \[GEN\] \[E1\] \[C4\] Composing the OR Team](https://no-cache.hubspot.com/cta/default/3893111/695d257f-c746-48a6-a463-26b3b6a8a7d1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/695d257f-c746-48a6-a463-26b3b6a8a7d1) | [![\[OR\] \[MCIS\] \[E1\] \[C5\] Identifying Critical Business Services](https://no-cache.hubspot.com/cta/default/3893111/6b81c3ce-66a2-4fee-97a6-8a61bd406463.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6b81c3ce-66a2-4fee-97a6-8a61bd406463) | | |
| **C6 \[x\]** | **C7 \[x\]** | **C8 \[x\]** | **C9 \[x\]** | **eBook Cover** | | |
| [![\[OR\] \[GEN\] \[E1\] \[C6\] Analysing Key Characteristics](https://no-cache.hubspot.com/cta/default/3893111/312be1e5-fa5e-40cd-ae3b-55f729092d4a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/312be1e5-fa5e-40cd-ae3b-55f729092d4a) | [![\[OR\] \[GEN\] \[E1\] \[C7\] Establishing Organisational Goals for Operational Resilience](https://no-cache.hubspot.com/cta/default/3893111/36ee9cb1-b726-4615-ad89-cfdebc4ecbf4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/36ee9cb1-b726-4615-ad89-cfdebc4ecbf4) | [![\[OR\] \[GEN\] \[E1\] \[C8\] Summary](https://no-cache.hubspot.com/cta/default/3893111/24dde137-e587-4125-ac61-a0b0577d1f61.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/24dde137-e587-4125-ac61-a0b0577d1f61) | [![\[OR\] \[GEN\] \[E1\] \[C9\] \[Back Cover\] OR](https://no-cache.hubspot.com/cta/default/3893111/e234eb57-ece8-484b-8ab0-96f336d8396d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/e234eb57-ece8-484b-8ab0-96f336d8396d) | [![x eBook Cover \[OR\] \[MCIS\] \[E1\] \[2D\]](https://no-cache.hubspot.com/cta/default/3893111/1970a49f-7d9a-4c4d-8cdf-43465d4d1d2c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1970a49f-7d9a-4c4d-8cdf-43465d4d1d2c) | | |
| | | | | | | |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)[](https://cta-redirect.hubspot.com/cta/redirect/3893111/309c3a80-4c3c-4eb9-811d-bd401ccb1610)Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-07-26T09:47:18.294Z",
"datePublished" : "2026-07-23T07:55:45.000Z",
"headline" : "[OR] [MCIS] [E1] [C5] Critical Business Services (CBS)",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-mcis-e1-c5-critical-business-services-cbs",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```