---
title: [OR] [MIB] [E3] [CBS] [1] [ITo] Establish Impact Tolerances
description: [OR] [MIB] [E3] [CBS] [1] [ITo] Establish Impact Tolerances
image: https://blog.bcm-institute.org/hubfs/Maybank%20Investment%20Bank%20Graphic%20Folder/MIB%20CBS%201%20Morepost/%5BOR%5D%20%5BMIB%5D%20%5BE3%5D%20%5BCBS%5D%20%5B1%5D%20%5BITo%5D%20Securities%20Trading%20%26%20Execution.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Designing a Resilient Investment Banking Model: The Maybank Investment Bank Journey
# \[OR\] \[MIB\] \[E3\] \[CBS\] \[1\] \[ITo\] Establish Impact Tolerances
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/0d4b663c-6ffc-467f-9d1a-4d64744745db)
Operational resilience requires financial institutions to define the maximum level of disruption they can tolerate before causing intolerable harm to customers, market integrity, financial stability, or regulatory compliance.
For **Maybank Investment Bank**, the Critical Business Service **CBS-1 Securities Trading & Execution** is highly time-sensitive and market-facing, making it essential to establish clear, measurable impact tolerances.
This chapter defines appropriate **impact tolerances** for each Sub-CBS under CBS-1.
The tolerances align with operational resilience principles by setting measurable thresholds for **Maximum Tolerable Downtime (MTD)**, **Maximum Tolerable Data Loss (MTDL)**, customer impact, and regulatory consequences.
These thresholds represent the point at which disruption would result in unacceptable harm and must therefore not be exceeded under severe yet plausible scenarios.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0430108a-ef49-43aa-ac7d-ee6bb474eba8)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Mar 3, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![\[OR\] \[MIB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/3f6f3532-eeed-4a2f-a703-09465c567f80.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3f6f3532-eeed-4a2f-a703-09465c567f80)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0430108a-ef49-43aa-ac7d-ee6bb474eba8)
### CBS-1 Securities Trading & Execution
#### Introduction
[![\[OR\] \[MIB\] \[E3\] \[CBS\] \[1\] \[ITo\] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/86a15235-66bf-4ff2-a2fc-aefe29518d19.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/86a15235-66bf-4ff2-a2fc-aefe29518d19)
Operational resilience requires financial institutions to define the maximum level of disruption they can tolerate before causing intolerable harm to customers, market integrity, financial stability, or regulatory compliance.
For **Maybank Investment Bank**, the Critical Business Service **CBS-1 Securities Trading & Execution** is highly time-sensitive and market-facing, making it essential to establish clear, measurable impact tolerances.
This chapter defines appropriate **impact tolerances** for each Sub-CBS under CBS-1.
The tolerances align with operational resilience principles by setting measurable thresholds for **Maximum Tolerable Downtime (MTD)**, **Maximum Tolerable Data Loss (MTDL)**, customer impact, and regulatory consequences.
These thresholds represent the point at which disruption would result in unacceptable harm and must therefore not be exceeded under severe yet plausible scenarios.
[![Banner \[Table\] \[OR\] \[E3\] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/627c33a8-714d-40af-9a2b-0d7957fb8afa.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/627c33a8-714d-40af-9a2b-0d7957fb8afa)
Table P4: Establish Impact Tolerance for CBS-1
| **Sub-CBS Code** | **Sub-CBS** | **Maximum Tolerable Downtime (MTD)** | **Maximum Tolerable Data Loss (MTDL)** | **Customer Impact** | **Regulatory Impact** | **Impact Type** | **Current Resilience Status** | **Action Required** |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| **1-1** | **Client Onboarding for Trading** | **24 hours** | **1 hour** | **Delayed account activation; revenue loss** | **KYC/AML breach risk** | **Compliance / Reputational** | **Adequate with manual fallback** | **Enhance e-KYC redundancy** |
| **1-2** | **Order Capture & Validation** | **30 minutes (market hours)** | **Near-zero (<5 mins)** | **Clients unable to place trades** | **Market conduct breach** | **Financial / Regulatory** | **High resilience; monitored** | **Strengthen peak-load testing** |
| **1-3** | **Pre-Trade Risk Controls** | **15 minutes** | **Zero tolerance** | **Unauthorised or excessive exposure** | **Breach of capital/market rules** | **Financial Stability / Regulatory** | **Strong controls in place** | **Implement secondary real-time engine** |
| **1-4** | **Trade Execution (Exchange-Traded)** | **15 minutes** | **Near-zero** | **Missed market opportunities; financial loss** | **Exchange rule violations** | **Financial / Market Integrity** | **Resilient with the DR site** | **Improve active-active setup** |
| **1-5** | **Trade Execution (OTC / Structured Products)** | **1 hour** | **<15 minutes** | **Pricing disputes; failed trades** | **Counterparty disputes** | **Financial / Legal** | **Moderate resilience** | **Strengthen pricing system redundancy** |
| **1-6** | **Algorithmic & Electronic Trading Management** | **10 minutes** | **Zero tolerance** | **Market disruption risk** | **Severe regulatory sanctions** | **Systemic / Regulatory** | **High monitoring coverage** | **Enhance kill-switch automation** |
| **1-7** | **Trade Confirmation & Client Notification** | **4 hours** | **<30 minutes** | **Client uncertainty; disputes** | **Reporting non-compliance** | **Reputational / Regulatory** | **Generally stable** | **Automate backup notification channel** |
| **1-8** | **Trade Capture & Booking** | **2 hours** | **<15 minutes** | **Ledger inaccuracies** | **Financial misstatement** | **Financial / Regulatory** | **Moderate** | **Real-time replication enhancement** |
| **1-9** | **Clearing & Settlement Processing** | **2 hours (T+0/T+1)** | **Near-zero** | **Settlement failure; penalties** | **Central counterparty breach** | **Financial / Systemic** | **Strong integration** | **Enhance STP monitoring** |
| **1-10** | **Custody & Safekeeping Coordination** | **4 hours** | **<30 minutes** | **Asset misreporting** | **Fiduciary breach** | **Legal / Reputational** | **Adequate** | **Strengthen custodian connectivity** |
| **1-11** | **Margin & Collateral Management** | **30 minutes (volatile market)** | **<5 minutes** | **Under/over-collateralization risk** | **Capital adequacy breach** | **Financial Stability** | **Strong but stress-sensitive** | **Improve intraday margin recalculation** |
| **1-12** | **Corporate Actions Processing** | **24 hours (non-critical events)** | **<1 hour** | **Incorrect entitlements** | **Disclosure breaches** | **Reputational / Compliance** | **Adequate** | **Enhance automation & reconciliation** |
| **1-13** | **Reconciliation & Exception Management** | **End-of-day (EOD)** | **<1 hour** | **Undetected trade breaks** | **Regulatory reporting errors** | **Financial / Regulatory** | **Moderate** | **Increase intra-day reconciliation** |
| **1-14** | **Regulatory Reporting & Surveillance** | **Regulatory deadline dependent (same-day)** | **Zero tolerance for report data** | **Regulatory fines; enforcement action** | **Direct breach of BNM/SC rules** | **Regulatory / Legal** | **Strong compliance framework** | **Add parallel reporting validation** |
| **1-15** | **Business Continuity & System Recovery for Trading** | **1 hour RTO** | **Zero data loss (real-time replication)** | **Prolonged trading outage** | **Market-wide reputational impact** | **Strategic / Systemic** | **Mature BCP framework** | **Conduct more frequent live simulations** |
#### **Key Considerations in Setting Impact Tolerances**
- **Market Hours Sensitivity** – Several Sub-CBS functions (e.g., order capture, execution, margin management) have significantly lower tolerances during trading hours.
- **Zero Data Loss Principle** – For trading, risk, settlement, and regulatory reporting processes, the tolerance for data loss is effectively zero due to financial and regulatory exposure.
- **Customer Harm Threshold** – Tolerances are calibrated at the point where disruption leads to financial loss, loss of access to markets, or fiduciary failure.
- **Regulatory Threshold** – Impact tolerance aligns with requirements from securities regulators and central bank expectations on market integrity and financial stability.
- **Systemic Risk Consideration** – Algorithmic trading, clearing, and margin management have the lowest tolerance levels due to potential systemic implications.
#### [![Banner \[Summing\] \[OR\] \[E3\] Establish Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5)
The mapping of processes and resources for CBS-1 Securities Trading & Execution demonstrates the complexity and interconnectivity of Maybank Investment Bank’s trading ecosystem.
Each Sub-CBS is supported by a layered structure of people, technology, infrastructure, and third-party providers, forming a tightly integrated front-to-back value chain.
This structured mapping enables the identification of concentration risks, third-party reliance, system interdependencies, and potential single points of failure.
By clearly linking operational processes to supporting resources and dependencies, Maybank Investment Bank strengthens its ability to conduct scenario testing, assess impact tolerances, and respond effectively to severe disruptions.
This mapping serves as a foundational element of operational resilience, ensuring that securities trading and execution services remain sustainable, recoverable, and compliant under stress conditions.
| Designing a Resilient Investment Banking Model: The Maybank Investment Bank Journey | | | | | | |
| --- | --- | --- | --- | --- | --- | --- |
| **eBook 3: Starting Your OR Implementation** | | | | | | |
| **CBS-1 Securities Trading & Execution** | | | | | | |
| **CBS-1 DP** | **CBS-1 MD** | **CBS-1 MPR** | **CBS-1 ITo** | **CBS-1 SuPS** | ** CBS-1 ST ** | **eBook 2** |
| [![\[OR\] \[MIB\] \[E3\] \[CBS\] \[1\] \[DP\] Securities Trading & Execution](https://no-cache.hubspot.com/cta/default/3893111/7a960cf5-5f8f-4795-8e2d-941b62c49b0e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7a960cf5-5f8f-4795-8e2d-941b62c49b0e) | [![\[OR\] \[MIB\] \[E3\] \[CBS\] \[1\] \[MD\] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/4818366e-86d1-4625-b282-e17bd7e87a6d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4818366e-86d1-4625-b282-e17bd7e87a6d) | [![\[OR\] \[MIB\] \[E3\] \[CBS\] \[1\] \[MPR\] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/aef19608-353c-48cd-89b2-f76601598a32.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/aef19608-353c-48cd-89b2-f76601598a32) | [![\[OR\] \[MIB\] \[E3\] \[CBS\] \[1\] \[ITo\] Establish Impact Tolerances](https://no-cache.hubspot.com/cta/default/3893111/86a15235-66bf-4ff2-a2fc-aefe29518d19.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/86a15235-66bf-4ff2-a2fc-aefe29518d19) | [![\[OR\] \[MIB\] \[E3\] \[CBS\] \[1\] \[SuPS\] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/dc813894-8c9d-4277-a496-5f45b220f990.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/dc813894-8c9d-4277-a496-5f45b220f990) | [![\[OR\] \[MIB\] \[E3\] \[CBS\] \[1\] \[ST\] Perform Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/d9e1fd27-e41f-4735-9e4f-a98355d23bbb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d9e1fd27-e41f-4735-9e4f-a98355d23bbb) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/87af532d-2b9f-45b6-8223-757fba5002e0) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)[](https://cta-redirect.hubspot.com/cta/redirect/3893111/13a448f1-f09c-42da-a57e-0988e41658c5)Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-03-04T02:03:53.285Z",
"datePublished" : "2026-03-03T08:36:13.000Z",
"headline" : "[OR] [MIB] [E3] [CBS] [1] [ITo] Establish Impact Tolerances",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-mib-e3-cbs-1-ito-establish-impact-tolerances",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```