A fundamental shift in operational resilience is the transition from a process-centric view of operations to a service-centric perspective.
Traditional business continuity and risk management practices have long focused on internal processes; however, modern regulatory expectations (e.g., MAS, BSP, BNM, PRA/FCA) emphasise prioritising Critical Business Services (CBS)—services delivered to external stakeholders.
Within the context of Mapping Interconnections and Interdependencies (OR Phase 2 – P2-S2), understanding the distinction between service-centric and process-centric approaches is essential.
This chapter defines both concepts, explains their roles, and provides a structured comparison to guide the effective implementation of operational resilience.
The purpose of this chapter is to:
A process-centric approach focuses on the internal activities, workflows, and operational steps that an organisation performs to deliver its products or services.
It emphasises:
In a banking environment:
A service-centric approach focuses on the end-to-end delivery of a service to an external customer or stakeholder, particularly those services where disruption would cause intolerable harm.
This aligns directly with the concept of Critical Business Services (CBS) in operational resilience.
Instead of focusing on the process of account opening, a service-centric view considers:
|
Aspect |
Process-Centric |
Service-Centric |
|
Primary Focus |
Internal processes and workflows |
End-to-end service delivered to customers |
|
Perspective |
Inside-out (organisation view) |
Outside-in (customer/regulatory view) |
|
Objective |
Efficiency and control of processes |
Continuity of critical services |
|
Scope |
Individual processes or functions |
Integrated service across multiple processes |
|
Measurement |
Process KPIs (time, cost, quality) |
Impact tolerance (MTD, MTDL, customer impact) |
|
Risk View |
Process-level risks |
Service-level disruption and systemic impact |
|
Mapping Approach |
Maps process steps and activities |
Maps interconnections and interdependencies supporting CBS |
|
Regulatory Alignment |
Traditional BCM and ORM |
Modern operational resilience frameworks (MAS, BSP 1203, BNM, UK PRA/FCA) |
|
Example |
KYC verification process |
Customer onboarding service |
These approaches are not mutually exclusive—they are hierarchically related:
All services are delivered through processes, but not all processes represent critical services.
Process-centric mapping focuses on:
This helps identify:
However, it may fail to capture end-to-end service impact.
Service-centric mapping focuses on:
This enables organisations to:
A robust operational resilience framework requires integration of both approaches:
|
Layer |
Focus |
Outcome |
|
Service Layer |
CBS identification and impact tolerance |
Defines resilience objectives |
|
Process Layer |
Detailed workflows and activities |
Enables execution and control |
|
Resource Layer |
People, technology, facilities, third parties |
Identifies dependencies |
Regulators increasingly require organisations to:
This cannot be achieved through a purely process-centric lens.
Service-centric mapping enables organisations to:
Ultimately, resilience is measured by:
A service-centric approach ensures that resilience efforts are aligned with these outcomes.
Organisations often encounter the following challenges when shifting approaches:
Addressing these requires:
To effectively adopt a service-centric approach while leveraging process-centric strengths:
The distinction between service-centric and process-centric approaches is fundamental to the effective implementation of operational resilience.
Organisations that successfully integrate both approaches can move beyond compliance and achieve true resilience—ensuring that Critical Business Services remain available even under severe but plausible disruption scenarios.
In the context of mapping interconnections and interdependencies, adopting a service-centric perspective ensures that mapping efforts are not merely technical exercises but strategic enablers of resilience, risk management, and customer protection.
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
|
If you have any questions, click to contact us. |
||
|
|