---
title: [OR] [PIDM] [E3] [CBS] [1] [MII] Map Interconnections and Interdependencies
description: [OR] [PIDM] [E3] [CBS] [1] [MII] Map Interconnections and Interdependencies
image: https://blog.bcm-institute.org/hubfs/PIDM%20Graphic%20Folder/PIDM%20Morepost/PIDM%20CBS%201%20Morepost/%5BOR%5D%20%5BPIDM%5D%20%5BE3%5D%20%5BCBS%5D%20%5B1%5D%20%5BMII%5D%20Deposit%20Insurance%20Protection%20Administration.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Building Operational Resilience at PIDM: A Strategic Implementation Guide
# \[OR\] \[PIDM\] \[E3\] \[CBS\] \[1\] \[MII\] Map Interconnections and Interdependencies
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/7a6f5c32-e8ae-42c9-acb3-ba7f4b3f4998)
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/7bb680f4-0965-49cd-b448-b88dff6349fb)Mapping interconnections and interdependencies is fundamental to establishing operational resilience for Perbadanan Insurans Deposit Malaysia (PIDM).
It enables the organisation to understand how its critical business services are delivered through interconnected processes, people, technology, information, facilities, third parties, and external institutions.
For CBS-1: Deposit Insurance Protection Administration, mapping is particularly important because the service depends on a coordinated network of activities involving member bank participation, deposit insurance coverage, deposit information management, premium administration, compliance monitoring, and protection-related communication.
These activities do not operate independently. Information produced by one process may become an essential input to another.
A technology platform may support several processes simultaneously, while information received from member banks may influence coverage determinations, premium calculations, and other protection-related decisions.[![\[OR\] \[E3\] \[Interdependency and Interconnectivity\] Mapping Interconnections](https://no-cache.hubspot.com/cta/default/3893111/8d43236b-bd8d-4fe6-8e75-3fe4df59be8e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8d43236b-bd8d-4fe6-8e75-3fe4df59be8e)
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/677f466a-109d-4603-b6e8-82e42e2f6e0b)
[Dr Goh Moh Heng](https://blog.bcm-institute.org/ebook-or/author/dr-goh-moh-heng) Sep 28, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
#### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/52e8419c-3654-4d2f-815d-aa9dca0619a5)
### [![\[OR\] \[E3\] \[Interdependency and Interconnectivity\] Mapping Interconnections](https://no-cache.hubspot.com/cta/default/3893111/8d43236b-bd8d-4fe6-8e75-3fe4df59be8e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8d43236b-bd8d-4fe6-8e75-3fe4df59be8e)[](https://cta-redirect.hubspot.com/cta/redirect/3893111/677f466a-109d-4603-b6e8-82e42e2f6e0b)**CBS-1 Deposit Insurance Protection Administration**
#### **Introduction**
[![\[OR\] \[PIDM\] \[E3\] \[CBS\] \[1\] \[MII\] Deposit Insurance Protection Administration](https://no-cache.hubspot.com/cta/default/3893111/2d1258ae-8671-46c3-8185-b57fa19bfad8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/2d1258ae-8671-46c3-8185-b57fa19bfad8)[](https://cta-redirect.hubspot.com/cta/redirect/3893111/b5438182-f1e5-4248-bea5-2d5044665d8d)Mapping interconnections and interdependencies is fundamental to establishing operational resilience for Perbadanan Insurans Deposit Malaysia (PIDM).
It enables the organisation to understand how its critical business services are delivered through interconnected processes, people, technology, information, facilities, third parties, and external institutions.
For CBS-1: Deposit Insurance Protection Administration, mapping is particularly important because the service depends on a coordinated network of activities involving member bank participation, deposit insurance coverage, deposit information management, premium administration, compliance monitoring, and protection-related communication.
These activities do not operate independently. Information produced by one process may become an essential input to another.
A technology platform may support several processes simultaneously, while information received from member banks may influence coverage determinations, premium calculations, and other protection-related decisions.
A disruption affecting a single component could therefore propagate across several Sub-CBS processes and compromise the delivery of the parent service.
For example, the unavailability of validated total insured deposit information could delay premium assessment, create reconciliation discrepancies and affect the reliability of information needed for subsequent reimbursement preparedness.
Mapping gives PIDM a structured way to identify these relationships before disruptions occur.
The completed map should support five principal outcomes:
- Establish an end-to-end understanding of how CBS-1 is delivered.
- Identify upstream and downstream relationships between its 18 Sub-CBS processes.
- Document reliance on internal functions, technology, information, personnel, facilities, and external entities.
- Identify concentration risks, single points of failure, and critical operational hand-offs.
- Provide evidence for impact tolerance setting, scenario testing, remediation, and management oversight.
The mapping also provides a structured evidence base for supervisory engagement. It enables reviewers to trace a critical service from its intended outcome through its supporting processes and resources and examine whether PIDM understands the consequences of losing significant dependencies.
Implementation status: This chapter presents a proposed mapping model based on PIDM's statutory role and the previously developed CBS catalogue.
PIDM must confirm actual process ownership, technology architecture, service providers, locations, interfaces, and recovery arrangements through internal mapping workshops.
#### **Mapping Scope and Methodology**
##### **Scope of the Mapping Exercise**
The mapping covers all 18 Sub-CBS processes supporting CBS-1.
The service begins with establishing and maintaining deposit insurance membership and coverage arrangements. It continues through deposit information administration, premium assessment and collection, compliance monitoring, protection communication, and exception management.
It also includes processes to monitor service performance, manage disruptions, and restore normal administration.
The mapping must capture both routine operating conditions and circumstances in which the service is under stress.
##### **Distinguishing Interconnections from Interdependencies**
Although closely related, interconnections and interdependencies serve different analytical purposes.
| Concept | Meaning | PIDM example |
| --- | --- | --- |
| Interconnection | A relationship through which processes or components exchange information, decisions, instructions, or services. | CBS-1.8 supplies validated total insured deposit information to CBS-1.10 for premium assessment. |
| Interdependency | A reliance in which one process requires another component to remain available, accurate, or sufficiently capable. | CBS-1.10 depends on the availability and integrity of validated total insured deposit information to calculate accurate premiums. |
An interconnection describes how components are linked.
An interdependency explains why the relationship matters, what must remain available and what happens when the required component fails.
##### **Mapping Conventions**
The following conventions are applied throughout the chapter.
Upstream interconnections are processes or entities that supply information, instructions, approvals or services to the Sub-CBS being examined.
Downstream interconnections are processes or entities that receive outputs, decisions, information or services from the Sub-CBS.
Internal dependencies include PIDM business functions, specialist personnel, applications, information repositories and facilities.
External dependencies include member banks, technology providers, communication service providers, relevant authorities and other external organisations.
Cross-CBS dependencies identify relationships with other critical business services in the proposed PIDM enterprise catalogue.
A relationship with another CBS does not automatically mean that the entire receiving service depends on the entire supplying service. The specific shared information, process, capability or resource must be established.
##### **Other CBS Considered in the Mapping**
The mapping uses the previously proposed PIDM CBS catalogue as a reference.
The principal cross-service relationships involve:
| CBS code | Critical Business Service | Relationship with CBS-1 |
| --- | --- | --- |
| CBS-2 | Insured Deposit Reimbursement | Receives relevant coverage determinations, member information and deposit insurance records. |
| CBS-5 | Member Institution Resolution Execution | May require verified membership, coverage and protection information during resolution activities. |
| CBS-6 | Member Institution Failure Preparedness and Resolution Readiness | Uses protection information and administrative records to support preparedness activities. |
| CBS-7 | Member Institution Membership and Protection Obligations Administration | Shares membership, premium and compliance administration activities. |
| CBS-8 | Financial Resources Availability for Protection and Resolution | May use premium collection information and relevant financial records. |
| CBS-9 | Critical Depositor, Policy Owner and Public Communication | Relies on verified protection information for authoritative stakeholder communication. |
| CBS-10 | Critical Member Institution Information and Coordination | Supports information exchange with member institutions and relevant authorities. |
CBS-3 and CBS-4 concern takaful and insurance benefits protection.
They are not assumed to have direct process dependencies on deposit insurance administration, although shared corporate resources may create indirect concentration risks.
Catalogue boundary issue: CBS-7 overlaps with the membership and premium administration activities within CBS-1.
PIDM should resolve this overlap during catalogue validation by assigning one accountable process owner and documenting any shared-service relationship without duplicating ownership or controls.[![Banner \[Table\] \[OR\] \[E3\] Map Dependency](https://no-cache.hubspot.com/cta/default/3893111/8a44ad9d-681b-48ff-90b1-b994a1c12a64.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8a44ad9d-681b-48ff-90b1-b994a1c12a64)
#### **Map Interconnections**
The interconnection map identifies how information, decisions, approvals, and service outputs move between the 18 Sub-CBS processes and their internal and external counterparts.
Each row distinguishes the upstream inputs a process receives from the downstream outputs it produces. The connected components also include other PIDM critical business services where a material service-to-service relationship is reasonably anticipated.
The relationships are proposed for validation. They do not establish that a particular interface, automated transfer, or organisational reporting arrangement currently exists at PIDM.
##### **Table 1: Map Interconnections for CBS-1**
| Name of Sub-CBS | Connected Component | Connection Type | Interconnection Description | Upstream Interconnections | Downstream Interconnections |
| --- | --- | --- | --- | --- | --- |
| CBS-1.1 Administer Member Bank Participation | Member banks; membership administration; legal and compliance; CBS-1.5; CBS-1.9; CBS-1.12; CBS-7 Member Institution Membership and Protection Obligations Administration | External institutional; internal process; cross-CBS | Membership status and institutional changes establish the basis for determining applicable deposit insurance obligations. The process distributes verified membership information to reporting, premium, and compliance activities. | Authoritative licensing and status information from BNM; member bank notifications; statutory membership requirements; legal interpretations. | Verified membership records to CBS-1.5, CBS-1.9, and CBS-1.12; membership information to CBS-7; relevant updates to CBS-1.14 and CBS-10 Critical Member Institution Information and Coordination. |
| CBS-1.2 Maintain Deposit Insurance Coverage Framework | Legal and policy functions; CBS-1.3; CBS-1.4; CBS-1.13; CBS-1.14; CBS-2 Insured Deposit Reimbursement; CBS-9 Critical Depositor, Policy Owner and Public Communication | Statutory; policy; internal process; cross-CBS | Translates applicable deposit insurance legislation and authorised coverage decisions into consistent operational rules. These rules govern product insurability, coverage records, and protection-related communication. | Applicable legislation; authorised policy decisions; legal interpretations; relevant statutory or regulatory developments. | Coverage rules to CBS-1.3 and CBS-1.4; disclosure guidance to CBS-1.13 and CBS-1.14; coverage criteria to CBS-2 and CBS-9. |
| CBS-1.3 Assess Deposit Product Insurability | Member banks; product assessment specialists; legal; CBS-1.2; CBS-1.4; CBS-1.13; CBS-1.15 | External information; assessment; approval; internal process | Evaluates deposit product characteristics against applicable protection rules and produces documented insurability determinations. | Product specifications and supporting information from member banks; coverage criteria from CBS-1.2; legal clarification where necessary. | Determinations to CBS-1.4; disclosure implications to CBS-1.13; disputed or unusual cases to CBS-1.15; relevant classification information to CBS-2. |
| CBS-1.4 Administer Deposit Product Coverage Records | Product coverage records; CBS-1.2; CBS-1.3; CBS-1.13; CBS-1.14; CBS-2; CBS-9 | Information management; internal process; cross-CBS | Maintains the authoritative record of deposit product protection determinations and makes current classification information available for administrative and communication purposes. | Approved insurability determinations from CBS-1.3; coverage changes from CBS-1.2; authorised product updates. | Current coverage records to CBS-1.13 and CBS-1.14; applicable coverage information to CBS-2 and CBS-9; record discrepancies to CBS-1.15. |
| CBS-1.5 Administer Member Bank Deposit Information Requirements | Member banks; information governance; legal and compliance; CBS-1.1; CBS-1.6; CBS-1.7; CBS-10 | External information exchange; specification; internal process; cross-CBS | Establishes information requirements and submission arrangements necessary for deposit insurance administration. Coordinates specification changes and communicates obligations to member banks. | Membership information from CBS-1.1; applicable information requirements; data specifications; operational feedback from CBS-1.6 and CBS-1.7. | Submission specifications to member banks and CBS-10; information requirements to CBS-1.6; compliance obligations to CBS-1.12. |
| CBS-1.6 Receive and Validate Deposit Insurance Information | Member banks; secure information exchange; CBS-1.5; CBS-1.7; CBS-1.8; CBS-1.12; CBS-10 | Data transfer; validation; exception escalation; cross-CBS | Receives deposit insurance information and verifies completeness, format, and consistency before acceptance for administrative use. | Member bank submissions through authorised channels; specifications from CBS-1.5; validation rules; corrections from submitting institutions. | Accepted information to CBS-1.7 and CBS-1.8; submission deficiencies to CBS-1.12 and CBS-1.15; status and correction requests through CBS-10. |
| CBS-1.7 Maintain Insured Deposit Information and Records | Information management; records administration; CBS-1.6; CBS-1.8; CBS-1.10; CBS-2; CBS-6 Member Institution Failure Preparedness and Resolution Readiness | Data management; record preservation; internal process; cross-CBS | Maintains accepted deposit insurance information and relevant historical records so that authorised administrative processes can use reliable information. | Validated information from CBS-1.6; authorised corrections; retention and information governance requirements. | Reliable records to CBS-1.8 and CBS-1.10; relevant information to CBS-2 and CBS-6; integrity issues to CBS-1.15 and CBS-1.17. |
| CBS-1.8 Validate Total Insured Deposits | Member banks; deposit information specialists; CBS-1.6; CBS-1.7; CBS-1.10; CBS-1.12; CBS-7 | Data reconciliation; assessment; internal process; cross-CBS | Validates reported total insured deposits for applicable administrative and premium purposes, including examination of material inconsistencies. | Reported amounts and supporting submissions from member banks; accepted information from CBS-1.6 and CBS-1.7; applicable calculation requirements. | Validated amounts to CBS-1.10 and CBS-7; discrepancies to CBS-1.15; reporting deficiencies to CBS-1.12. |
| CBS-1.9 Assess Member Bank Premium Classification | Premium assessment specialists; relevant risk assessment function; CBS-1.1; CBS-1.10; CBS-7 | Classification; decision; internal process; cross-CBS | Determines or validates applicable member bank premium classifications under the authorised premium framework. | Membership status from CBS-1.1; applicable premium rules; authorised classification inputs and assessment information. | Approved classifications to CBS-1.10 and CBS-7; disputed classifications to CBS-1.15; compliance concerns to CBS-1.12. |
| CBS-1.10 Calculate and Assess Deposit Insurance Premiums | Premium administration; finance; CBS-1.8; CBS-1.9; CBS-1.11; CBS-7; CBS-8 Financial Resources Availability for Protection and Resolution | Financial calculation; authorisation; internal process; cross-CBS | Combines validated assessment information and premium classifications to calculate obligations and issue authorised premium assessments. | Validated total insured deposits from CBS-1.8; classifications from CBS-1.9; prescribed rates and approved calculation rules. | Premium assessments to CBS-1.11 and member banks; assessment records to CBS-7; relevant financial information to CBS-8. |
| CBS-1.11 Administer Premium Collection and Reconciliation | Member banks; finance and treasury; banking service providers; CBS-1.10; CBS-1.12; CBS-7; CBS-8 | Payment information, financial reconciliation, and external and cross-CBS | Confirms receipt of premiums and reconciles payments against assessed obligations, identifying shortfalls, overpayments, and unresolved discrepancies. | Assessments from CBS-1.10; payment confirmations and bank statements; member bank remittance information. | Reconciled collection records to finance, CBS-7 and CBS-8; outstanding obligations to CBS-1.12; discrepancies to CBS-1.15. |
| CBS-1.12 Monitor Member Bank Compliance with Deposit Insurance Requirements | Compliance; legal; member banks; CBS-1.1; CBS-1.5; CBS-1.6; CBS-1.11; CBS-1.13; CBS-7 | Compliance monitoring; escalation; institutional coordination | Consolidates evidence of member bank adherence to applicable membership, information, premium, and disclosure obligations and coordinates follow-up on deficiencies. | Membership records; submission status; premium reconciliation results; disclosure monitoring findings; applicable compliance criteria. | Compliance findings and corrective requests to member banks; material exceptions to CBS-1.15; relevant status information to CBS-7 and authorised management recipients. |
| CBS-1.13 Administer Deposit Insurance Disclosure Requirements | Member banks; legal and communications; CBS-1.2; CBS-1.4; CBS-1.12; CBS-1.14; CBS-9 | Disclosure; verification; compliance; cross-CBS | Coordinates requirements for accurate member bank disclosure of deposit insurance protection and addresses inconsistencies between approved coverage information and published statements. | Coverage rules from CBS-1.2; product classifications from CBS-1.4; applicable disclosure requirements; member bank disclosure materials. | Disclosure instructions to member banks; verified information to CBS-1.14 and CBS-9; non-compliance findings to CBS-1.12 and CBS-1.15. |
| CBS-1.14 Provide Deposit Insurance Protection Information | Depositors; member banks; public communication channels; CBS-1.1; CBS-1.2; CBS-1.4; CBS-1.13; CBS-9 | Information delivery; enquiry management; cross-CBS | Provides verified information on membership, coverage, and protection arrangements through authorised channels and responds to relevant enquiries. | Membership records; coverage rules; approved product classifications; verified disclosure information; authorised communication guidance. | Protection information to depositors and member banks; communication content to CBS-9; complex enquiries to CBS-1.15; service feedback to CBS-1.16. |
| CBS-1.15 Manage Deposit Insurance Administrative Exceptions | Process owners; legal; compliance; finance; member banks; CBS-1.3; CBS-1.6; CBS-1.8; CBS-1.10; CBS-1.11; CBS-1.12 | Exception referral; investigation; decision; corrective feedback | Coordinates investigation and resolution of administrative discrepancies requiring specialist assessment, escalation, or authorised decisions. | Product classification disputes; submission errors; premium discrepancies; compliance findings; protection enquiries requiring escalation. | Authorised resolutions and corrections to originating processes; material risk findings to CBS-1.16; unresolved service-threatening issues to CBS-1.17. |
| CBS-1.16 Monitor Deposit Insurance Service Performance | CBS owner; operational resilience; risk management; all CBS-1 processes; CBS-1.17; CBS-1.18 | Performance reporting; risk escalation; operational oversight | Consolidates service performance information to identify backlogs, quality deterioration, unresolved exceptions, and emerging threats to CBS-1 delivery. | Processing metrics from CBS-1.1–1.14; exception information from CBS-1.15; incident and recovery status from CBS-1.17 and CBS-1.18. | Performance reports to the CBS owner and management; service-threatening conditions to CBS-1.17; improvement requirements to relevant process owners. |
| CBS-1.17 Manage Deposit Insurance Service Disruptions | CBS owner; BCM; crisis management; technology and cyber teams; affected Sub-CBS; CBS-1.16; CBS-1.18; CBS-9 | Incident activation; coordination; escalation; cross-CBS | Coordinates the response to incidents affecting deposit insurance administration, including impact assessment, continuity activation, prioritisation, and stakeholder communication. | Alerts from CBS-1.16; incident reports from affected processes; technology and third-party incident information; approved continuity procedures. | Response instructions to affected processes; recovery priorities to CBS-1.18; authorised communications through CBS-9; escalation to management and relevant authorities where applicable. |
| CBS-1.18 Restore and Reconcile Deposit Insurance Administration | Affected process owners; IT disaster recovery; information management; finance; CBS-1.7; CBS-1.11; CBS-1.15; CBS-1.16; CBS-1.17 | Recovery; reconciliation; service restoration; feedback | Restores affected processes and verifies information integrity, outstanding transactions, and administrative completeness before returning to normal operations. | Recovery instructions from CBS-1.17; backups and preserved records; transaction logs; outstanding work inventories; specialist recovery support. | Reconciled records and restored capabilities to affected processes; recovery status to CBS-1.16 and CBS-1.17; residual exceptions to CBS-1.15; lessons for resilience improvement. |
##### **Interpretation of the Interconnection Map**
The map identifies several key relationships to examine during PIDM's mapping workshops.
First, membership and coverage administration establish the authoritative information downstream processes require.
Second, deposit information management forms a significant processing chain.
Before reliable total insured deposit information can be produced, information requirements must be communicated, submissions received, data validated, and records maintained.
Third, premium administration depends on the integrity of both classification decisions and assessment information.
Fourth, compliance monitoring and communication draw on information produced by several earlier processes. They therefore require coordinated change management to prevent inconsistent or outdated information from being distributed.
Finally, service performance monitoring, disruption management, and restoration provide cross-cutting capabilities. They must operate across the entire service rather than being confined to individual departments.
The next table examines the resources these connections depend on and the consequences of their disruption.
#### **Map Interdependencies**
The interdependency map documents the resources and capabilities each Sub-CBS relies on. It explains how these dependencies support service delivery and what could happen if they become unavailable, compromised, or severely degraded.
The mapping covers people, technology, information, facilities, external entities, and other critical business services.
Functional system descriptions are used because PIDM has not established its actual application inventory, provider arrangements, or technology architecture.
Validate the analysis against PIDM's asset inventory, business impact analyses, technology architecture, outsourcing register, service-level agreements, and continuity arrangements.
##### **Table 2: Map Interdependencies for CBS-1**
| Name of Sub-CBS | People | Systems and Technology | Data and Information Flows | Facilities | Third Parties / External Entities | Interconnected CBS | Nature of Dependency | Disruption Impact |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| CBS-1.1 Administer Member Bank Participation | Membership administration officers, legal specialists, compliance personnel, and authorised approvers. | Membership Register, Document Management System, secure communication platform, and identity and access management. | Authoritative licensing and institutional status information flows into the membership register; validated membership changes flow to reporting, premium, and compliance processes. | Authorised administrative workplace; secure remote access; alternative operating location where required. | Member banks; BNM is the relevant licensing and supervisory authority. | CBS-7 Member Institution Membership and Protection Obligations Administration; CBS-10 Critical Member Institution Information and Coordination. | Accurate membership administration relies on timely institutional status information, authorised decisions and the availability of a controlled membership register. | Incorrect or delayed membership updates could affect reporting obligations, premium assessments, compliance monitoring and the reliability of protection information. |
| CBS-1.2 Maintain Deposit Insurance Coverage Framework | Legal counsel; deposit insurance policy specialists; compliance personnel; authorised policy approvers. | Policy and Rules Repository; Document Management System; controlled publication platform. | Convert statutory provisions and authorised interpretations into operational coverage rules and distribute them to product assessment, records, and communication processes. | Secure office or remote legal review capability; access to authoritative legal records. | Relevant legislative and government sources; BNM, where consultation or coordination is applicable. | CBS-2 Insured Deposit Reimbursement; CBS-9 Critical Depositor, Policy Owner and Public Communication. | Coverage administration depends on authoritative legal interpretation, approved rules and controlled dissemination of changes. | Incorrect or unavailable rules could result in inconsistent product determinations, inaccurate protection communication and subsequent reimbursement complications. |
| CBS-1.3 Assess Deposit Product Insurability | Product assessment specialists, legal advisers, deposit insurance officers, and authorised decision-makers. | Product Assessment Workflow; Document Management System; Coverage Rules Repository. | Member bank product specifications and contractual terms are assessed against approved coverage criteria; determinations are transmitted to coverage records. | Secure assessment workplace; remote access to product documentation. | Member banks supplying product information; external legal specialists if formally engaged. | CBS-2 Insured Deposit Reimbursement; CBS-9 Critical Depositor, Policy Owner and Public Communication. | Product classification depends on complete product information, current coverage rules and specialist interpretation. | Delayed or incorrect determinations could produce inaccurate coverage records, inconsistent disclosures and uncertainty about deposit protection. |
| CBS-1.4 Administer Deposit Product Coverage Records | Coverage records administrators, information governance specialists, and product assessment personnel. | Product Coverage Register, Document Management System, database, and backup services. | Approved product classifications are recorded, version-controlled, and distributed to disclosure, enquiry, and reimbursement-related processes. | Secure records administration environment; alternative access to preserved records. | Member banks providing product changes; data hosting provider if externally engaged. | CBS-2 Insured Deposit Reimbursement; CBS-9 Critical Depositor, Policy Owner and Public Communication. | Accurate coverage records depend on approved classification decisions, controlled updates, record integrity and authorised access. | Unavailable or corrupted records could cause inconsistent protection information and delay confirmation of product coverage. |
| CBS-1.5 Administer Member Bank Deposit Information Requirements | Deposit insurance operations officers; data governance specialists; legal and compliance personnel; technical interface specialists. | Reporting Requirements Repository; secure member communication platform; information specification management tools. | Membership status and applicable reporting rules determine submission requirements; approved specifications flow to member banks and validation processes. | Secure administrative workplace; remote communication capability. | Member banks, telecommunications, and secure exchange providers, where applicable. | CBS-7 Member Institution Membership and Protection Obligations Administration; CBS-10 Critical Member Institution Information and Coordination. | Information administration depends on accurate membership information, approved specifications and reliable communication of requirements. | Unavailable or outdated specifications could cause inconsistent submissions, validation failures and downstream processing delays. |
| CBS-1.6 Receive and Validate Deposit Insurance Information | Information processing officers; data validation specialists; member bank liaison personnel; technology support. | Secure Data Submission Platform; Data Validation Engine; file transfer interface; monitoring and access controls. | Member bank submissions enter the validation process; accepted records proceed to CBS-1.7 and CBS-1.8, while rejected submissions generate correction requests. | Secure processing environment; primary and recovery computing facilities where applicable. | Member banks, secure connectivity providers, and hosting or managed service providers, if engaged. | CBS-2 Insured Deposit Reimbursement; CBS-10 Critical Member Institution Information and Coordination. | Processing depends on timely submissions, functioning transfer channels, accurate validation rules and sufficient processing capacity. | Submission failures or undetected data corruption could prevent reliable information from reaching downstream administration and reimbursement preparedness processes. |
| CBS-1.7 Maintain Insured Deposit Information and Records | Records custodians; information governance officers; database administrators; cybersecurity specialists. | Deposit Information Repository; database management; backup and recovery platform; access management; audit logging. | Accepted information and authorised corrections enter controlled records; validated information is retrieved for assessment and relevant preparedness purposes. | Secure data hosting environment; recovery location; authorised records access facilities. | Data hosting or backup providers, if engaged, member banks as originating information sources. | CBS-2 Insured Deposit Reimbursement; CBS-6 Member Institution Failure Preparedness and Resolution Readiness; CBS-10 Critical Member Institution Information and Coordination. | Record availability depends on information integrity, controlled access, backup recoverability and preservation of authoritative versions. | Loss or corruption of records could impair premium administration, delay information retrieval and compromise preparedness for member bank failure. |
| CBS-1.8 Validate Total Insured Deposits | Deposit insurance analysts, data specialists, member bank liaison officers, and authorised reviewers. | Deposit Information Repository; Reconciliation and Validation Platform; reporting and analytical tools. | Reconcile reported total insured deposit figures against accepted submissions and applicable calculation requirements; validated figures flow to premium assessment. | Secure analytical workplace; access to protected information repositories. | Member banks provide reported amounts and supporting explanations. | CBS-7 Member Institution Membership and Protection Obligations Administration; CBS-10 Critical Member Institution Information and Coordination. | Accurate validation depends on complete member submissions, reliable source records, consistent calculation rules and specialist review. | Incorrect or delayed validation could result in inaccurate premium assessments, disputes and unreliable deposit insurance administration records. |
| CBS-1.9 Assess Member Bank Premium Classification | Premium assessment specialists; relevant risk assessment personnel; legal and compliance reviewers; authorised approvers. | Premium Classification Platform; Assessment Repository; Document Management System. | Approved assessment inputs and applicable classification criteria produce premium classifications that flow to CBS-1.10. | Secure assessment workplace; alternative access to classification records. | Member banks supplying required assessment information; BNM, where authorised information coordination is applicable. | CBS-7 Member Institution Membership and Protection Obligations Administration. | Classification depends on reliable assessment inputs, current premium rules, specialist judgement and documented approval. | Classification errors or processing delays could affect premium calculations, create member disputes and require retrospective corrections. |
| CBS-1.10 Calculate and Assess Deposit Insurance Premiums | Premium administration officers; finance specialists; calculation reviewers; authorised approvers. | Premium Assessment Platform, calculation engine, Financial Management System, and Document Management System. | Validated total insured deposits and approved premium classifications are combined with applicable rates to produce assessments and financial records. | Secure financial administration workplace; recovery access to assessment records. | Member banks receiving assessments; technology service providers, if engaged. | CBS-7 Member Institution Membership and Protection Obligations Administration; CBS-8 Financial Resources Availability for Protection and Resolution. | Premium assessment depends on accurate input data, approved classification, calculation integrity and authorisation controls. | Unavailable or inaccurate assessment capability could delay premium obligations, generate financial discrepancies and affect the reliability of premium-related financial information. |
| CBS-1.11 Administer Premium Collection and Reconciliation | Finance and treasury officers; premium administration personnel; reconciliation specialists; authorised reviewers. | Financial Management System; bank statement interface; reconciliation tools; secure payment information platform. | Premium assessments are matched against payment confirmations and bank statements; reconciled records flow to finance and compliance. | Secure finance workplace; authorised alternative processing location. | Member banks; banking and payment service providers. | CBS-7 Member Institution Membership and Protection Obligations Administration; CBS-8 Financial Resources Availability for Protection and Resolution. | Collection administration depends on payment information, access to bank records, functioning reconciliation controls and authorised financial personnel. | Delayed or incorrect reconciliation could obscure unpaid premiums, produce inaccurate financial records and delay resolution of member obligations. |
| CBS-1.12 Monitor Member Bank Compliance with Deposit Insurance Requirements | Compliance officers, legal specialists, membership and premium personnel, and authorised enforcement decision-makers. | Compliance Monitoring Platform, case management tools, Document Management System, and reporting dashboard. | Submission records, premium status, membership information, and disclosure findings are consolidated into compliance assessments and corrective actions. | Secure compliance workplace; access to case records is protected. | Member banks; BNM, where coordination is authorised or required; external legal advisers if engaged. | CBS-7 Member Institution Membership and Protection Obligations Administration; CBS-10 Critical Member Institution Information and Coordination. | Effective monitoring depends on timely and accurate information from multiple administrative processes and access to applicable compliance criteria. | Monitoring failures could allow material non-compliance to remain undetected, delay corrective action and weaken confidence in protection administration. |
| CBS-1.13 Administer Deposit Insurance Disclosure Requirements | Disclosure specialists, legal and compliance officers, communications personnel, and member bank liaison officers. | Disclosure Requirements Repository; Document Management System; communication and review tools. | Approved coverage rules and product classifications are translated into disclosure requirements; member bank materials and findings are reviewed. | Secure workplace; remote review and communication facilities. | Member banks; external communication providers were engaged. | CBS-9 Critical Depositor, Policy Owner and Public Communication; CBS-7 Member Institution Membership and Protection Obligations Administration. | Disclosure administration depends on current protection information, member bank cooperation and reliable review and communication channels. | Inaccurate or delayed disclosure could mislead depositors about protection arrangements and create additional compliance and communication risks. |
| CBS-1.14 Provide Deposit Insurance Protection Information | Deposit insurance information officers, communications specialists, enquiry handlers, and legal reviewers. | Public Website; Enquiry Management Platform; Content Management System; telephony and communication services. | Verified membership, coverage, and product information are converted into approved public content and enquiry responses; feedback is fed back into service monitoring. | Communication workplace; remote enquiry-handling capability; alternative communications location, where applicable. | Depositors; member banks; telecommunications, website hosting, and communication providers, if engaged. | CBS-9 Critical Depositor, Policy Owner and Public Communication; CBS-2 Insured Deposit Reimbursement. | Accurate information delivery depends on verified source records, approved content, functioning communication channels and trained personnel. | Channel outages or inaccurate content could prevent depositors from obtaining reliable protection information, increase enquiries and undermine confidence. |
| CBS-1.15 Manage Deposit Insurance Administrative Exceptions | Process owners, legal specialists, finance and compliance personnel, and authorised escalation officers. | Exception Management Platform, Case Management System, Document Management System, and secure collaboration tools. | Investigate disputes and discrepancies from operational processes; return authorised decisions and corrections to originating processes. | Secure case-handling workplace; alternative access to supporting records. | Member banks provide clarification; external legal or technical specialists are engaged where required. | CBS-7 Member Institution Membership and Protection Obligations Administration; CBS-10 Critical Member Institution Information and Coordination. | Exception resolution depends on complete case evidence, access to relevant specialists, clear authority and reliable communication with affected parties. | Unresolved exceptions could accumulate, delay premium or coverage decisions and propagate inaccurate information across CBS-1. |
| CBS-1.16 Monitor Deposit Insurance Service Performance | CBS owner; operational resilience officers; operational risk specialists; process managers; performance analysts. | Service Monitoring Dashboard, reporting platform; incident and exception registers; operational analytics tools. | Processing volumes, backlogs, errors, incidents, and recovery status are consolidated into service performance information and escalation reports. | Management and monitoring workplace; secure remote dashboard access. | Managed technology providers where monitoring is outsourced; relevant member banks supplying service-related information. | CBS-7 Member Institution Membership and Protection Obligations Administration; CBS-9 Critical Depositor, Policy Owner and Public Communication; CBS-10 Critical Member Institution Information and Coordination. | Monitoring depends on timely operational data, reliable reporting, defined performance indicators and accountable management review. | Loss of monitoring capability could delay detection of service deterioration, allow backlogs to grow and prevent timely activation of continuity arrangements. |
| CBS-1.17 Manage Deposit Insurance Service Disruptions | CBS owner; BCM team; crisis management personnel; technology and cybersecurity specialists; communications officers; executive decision-makers. | Incident Management Platform; emergency communication tools; continuity plan repository; technology monitoring and recovery coordination systems. | Incident alerts and impact assessments trigger response decisions, continuity instructions, stakeholder notifications, and recovery priorities. | Primary crisis coordination facility; alternate command location; secure remote coordination capability. | Member banks, technology and telecommunications providers, BNM, and other authorities where notification or coordination is applicable. | CBS-2 Insured Deposit Reimbursement; CBS-5 Member Institution Resolution Execution; CBS-9 Critical Depositor, Policy Owner and Public Communication; CBS-10 Critical Member Institution Information and Coordination. | Response depends on timely incident detection, available decision-makers, functioning communication channels and executable continuity arrangements. | Failure to coordinate response could prolong CBS-1 disruption, delay escalation, cause inconsistent decisions and increase the consequences for interconnected services. |
| CBS-1.18 Restore and Reconcile Deposit Insurance Administration | Process owners, IT disaster recovery specialists, database administrators, finance and reconciliation personnel, and information governance officers. | Backup and Recovery Platform; restored administrative applications; transaction logs; reconciliation tools; recovery monitoring systems. | Preserved records, backups, and outstanding transaction inventories are used to restore processes; reconciled outputs return to operational systems and monitoring. | Recovery computing environment; alternate operating location; secure access to backup information. | Hosting and recovery providers, if engaged; banking partners and member banks where reconciliation requires external records. | CBS-2 Insured Deposit Reimbursement; CBS-7 Member Institution Membership and Protection Obligations Administration; CBS-8 Financial Resources Availability for Protection and Resolution; CBS-10 Critical Member Institution Information and Coordination. | Restoration depends on recoverable data, available specialist personnel, functioning recovery infrastructure and independent verification of restored information. | Incomplete recovery or reconciliation could leave records inconsistent, cause duplicate or omitted transactions, delay normal operations and affect downstream protection activities. |
##### **Interpretation of the interdependency map**
The mapping demonstrates that CBS-1 depends on more than the availability of individual administrative applications.
Several processes require the same information sources, specialist personnel, technology services, and communication channels.
These shared dependencies mean one disruption could affect multiple Sub-CBS processes simultaneously.
Three types of dependency require particular attention.
Information integrity dependencies: Coverage records, member bank submissions, and premium assessment information must remain accurate and consistent. Restoring access to corrupted information does not restore the service to an acceptable state.
External institutional dependencies: Member banks supply information and participate in administrative processes that PIDM cannot complete independently. Their inability to provide reliable information could affect several downstream processes.
Shared technology and personnel dependencies: Common databases, identity management services, communication platforms, and specialist personnel may support multiple Sub-CBS processes. Their simultaneous loss could disrupt the service.
Confirm these relationships through technical architecture reviews, process walkthroughs, interviews with service owners, and examination of existing continuity arrangements.
#### **Identifying Critical Dependency Chains**
Consolidate the two maps into a set of dependency chains that show how disruption can propagate through CBS-1.
A dependency chain identifies the sequence of processes and resources required to produce a particular service outcome.
##### **Chain A: Membership and coverage administration**
**Membership and coverage chain**
CBS-1.1 · Member Bank Participation
CBS-1.2 · Coverage Framework
CBS-1.3 · Product Insurability
CBS-1.4 · Coverage Records
CBS-1.13 / 1.14 · Disclosure and Protection Information
This chain logically represents related activities, not a strict processing sequence.
Membership administration and the coverage framework provide separate authoritative inputs to product assessment and subsequent communication.
Critical dependency: The integrity and consistency of approved coverage rules and product classifications.
Potential disruption: Incorrect or unavailable coverage information could affect several communication channels simultaneously and create uncertainty over deposit protection.
##### **Chain B: Deposit information administration**
**Deposit information chain**
CBS-1.5 · Information Requirements
CBS-1.6 · Receive and Validate Information
CBS-1.7 · Maintain Records
CBS-1.8 · Validate Total Insured Deposits
CBS-1.10 · Premium Assessment
Critical dependency: The availability and integrity of member bank information and the platforms used to receive, validate, and preserve it.
Potential disruption: A prolonged information exchange outage or undetected data corruption could affect validation, premium assessment, and information needed for reimbursement preparedness.
##### **Chain C: Premium administration**
**Premium administration chain**
CBS-1.8
Validated Total Insured Deposits
CBS-1.9
Premium Classification
CBS-1.10 · Calculate and Assess Premiums
CBS-1.11 · Collection and Reconciliation
CBS-1.12 · Compliance Monitoring
Critical dependency: Accurate assessment inputs, authorised premium rules, reliable financial processing, and banking information.
Potential disruption: A failure affecting calculation or reconciliation could create incorrect premium obligations, delay collection, and generate financial record discrepancies.
##### **Chain D: Disruption and recovery**
**Service disruption and recovery chain**
CBS-1.16 · Detect Service Deterioration
CBS-1.17 · Manage Disruption
CBS-1.18 · Restore and Reconcile
CBS-1.16 · Verify Service Performance
Residual exceptions return to CBS-1.15.
Critical dependency: Effective incident detection, available decision-makers, recoverable information and reliable reconciliation.
Potential disruption: An incident may be technically resolved while CBS-1 remains impaired because records are inconsistent or outstanding work remains incomplete.
#### **Concentration Risks and Single Points of Dependency**
Use the maps to identify resources whose failure could simultaneously disrupt several processes.
The following concentration points are proposed for investigation. They are not confirmed weaknesses in PIDM's existing environment.
##### **Table 3: Potential Concentration Risks**
| Concentration point | Affected Sub-CBS | Potential vulnerability | Recommended assessment |
| --- | --- | --- | --- |
| Shared deposit information repository | CBS-1.6–1.8, CBS-1.10 | One database failure or integrity compromise could interrupt validation and premium assessment. | Verify redundancy, recoverability, data integrity and alternative access. |
| Common identity and access management | Potentially CBS-1.1–1.18 | Authentication failure could prevent multiple teams from accessing otherwise functioning applications. | Assess independent recovery access, privileged access and emergency procedures. |
| Shared data hosting environment | Multiple Sub-CBS, subject to actual architecture | A common infrastructure outage could affect several administrative processes simultaneously. | Map hosting locations, failure domains, recovery arrangements, and provider dependencies. |
| Specialist coverage personnel | CBS-1.2–1.4, CBS-1.13–1.15 | Unavailability of a small group of specialists could delay decisions and exception resolution. | Assess deputisation, cross-training, documented decision rules, and succession. |
| Member bank information channels | CBS-1.5–1.8, CBS-1.12 | Failure of a common submission channel could prevent several institutions from providing the required information. | Assess channel redundancy, alternative submission methods, and surge capacity. |
| Premium processing environment | CBS-1.9–1.11 | Shared calculation or financial processing failures could affect the entire premium cycle. | Assess segregation, calculation controls, backup processing, and reconciliation. |
| Public communication infrastructure | CBS-1.13–1.14, CBS-1.17 | Website or telecommunications failure could prevent timely communication during a sensitive event. | Assess alternative channels, content availability, and communication capacity. |
| Common technology or recovery provider | Multiple Sub-CBS, subject to provider arrangements | Provider failure could impair production and recovery capabilities simultaneously. | Examine contractual arrangements, subcontracting, geographic concentration, and substitutability. |
##### **Assessing the Significance of Concentration Risks**
PIDM should evaluate each concentration point according to the number of affected Sub-CBS processes, the importance of those processes, the availability of alternatives, and the potential consequences for the parent service.
A shared resource is not necessarily an unacceptable risk. The assessment must establish whether its failure could cause CBS-1 to exceed its approved impact tolerance.
Pay particular attention to dependencies that support both production and recovery arrangements.
For example, if production applications and backup systems rely on the same identity management service, an identity infrastructure failure could prevent both normal processing and recovery access.
The mapping should therefore examine not only whether alternative arrangements exist but also whether they are sufficiently independent of the original failure.
#### **Cross-CBS Dependency Analysis**
CBS-1 operates within PIDM's wider protection and resolution responsibilities. Its information and administrative outputs may support other critical business services.
Cross-CBS mapping should identify the specific shared capability or information flow rather than assuming that two services are entirely dependent on each other.
##### **Table 4: Cross-CBS Interconnections and Dependencies**
| Interconnected CBS | CBS-1 relationship | Potential cascading impact |
| --- | --- | --- |
| CBS-2 Insured Deposit Reimbursement | Uses applicable coverage rules, product classifications, and relevant deposit information maintained through CBS-1. | Incorrect or unavailable information could delay coverage verification and complicate reimbursement processing. |
| CBS-5 Member Institution Resolution Execution | May require reliable member bank and protection information when preparing or executing relevant resolution actions. | Unavailable information could delay coordination and complicate decisions involving protected deposits. |
| CBS-6 Member Institution Failure Preparedness and Resolution Readiness | Uses relevant membership, coverage, and deposit information to support preparedness assessments. | Incomplete information could weaken assumptions used in resolution and reimbursement preparedness. |
| CBS-7 Member Institution Membership and Protection Obligations Administration | Shares membership, premium, and compliance activities with CBS-1. | Common processing failures could disrupt both service classifications; overlapping ownership could complicate response and accountability. |
| CBS-8 Financial Resources Availability for Protection and Resolution | Receives relevant premium collection and financial information. | Incorrect or delayed premium information could affect financial records and resource planning, depending on the actual funding arrangements. |
| CBS-9 Critical Depositor, Policy Owner and Public Communication | Uses verified protection information for public communication. | Inaccurate coverage information could propagate across multiple communication channels and undermine confidence. |
| CBS-10 Critical Member Institution Information and Coordination | Supports information exchange between PIDM, member institutions, and relevant authorities. | Failures in shared communication or information-exchange arrangements could disrupt reporting, validation, and administrative coordination. |
##### **Resolving Overlapping Service Boundaries**
The proposed catalogue identifies a significant overlap between CBS-1 and CBS-7.
Both service descriptions include membership administration, premium assessment, and compliance monitoring.
PIDM should determine whether CBS-7 delivers a distinct external service outcome or whether its relevant activities should be treated as supporting processes within CBS-1 and other protection services.
Until this decision is made, the mapping should retain a single authoritative process record and link it to all applicable CBS.
This avoids duplicate process ownership, inconsistent recovery objectives, and competing remediation decisions.
##### **Shared Dependencies Across Deposit Insurance and Takaful Protection**
CBS-3, Takaful and Insurance Benefits Protection Administration, and CBS-4, Protected Takaful and Insurance Benefits Fulfilment, should also be examined for shared corporate dependencies.
Although their operational processes differ from deposit insurance administration, they may use common personnel, infrastructure, communication channels, or governance arrangements.
PIDM should verify these relationships rather than assume that the services operate independently.
#### **Using the Mapping to Support Impact Tolerance Analysis**
Mapping provides the information needed to determine whether CBS-1 can remain within its approved impact tolerance when supporting components fail.
The impact tolerance should be established for the end-to-end critical business service, based on the maximum disruption PIDM can accept before unacceptable consequences arise.
Sub-CBS recovery objectives and supporting resource recovery targets should then be aligned with this service-level tolerance.
BNM's December 2025 Discussion Paper distinguishes service-level disruption tolerances from traditional internal recovery measures and emphasises understanding how dependencies can propagate failures.
##### **Translating Dependencies into Tolerance Requirements**
PIDM should assess each dependency chain against four questions:
1. Which Sub-CBS processes must remain available to maintain the minimum acceptable level of CBS-1?
2. Which processes may operate at reduced capacity or be temporarily deferred?
3. How long can an essential dependency remain unavailable before CBS-1 experiences unacceptable disruption?
4. Which alternative arrangements can maintain service delivery when the primary dependency fails?
For example, a short interruption to a routine information submission process may be manageable outside a reporting deadline.
The same interruption during a critical premium assessment period could have more significant consequences.
The impact assessment should therefore account for timing, processing volumes, downstream obligations, and available alternatives.
##### **Proposed Impact Indicators**
| Impact dimension | Illustrative indicator |
| --- | --- |
| Service availability | Duration of unavailable essential administration. |
| Information integrity | Number or proportion of records requiring correction or revalidation. |
| Processing capacity | Percentage of required administrative workload completed. |
| Backlog | Number of outstanding submissions, assessments or exceptions. |
| Premium administration | Value or number of delayed or disputed premium assessments. |
| Stakeholder impact | Number of member banks or depositors affected by unavailable or inaccurate information. |
| Recovery completeness | Proportion of affected records and transactions successfully reconciled. |
PIDM should calibrate the indicators using actual operating data and its approved risk appetite.
Do not adopt any numerical impact tolerance solely from the illustrative mapping.
#### **Using the Mapping for Severe but Plausible Scenario Testing**
The completed mapping enables PIDM to design scenarios that challenge multiple interconnected components.
Scenario testing should evaluate CBS-1 delivery rather than merely confirm that individual systems can be restored.
The scenarios below are hypothetical and should be refined using validated dependency information.
##### **Table 5: Mapping-Based Scenario Testing**
| Scenario | Dependencies challenged | Potential service consequences | Testing objectives |
| --- | --- | --- | --- |
| S1. Cyberattack corrupts the deposit information repository during a premium assessment cycle. | CBS-1.6–1.8, CBS-1.10; information repository; validation specialists. | Unreliable assessment inputs, processing delays, and potential premium errors. | Verify data integrity recovery, alternative information sources, controlled calculation, and reconciliation. |
| S2. Shared identity management fails across primary and recovery environments. | Multiple administrative applications, authentication services, and recovery personnel. | Simultaneous loss of access to several Sub-CBS processes. | Verify independent emergency access and the ability to maintain essential administration. |
| S3. Multiple member banks cannot submit the required information because of a common connectivity failure. | CBS-1.5–1.8; member banks; information exchange channels. | Accumulating submission backlogs and delayed validation. | Test alternative submission arrangements, prioritisation, and surge processing. |
| S4. The premium calculation platform fails while key specialists are unavailable. | CBS-1.8–1.11; calculation platform; specialist personnel. | Delayed assessments, unresolved discrepancies, and potential collection delays. | Assess manual or alternative processing, deputisation, and independent verification of calculations. |
| S5. Public website and primary communication services fail during heightened depositor enquiries. | CBS-1.13–1.14, CBS-1.17; communication infrastructure; CBS-9. | Inability to provide timely protection information and increased uncertainty. | Test alternative communication channels, message approval, and stakeholder coordination. |
| S6. Recovery infrastructure restores applications but contains outdated administrative records. | CBS-1.7, CBS-1.11, CBS-1.15–1.18; backups; transaction logs. | Inconsistent records, missing transactions, and delayed service restoration. | Verify data reconciliation, integrity checks, backlog clearance, and controlled return to normal operations. |
##### **Testing Cascading Failures**
PIDM should extend individual scenarios to examine how failures propagate through dependency chains.
For example, a deposit information corruption scenario may initially affect CBS-1.7.
The disruption could subsequently prevent CBS-1.8 from validating total insured deposits, delay CBS-1.10 premium assessment, and generate exceptions under CBS-1.15.
If the same information repository supports CBS-2 reimbursement preparedness, the incident may also create cross-service consequences.
The scenario should test whether PIDM can identify these relationships, prioritise recovery, and maintain CBS-1 within its approved impact tolerance.
#### **Mapping Governance, Validation, and Maintenance**
The proposed maps must be validated before they can be relied upon as formal operational resilience evidence.
PIDM should establish a controlled process to confirm mapping accuracy, assign accountability, record supporting evidence, and maintain the maps when changes occur.
##### **Mapping Validation**
Each Sub-CBS process owner should confirm the accuracy of the identified interconnections and dependencies.
Validation should include process walkthroughs, information flow reviews, technology architecture reviews, third-party assessments, and reconciliation against existing BCM documentation.
Pay particular attention to dependencies that have been assumed rather than verified.
##### **Table 6: Mapping Validation and Evidence Requirements**
| Validation area | Required action | Expected evidence |
| --- | --- | --- |
| Process ownership | Confirm accountable owners for all 18 Sub-CBS. | Approved process ownership register. |
| Upstream and downstream relationships | Verify actual information exchanges, decisions, and hand-offs. | Process flow diagrams and interface records. |
| Technology dependencies | Confirm applications, infrastructure, and shared services. | Technology architecture and asset inventory. |
| Information dependencies | Validate data sources, authoritative records, and information flows. | Data lineage and information inventory. |
| People dependencies | Identify specialist roles, deputies, and minimum staffing requirements. | Role and competency matrix. |
| Facilities | Confirm operating locations and alternative arrangements. | Facilities and continuity records. |
| Third parties | Verify providers, service obligations, and recovery arrangements. | Contracts, service-level agreements, and third-party risk assessments. |
| Cross-CBS dependencies | Confirm shared resources and information flows with other CBS owners. | Enterprise dependency register. |
| Concentration risks | Identify common failure domains and assess alternative arrangements. | Concentration risk assessment. |
| Recovery dependencies | Verify that recovery resources are available and sufficiently independent. | Recovery architecture and exercise evidence. |
##### **Recommended Mapping Ownership**
PIDM should assign an accountable CBS owner for the overall mapping of the Deposit Insurance Protection Administration.
Individual Sub-CBS process owners should maintain their respective process information.
Technology, information security, BCM, operational risk, facilities, and third-party management functions should validate the dependencies within their areas of responsibility.
The operational resilience function should coordinate the enterprise view and ensure that relationships between different CBS are consistently recorded.
Senior management should receive reports on material mapping gaps, concentration risks, and unresolved dependencies.
##### **Mapping Maintenance Triggers**
Review the mapping periodically and whenever material changes occur.
Examples include changes to deposit insurance requirements, member bank reporting arrangements, premium administration, technology architecture, service providers, operating locations, or critical personnel.
Mapping should also be updated following significant incidents, scenario testing findings, and independent reviews.
A material change affecting one Sub-CBS should trigger an assessment of its upstream, downstream, and cross-CBS consequences.
##### **Regulatory and Supervisory Evidence**
For supervisory review, PIDM should maintain an evidence package demonstrating that its mapping is complete, accurate, and operationally useful.
The package should include the approved CBS definition, Sub-CBS catalogue, interconnection and interdependency maps, identified concentration risks, supporting evidence, accountable owners, and relevant validation records.
The mapping should be traceable to impact tolerance assessments, scenario testing, and remediation decisions.
BNM's 19 December 2025 Discussion Paper identifies visibility over internal and external dependencies, third-party arrangements, and failure propagation as foundational operational resilience considerations.
However, the paper's defined population of financial institutions does not expressly include PIDM. This chapter, therefore, uses its principles as a methodological benchmark, not as confirmation that every proposed mapping requirement is legally binding on PIDM.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/2dbf77a9-2b10-4a06-b39b-ac8f1611e999)
Mapping interconnections and interdependencies provides PIDM with an end-to-end understanding of how CBS-1: Deposit Insurance Protection Administration is delivered through its 18 supporting Sub-CBS processes.
The interconnection map identifies the relationships through which information, decisions, approvals, and service outputs move between processes, member banks, internal functions, and other critical business services.
The interdependency map extends this analysis by identifying the people, technology, information, facilities, third parties, and operational capabilities required to maintain these relationships.
Together, the maps reveal potential vulnerabilities that may not be apparent when assessing processes individually.
These include shared information repositories, common technology infrastructure, dependencies on specialist personnel, external information-exchange arrangements, and critical hand-offs between administrative processes.
The mapping also identifies concentration risks and possible single points of failure that could affect several Sub-CBS processes simultaneously.
For PIDM, these findings are particularly relevant because disruptions affecting deposit insurance information, coverage records, or premium administration may affect other services, including insured deposit reimbursement, resolution preparedness, and public communication.
The completed mapping provides a foundation for establishing and validating impact tolerances. It enables PIDM to determine which processes and resources must remain available, which activities may operate at reduced capacity, and which dependencies require alternative arrangements.
It also supports severe but plausible scenario testing by identifying realistic combinations of failures and the paths through which disruption could propagate.
Use scenario testing results to validate the mapping, challenge recovery assumptions, and identify weaknesses that require remediation.
Management can then use the evidence to prioritise resilience investments, strengthen third-party arrangements, improve technology recovery capabilities, establish personnel alternatives, and address significant concentration risks.
The mapping must remain a living operational resilience document.
Changes in PIDM's processes, technology, information requirements, member bank relationships, third parties, or operating environment should trigger appropriate reviews and updates.
The next implementation activity is to use the validated CBS-1 mapping to establish service-level impact tolerances and determine whether PIDM can maintain Deposit Insurance Protection Administration within those limits during severe but plausible disruptions.
**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/56090723-e91a-4dcf-bae2-9a0dfc3808b0)**
| **eBook 3: Starting Your OR Implementation** | | | | |
| --- | --- | --- | --- | --- |
| **CBS-1 Deposit Insurance Protection Administration** | | | | |
| **CBS-1 DP** | **CBS-1 MII** | **CBS-1 ITo** | **CBS-1 SbPS** | **CBS-1 ST** |
| [![\[OR\] \[PIDM\] \[E3\] \[CBS\] \[1\] \[DP\] Deposit Insurance Protection Administration](https://no-cache.hubspot.com/cta/default/3893111/fcc1a03b-1f2c-41e4-a510-b733d153c6b0.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fcc1a03b-1f2c-41e4-a510-b733d153c6b0) | [![\[OR\] \[PIDM\] \[E3\] \[CBS\] \[1\] \[MII\] Deposit Insurance Protection Administration](https://no-cache.hubspot.com/cta/default/3893111/2d1258ae-8671-46c3-8185-b57fa19bfad8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/2d1258ae-8671-46c3-8185-b57fa19bfad8) | [![\[OR\] \[PIDM\] \[E3\] \[CBS\] \[1\] \[ITo\] Deposit Insurance Protection Administration](https://no-cache.hubspot.com/cta/default/3893111/33e29914-7a30-4f21-8b0d-dd3cba3c255a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/33e29914-7a30-4f21-8b0d-dd3cba3c255a) | [![\[OR\] \[PIDM\] \[E3\] \[CBS\] \[1\] \[SbPS\] Deposit Insurance Protection Administration](https://no-cache.hubspot.com/cta/default/3893111/8572ef1b-f502-4dfb-912a-e57072c9b7b4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8572ef1b-f502-4dfb-912a-e57072c9b7b4) | [![\[OR\] \[PIDM\] \[E3\] \[CBS\] \[1\] \[ST\] Deposit Insurance Protection Administration](https://no-cache.hubspot.com/cta/default/3893111/d72c17a8-a9f9-4aeb-8593-32cb40696ad9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d72c17a8-a9f9-4aeb-8593-32cb40696ad9) |
**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/13a448f1-f09c-42da-a57e-0988e41658c5)**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)**Gain Competency:** For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the **OR-5000 Operational Resilience Expert Implementer course**, provide in-depth insights and practical toolkits to embed this model effectively.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Your Comments Here:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Dr Goh Moh Heng",
"url" : "https://blog.bcm-institute.org/ebook-or/author/dr-goh-moh-heng"
},
"dateModified" : "2026-09-28T10:19:40.143Z",
"datePublished" : "2026-09-28T07:46:14.000Z",
"headline" : "[OR] [PIDM] [E3] [CBS] [1] [MII] Map Interconnections and Interdependencies",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-pidm-e3-cbs-1-mii-map-interconnections-and-interdependencies",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```