[OR] [PTC] [E2] [P1 to P3] [C1] OR Planning Methodology

Introduction to the Operational Resilience Planning Methodology for Philippine Trust Company

Introduction

Operational resilience has become a strategic priority for financial institutions operating in an increasingly complex and interconnected environment. For Philippine Trust Company, the ability to prevent, adapt to, respond to, and recover from disruptions is not only essential for regulatory compliance but also critical to maintaining customer trust, financial stability, and long-term sustainability.

Aligned with the expectations set out in Bangko Sentral ng Pilipinas Circular No. 1203 Series of 2024 on Operational Resilience, this methodology provides a structured and disciplined approach to embedding resilience across the organisation. It ensures that critical business services remain within acceptable levels of disruption, even during severe but plausible scenarios.

To achieve this, Philippine Trust Company adopts a three-phase Operational Resilience Planning Methodology—Plan, Implement, and Sustain—each consisting of five progressive stages. These phases collectively guide the organisation from understanding its current resilience posture to embedding resilience into its culture and continuous improvement processes.

Purpose of the Chapter

The purpose of this chapter is to introduce the reader to the structured methodology that underpins the operational resilience journey of Philippine Trust Company. It provides a clear overview of the three phases—Plan, Implement, and Sustain—and their respective stages, enabling readers to understand how resilience is systematically designed, executed, and maintained.

By the end of this chapter, the reader will gain a comprehensive understanding of how the organisation transitions from assessment and planning to execution and long-term sustainability, as well as the key activities required at each stage to meet regulatory expectations and strengthen organisational resilience.

Overview of the Three Phases

The Operational Resilience Planning Methodology is structured into three integrated phases:

• Phase 1: Plan – Establishing the foundation through assessment, gap analysis, and strategic alignment
• Phase 2: Implement – Operationalising resilience through identification, mapping, and testing
• Phase 3: Sustain – Embedding resilience into culture, governance, and continuous improvement

Each phase builds upon the previous one, ensuring a holistic and iterative approach to resilience.

Phase 1: Plan - Building the Foundation of Resilience

The Plan phase focuses on understanding the current state of resilience within Philippine Trust Company and defining a clear roadmap for improvement. It establishes the strategic direction, governance, and risk parameters necessary for effective implementation.

Stages in Phase 1: Plan

• Assess Capability and Maturity [Stage 1]
  Evaluate the organisation’s current resilience capabilities, including existing business continuity, disaster recovery, risk management, and crisis management practices.
• Analyse Gap [Stage 2]
  Identify gaps between current capabilities and regulatory expectations, particularly those outlined by the Bangko Sentral ng Pilipinas, as well as leading practices in operational resilience.
• Develop Strategy and Roadmap [Stage 3]
  Define a structured roadmap outlining initiatives, priorities, timelines, and resource requirements to achieve the desired resilience state.
• Confirm Risk Appetite [Stage 4]
  Establish the organisation’s tolerance for disruption, aligning resilience objectives with business strategy and stakeholder expectations.
• Develop and Embed Governance [Stage 5]
  Create governance structures, roles, and accountability frameworks to ensure oversight, decision-making, and effective implementation of resilience initiatives.

Phase 2: Implement - Operationalising Resilience

The Implement phase translates strategy into action by identifying critical services, mapping dependencies, and testing the organisation’s ability to withstand disruptions.

Stages in Phase 2: Implement

• Identify Critical Business Services [Stage 1]
  Determine the services that are vital to customers and the financial system, ensuring prioritisation of resilience efforts.
• Map Processes and Resources [Stage 2]
  Identify and document the people, processes, technology, facilities, and third parties that support each critical business service.
• Set Impact Tolerance [Stage 3]
  Define acceptable levels of disruption (e.g., maximum tolerable downtime and data loss) for each critical service.
• Conduct Scenario Testing [Stage 4]
  Test the organisation’s resilience against severe but plausible scenarios, including cyber incidents, system failures, and third-party disruptions.
• Improve Lesson Learnt [Stage 5]
  Capture insights from testing and real incident

Phase 3: Sustain - Embedding and Enhancing Resilience

The Sustain phase ensures that operational resilience becomes an integral part of the organisation’s culture, supported by continuous learning, communication, and independent assurance.

Stages in Phase 3: Sustain

• Introduce Cultural Change [Stage 1]
  Promote a resilience-first mindset across all levels of the organisation, ensuring that employees understand their roles in maintaining service continuity.
• Develop Communication Strategy [Stage 2]
  Establish clear communication plans for internal stakeholders, customers, regulators, and external partners during disruptions.
• Implement Training and Awareness [Stage 3]
  Deliver structured training programmes and awareness initiatives to build organisational capability and preparedness.
• Provide Self-assessment [Stage 4]
  Conduct periodic self-assessments to evaluate the effectiveness of resilience measures and identify areas for improvement.
• Conduct Independent Quality Review [Stage 5]
  Engage internal audit or independent reviewers to validate the robustness of the operational resilience framework and ensure compliance with regulatory expectations.

The three-phase Operational Resilience Planning Methodology provides Philippine Trust Company with a comprehensive and structured approach to managing disruptions in an increasingly uncertain environment. By progressing from planning to implementation and ultimately to sustained resilience, the organisation ensures that it is not only compliant with regulatory expectations but also capable of delivering critical services under adverse conditions.

This methodology reinforces the organisation’s commitment to resilience as a strategic capability—one that safeguards customers, protects financial stability, and strengthens trust in the banking system.

Blogs marked [x] are under construction

For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.