[OR] [RCBC] [E3] [CBS] [1] [ITo] Establish Impact Tolerances

CBS-1 Retail Deposit & Account Services

Introduction

[OR] [RCBC] [PH] [E3] [CBS] [1] [ITo] Retail Deposit & Account Services

Establishing impact tolerance is a central requirement of operational resilience, ensuring that Rizal Commercial Banking Corporation (RCBC) can continue delivering its critical business services within acceptable levels of disruption.

For CBS-1 Deposit and Account Services, impact tolerance defines the maximum acceptable thresholds for disruption—such as downtime, data loss, and customer impact—before the consequences become intolerable.

According to BSP Circular No. 1203 Series of 2024, banks must set tolerance levels using measurable metrics (e.g., time, volume, value, customer impact) and ensure these are tested under severe but plausible scenarios.

This aligns with BCM Institute guidance, which emphasises that impact tolerance is not just about recovery time but about maintaining service delivery within defined thresholds.

Table P4: Establish Impact Tolerance for CBS-1

Sub-CBS Code	Sub-CBS	Maximum Tolerable Downtime (MTD)	Maximum Tolerable Data Loss (MTDL)	Customer Impact	Regulatory Impact	Impact Type	Current Resilience Status	Action Required
1.1	Customer Onboarding and Account Application	24–48 hours	Minimal (≤1 day)	Delayed onboarding, low immediate harm	Moderate (KYC delays)	Operational / Compliance	Stable	Enhance digital onboarding fallback
1.2	Customer Identification and Verification (KYC/CDD)	24 hours	Zero tolerance for data errors	Onboarding delays	High (AML/CFT breach risk)	Compliance / Regulatory	Stable	Strengthen automated screening resilience
1.3	Account Approval and Opening	24 hours	Minimal	Customer inconvenience	Moderate	Operational	Stable	Improve workflow automation
1.4	Initial Funding and Deposit Booking	4–8 hours	Near zero	Delayed fund availability	High (financial reporting accuracy)	Financial / Operational	Moderate	Improve real-time processing resilience
1.5	Product Terms Setup and Account Parameter Maintenance	1–2 days	Low	Limited short-term impact	Moderate	Operational	Stable	Periodic validation controls
1.6	Deposit Transactions Processing	≤2 hours	Zero or near zero	Inability to deposit funds	High (systemic impact risk)	Financial / Customer	Critical	Strengthen system redundancy
1.7	Withdrawal and Funds Access Processing	≤1 hour	Zero	Loss of access to funds	Very High	Customer / Systemic	Critical	Enhance ATM & branch failover
1.8	Account Servicing and Customer Maintenance	8–24 hours	Low	Service delays	Moderate	Operational	Stable	Improve CRM system resilience
1.9	Interest, Fees, and Charges Processing	1–2 days	Low	Minor financial discrepancies	Moderate	Financial	Stable	Batch recovery improvements
1.10	Statement, Passbook, and Balance Reporting	24 hours	Low	Delayed information access	Low to Moderate	Customer	Stable	Improve reporting system redundancy
1.11	Digital Account Access Enablement	≤2 hours	Zero	Customers are unable to access their accounts	Very High	Customer / Reputational	Critical	Strengthen uptime and cyber resilience
1.12	ATM and Card-Based Access Management	≤1 hour	Zero	Inability to withdraw cash or transact	Very High	Customer / Systemic	Critical	Improve network and ATM resilience
1.13	Account Reconciliation and Exception Handling	1–2 days	Low	Potential reporting inaccuracies	High	Financial / Regulatory	Moderate	Automate reconciliation processes
1.14	Dormancy, Holds, Restrictions, and Account Control Administration	24–48 hours	Low	Delayed enforcement of controls	High	Compliance	Stable	Enhance compliance monitoring
1.15	Fraud Monitoring and Transaction Surveillance	Real-time / ≤30 mins	Zero	Increased fraud exposure	Very High	Regulatory / Financial Crime	Critical	Enhance real-time analytics
1.16	Complaints, Disputes, and Service Recovery	24–72 hours	Low	Customer dissatisfaction	Moderate	Reputational	Stable	Improve case management efficiency

Regulatory Alignment and Practical Examples

Under BSP Circular No. 1203 Series of 2024, RCBC must:

Define impact tolerances for each critical business service, using time-based and non-time-based metrics
Ensure tolerances reflect customer harm thresholds, not just system recovery objectives
Validate tolerances through scenario testing, including cyber incidents, system outages, and third-party failures

For Example

Sub-CBS 1.7 (Withdrawal Processing) requires an extremely low tolerance (≤1 hour) because of the immediate harm to customers if funds are inaccessible.
Sub-CBS 1.11 (Digital Access) reflects a high dependence on ICT and telecom infrastructure, requiring near-zero tolerance for downtime.
Sub-CBS 1.15 (Fraud Monitoring) must operate in near real time to meet regulatory expectations for financial crime prevention.

These examples demonstrate how regulatory expectations translate into measurable operational thresholds.

Establishing impact tolerances for CBS-1 Deposit and Account Services enables Rizal Commercial Banking Corporation (RCBC) to clearly define the boundaries within which critical services must operate during disruptions.

By assigning measurable thresholds across each Sub-CBS, the Bank can prioritise resilience investments, focus on high-impact areas, and ensure alignment with regulatory expectations.

In accordance with BSP Circular No. 1203 Series of 2024, these tolerances form the basis for scenario testing, continuous monitoring, and improvement.

Ultimately, they enable RCBC to maintain customer trust, safeguard financial stability, and deliver reliable banking services even in the face of severe but plausible disruptions.

eBook 3: Starting Your OR Implementation
CBS-1 Retail Deposit & Account Services
CBS-1 DP	CBS-1 MD	CBS-1 MPR	CBS-1 ITo	CBS-1 SuPS	CBS-1 ST

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.



	If you have any questions, click to contact us.

Implementing Operational Resilience at Rizal Commercial Banking Corporation: A Practical Guide

[OR] [RCBC] [E3] [CBS] [1] [ITo] Establish Impact Tolerances

Operational Resilience Certified Planner-Specialist-Expert

CBS-1 Retail Deposit & Account Services

Introduction

Table P4: Establish Impact Tolerance for CBS-1

Regulatory Alignment and Practical Examples

For Example

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Comments:

Implementing Operational Resilience at Rizal Commercial Banking Corporation: A Practical Guide

[OR] [RCBC] [E3] [CBS] [1] [ITo] Establish Impact Tolerances

Operational Resilience Certified Planner-Specialist-Expert

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, 'd8fd452a-02bc-48d8-8704-7ef1677582a8', {"useNewLoader":"true","region":"na1"});

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, '0430108a-ef49-43aa-ac7d-ee6bb474eba8', {"useNewLoader":"true","region":"na1"}); CBS-1 Retail Deposit & Account Services

Introduction

Table P4: Establish Impact Tolerance for CBS-1

Regulatory Alignment and Practical Examples

For Example

hbspt.cta._relativeUrls=true;hbspt.cta.load(3893111, '5e80e50f-5e3e-44ea-8c43-16bf42d4f3b5', {"useNewLoader":"true","region":"na1"});

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Comments:

CBS-1 Retail Deposit & Account Services