[OR] [RHB] [E3] [C1] Starting Your OR Implementation for RHB Bank

eBook 3: Chapter 1

Beginning the Journey of Operational Resilience Implementation for RHB Bank

Introduction

Having established a strong foundation through eBook 1, Understanding Your Organisation and eBook 2, Implementing Operational Resilience for RHB Bank, this third eBook marks the transition from framework comprehension to hands-on implementation.

eBook 3, Starting Your OR Implementation, focuses on the most critical and resource-intensive phase of the Operational Resilience (OR) journey: Phase 2 – Operational Resilience Planning Methodology. 

This phase requires organisations to move beyond policy statements and high-level mappings, and instead develop a detailed, defensible understanding of how critical business services are delivered, what they depend on, and how they behave under severe but plausible disruption scenarios.

This eBook is intentionally practical. It is structured as a compilation of actual submissions and working outputs produced by an organisation during an operational resilience exercise, reflecting real-world challenges, assumptions, trade-offs, and decision-making processes rather than theoretical constructs alone.

The Operational Resilience Journey at RHB Bank is designed as a progressive learning and implementation pathway:

• eBook 1 – Understanding Your Organisation
  Establishes organisational context, business models, important business services, and governance foundations.
  
  
• eBook 2 – Implementing Operational Resilience for RHB Bank
  Introduces the OR framework, regulatory expectations, and high-level methodology aligned to supervisory guidance.
  
  
• eBook 3 – Starting Your OR Implementation
  Drills into Phase 2 of the OR Planning Methodology, where analysis becomes granular, evidence-driven, and execution-focused.

This eBook assumes that readers have completed or are familiar with the outputs of eBook 1 and eBook 2 and are now ready to engage in detailed operational resilience planning.

The five core stages of the “Implement” phase in the Operational Resilience Planning Methodology are central to this ebook. These stages form the backbone of OR implementation:

• Identify Critical Business Services [DP]
  Determining the business services that, if disrupted, could pose a significant risk to Metrobank’s customers, market integrity, or financial stability.
  
  
• Map Dependency and Connectivity [MD]
  Uncovering and documenting the relationships and interdependencies—both internal and external—that support the delivery of critical business services.
  
  
• Map Processes and Resources [MPR]
  Cataloguing the key operational elements—people, systems, data, and facilities—that underpin each critical business service's performance and continuity.
  
  
• Establish Impact Tolerances [ITo]
  Setting defined thresholds for disruption to determine how much stress a service can endure before unacceptable harm occurs.
  
  
• Identify Severe but Plausible Scenarios [SuPS]
  Identifying Severe but Plausible Scenarios that could critically impact each detailed process within the Critical Business Service
  
  
• Perform Scenario Testing [ST]
  Validating assumptions and capabilities by simulating disruptive scenarios to evaluate how well the bank can maintain or recover its critical business services.

As part of the Identification of Critical Business Services  and Phase 2 planning activities, the following Critical Business Services (CBS) for RHB Bank are used as the primary scope foranalysis and illustration throughout this eBook:

1. Deposit-Taking and Account Management
2. Payment and Funds Transfer Services
3. Cash Withdrawal and Deposit Services
4. Loan and Financing Disbursement Services
5. Trade Finance Services
6. Cash Management Services
7. Treasury and Financial Market Operations
8. Digital Banking Services
9. Wealth Management and Investment Services
10. Fraud Detection and Transaction Monitoring
11. Regulatory and Customer Reporting Services

This list marks the formal start of the Identification of Critical Business Services and is intended to be inserted directly into the operational resilience report as part of the organisation’s documented methodology and scope definition.

This eBook isdelivered as part of the value-adding andcomplementary services offered to organisations that intend to:

• Implement an actual operational resilience or BCM project, or
• Upgrade an existing BCM programme to meet evolving regulatory and supervisory expectations.

It supports organisations participating in the BCM Institute’s training-led implementation approach, particularly thoseattending:

• Certification programmes, and
• Competency-based professional training courses.

Rather than treating training and implementation as separate activities, this approach integrates learning, application, and evidence creation, allowing organisations to build real operational resilience artefacts while developing internal capability and practitioner competence.By the end of this eBook, readers should be able to:

• Translate high-level Critical Business Services into detailed, defensible process maps
• Identify and document material dependencies and resource concentrations
• Set impact tolerances that are realistic, measurable, and regulator-ready
• Design and execute scenario testing that focuses on service continuity rather than system recovery
• Produce structured outputs suitable for internal governance, regulatory review, and audit scrutiny

This eBook is notintended to be read passively. It is designed to be used as a working reference during an operational resilience exercise, supporting teams as they move from planning to execution in a controlled, methodical, and regulator-aligned manner.

 Blogs marked [x] are under construction. 

CBS	CBS-1 [x]	CBS-2 [x]	CBS-3 [x]	eBook 3
eBook 1	CBS-4 [x]	CBF-5 [x]	CBS-6 [x]	eBook 2
Consolidated Report (CR)
CR	DP [x]	MD [x]	MPR [x]	ITo [x]	SuPS [x]	ST [x]

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

To learn more about the course and schedule, click the buttons below for the [OR-3] OR-300 Operational Resilience Implementer course and the [OR-5] OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.