---
title: [OR] [SBC] [E3] [CBS] [1] [SbPS] Identify Severe but Plausible Scenarios
description: [OR] [SBC] [E3] [CBS] [1] [SuPS] Identify Severe but Plausible Scenarios
image: https://blog.bcm-institute.org/hubfs/PH%20Bank%20Graphic%20Folder/%5BPH%5D%20Security%20Bank%20Corporation%20Graphic%20Folder/SBC%20PH%20E3%20CBS%201%20Morepost/%5BOR%5D%20%5BSBC%5D%20%5BPH%5D%20%5BE3%5D%20%5BCBS%5D%20%5B1%5D%20%5BSuPS%5D%20Retail%20Deposit%20and%20Account%20Services.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Driving Enterprise Resilience: Implementation Blueprint for Security Bank
# \[OR\] \[SBC\] \[E3\] \[CBS\] \[1\] \[SbPS\] Identify Severe but Plausible Scenarios
[![x \[OR\] \[SBC\] Title Banner](https://no-cache.hubspot.com/cta/default/3893111/1c30f45b-bce8-4dd3-ac11-aef280d2acdb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1c30f45b-bce8-4dd3-ac11-aef280d2acdb)In alignment with the principles outlined in BSP *Circular No. 1203 Series of 2024* and the BCM Institute’s guidance on Severe but Plausible Scenarios (SbPS), this chapter identifies credible disruption events that could significantly impact the delivery of **Retail Deposit and Account Services (CBS-1)**.
These scenarios are not hypothetical extremes, but realistic, high-impact events that financial institutions in the Philippines must be prepared to withstand.
The objective is to ensure that each Sub-CBS is stress-tested against operational, cyber, third-party, and systemic risks.
This supports the regulatory expectation that banks proactively identify vulnerabilities, assess their impact, and implement resilience measures—particularly those involving **the integration of Cyber and ICT risks**, as required under BSP guidelines.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c9c3fddf-009e-4d50-b91c-b18d1228e9ef)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Apr 2, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![\[OR\] \[SBC\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/8d269db2-3894-4af7-bc43-de06103c8f69.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8d269db2-3894-4af7-bc43-de06103c8f69)
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c9c3fddf-009e-4d50-b91c-b18d1228e9ef)**CBS-1 Retail Deposit & Account Services**
#### Introduction
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/b82f4b68-92a3-4741-a22a-c2df4a0479f2)
[![\[OR\] \[SBC\] \[PH\] \[E3\] \[CBS\] \[1\] \[SuPS\] Retail Deposit and Account Services](https://no-cache.hubspot.com/cta/default/3893111/49d138dc-8804-4ca6-89f1-d44b9210267c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/49d138dc-8804-4ca6-89f1-d44b9210267c)In alignment with the principles outlined in BSP *Circular No. 1203 Series of 2024* and the BCM Institute’s guidance on Severe but Plausible Scenarios (SbPS), this chapter identifies credible disruption events that could significantly impact the delivery of **Retail Deposit and Account Services (CBS-1)**.
These scenarios are not hypothetical extremes, but realistic, high-impact events that financial institutions in the Philippines must be prepared to withstand.
The objective is to ensure that each Sub-CBS is stress-tested against operational, cyber, third-party, and systemic risks.
This supports the regulatory expectation that banks proactively identify vulnerabilities, assess their impact, and implement resilience measures—particularly those that integrate** Cyber and ICT risks**, as required under BSP guidelines.
[![Banner \[Table\] \[OR\] \[E3\] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/f4f3c007-e864-48cd-8bc1-0242c8b7fd86.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f4f3c007-e864-48cd-8bc1-0242c8b7fd86)
###### Table P5: Identify Severe but Plausible Scenarios for CBS-1
| **Sub-CBS Code** | **Sub-CBS** | **Severe but Plausible Scenario** | **Impact / Effect** | **Proactive Risk Management Action** | **Link to Integration of Cyber and ICT Risks** |
| --- | --- | --- | --- | --- | --- |
| **1.1** | **Customer Onboarding and Account Application** | **Prolonged outage of the digital onboarding platform due to cloud service failure** | **Inability to onboard new customers; revenue loss; reputational damage** | **Implement multi-region cloud redundancy; offline onboarding fallback** | **Cloud resilience, API gateway failure, digital channel outage** |
| **1.2** | **Customer Identification and Verification (KYC/CDD)** | **Failure of the eKYC/biometric verification system due to a cyberattack** | **Delayed or failed KYC checks; regulatory non-compliance risk** | **Deploy alternate KYC channels; strengthen identity verification security controls** | **Cyberattack on identity systems, data integrity compromise** |
| **1.3** | **Account Approval and Opening** | **Internal system processing error leading to mass account approval delays** | **Customer dissatisfaction; backlog; operational bottleneck** | **Introduce workflow automation controls and manual override procedures** | **Core banking system failure, workflow engine disruption** |
| **1.4** | **Initial Funding and Deposit Booking** | **The payment gateway outage is preventing initial funding transactions** | **Failed account activation; liquidity delays** | **Integrate multiple payment channels; real-time monitoring of gateway availability** | **Third-party payment processor outage, network disruption** |
| **1.5** | **Product Terms Setup and Account Parameter Maintenance** | **Misconfiguration of account parameters during system update** | **Incorrect interest/fees applied; financial loss; compliance breach** | **Implement change management controls; automated configuration validation** | **System configuration errors, DevOps pipeline vulnerabilities** |
| **1.6** | **Deposit Transactions Processing** | **Core banking system downtime during the peak transaction period** | **Inability to process deposits; branch and ATM disruption** | **Deploy a high-availability architecture; transaction queuing mechanisms** | **Core system outage, database failure, infrastructure overload** |
| **1.7** | **Withdrawal and Funds Access Processing** | **ATM network outage due to telecom failure** | **Customers unable to access funds; reputational impact** | **Diversify telecom providers; enable branch fallback services** | **Network connectivity failure, ATM switch disruption** |
| **1.8** | **Account Servicing and Customer Maintenance** | **CRM system outage due to ransomware attack** | **Inability to update customer records; service delays** | **Implement endpoint protection, regular data backups, and recovery testing** | **Ransomware attack, data encryption risk** |
| **1.9** | **Interest, Fees, and Charges Processing** | **Batch processing failure due to corrupted data** | **Incorrect interest postings; financial discrepancies** | **Strengthen data validation controls; reconciliation checkpoints** | **Data corruption, batch job failure** |
| **1.10** | **Statement, Passbook, and Balance Reporting** | **Failure of the reporting engine due to a system integration error** | **Customers unable to access statements; regulatory reporting delays** | **Implement parallel reporting systems; automated report validation** | **Data warehouse failure, reporting system outage** |
| **1.11** | **Digital Account Access and Channel Integration** | **Mobile banking app outage caused by DDoS attack** | **Customers unable to access accounts; transaction failures** | **Deploy DDoS protection; scale infrastructure dynamically** | **Cyberattack (DDoS), API gateway overload** |
| **1.12** | **Reconciliation and Exception Management** | **Failure in the reconciliation engine due to data mismatch across systems** | **Unresolved discrepancies; financial reporting risk** | **Automate reconciliation processes; implement exception alerts** | **Data inconsistency, system interface failure** |
| **1.13** | **Fraud Detection and Transaction Monitoring** | **AI fraud detection system failure or evasion by sophisticated attack** | **Increased fraud losses; delayed detection** | **Enhance fraud analytics models; implement layered detection controls** | **Cyber fraud attack, AI model manipulation** |
| **1.14** | **Regulatory Reporting and Compliance Monitoring** | **Failure to submit regulatory reports due to a system outage** | **Regulatory penalties; compliance breach** | **Maintain backup reporting systems; manual reporting procedures** | **Regulatory system interface failure, data extraction issues** |
| **1.15** | **Incident Response, Business Continuity, and Recovery** | **Simultaneous cyberattack and data centre outage (compound scenario)** | **Prolonged service disruption; inability to recover within tolerance** | **Conduct scenario testing; establish alternate recovery sites; crisis management activation** | **Cyber-physical convergence risk, data centre failure, DR site activation** |
[![Banner \[Summing\] \[OR\] \[E3\] Identify Severe but Plausible Scenarios](https://no-cache.hubspot.com/cta/default/3893111/446ccb83-e056-40d0-aae5-834d73c13f43.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/446ccb83-e056-40d0-aae5-834d73c13f43)
The identification of Severe but Plausible Scenarios across CBS-1 Retail Deposit and Account Services enables Security Bank Corporation to move beyond traditional risk management towards a **forward-looking operational resilience posture**.
By systematically analysing high-impact disruption scenarios, the bank can validate whether its existing controls, recovery capabilities, and response strategies are sufficient to remain within defined impact tolerances.
Importantly, the integration of **Cyber and ICT risks** across all Sub-CBS reflects the growing interdependence between digital infrastructure and the delivery of financial services.
In line with BSP Circular 1203, this structured approach ensures that Security Bank not only complies with regulatory expectations but also strengthens its ability to anticipate, withstand, and recover from disruptions—thereby safeguarding customer trust and maintaining financial system stability.
[![x \[OR\] \[SBC\] Title Banner](https://no-cache.hubspot.com/cta/default/3893111/1c30f45b-bce8-4dd3-ac11-aef280d2acdb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1c30f45b-bce8-4dd3-ac11-aef280d2acdb)
| **eBook 3: Starting Your OR Implementation** | | | | | |
| --- | --- | --- | --- | --- | --- |
| **CBS-1 Retail Deposit & Account Services** | | | | | |
| **CBS-1 DP** | **CBS-1 MD** | **CBS-1 MPR** | **CBS-1 ITo** | **CBS-1 SuPS** | **CBS-1 ST** |
| [![\[OR\] \[SBC\] \[PH\] \[E3\] \[CBS\] \[1\] \[DP\] Retail Deposit and Account Services](https://no-cache.hubspot.com/cta/default/3893111/2dfaf27c-1e15-40a6-be13-a555a14cb768.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/2dfaf27c-1e15-40a6-be13-a555a14cb768) | [![\[OR\] \[SBC\] \[PH\] \[E3\] \[CBS\] \[1\] \[MD\] Retail Deposit and Account Services](https://no-cache.hubspot.com/cta/default/3893111/159ba6e9-5205-42d0-adcb-c01380525099.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/159ba6e9-5205-42d0-adcb-c01380525099) | [![\[OR\] \[SBC\] \[PH\] \[E3\] \[CBS\] \[1\] \[MPR\] Retail Deposit and Account Services](https://no-cache.hubspot.com/cta/default/3893111/bd54718b-b31f-41eb-b35d-8e8e3f9ad097.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/bd54718b-b31f-41eb-b35d-8e8e3f9ad097) | [![\[OR\] \[SBC\] \[PH\] \[E3\] \[CBS\] \[1\] \[ITo\] Retail Deposit and Account Services](https://no-cache.hubspot.com/cta/default/3893111/adaa2515-6a0e-4860-bc38-8d4300bc259e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/adaa2515-6a0e-4860-bc38-8d4300bc259e) | [![\[OR\] \[SBC\] \[PH\] \[E3\] \[CBS\] \[1\] \[SuPS\] Retail Deposit and Account Services](https://no-cache.hubspot.com/cta/default/3893111/49d138dc-8804-4ca6-89f1-d44b9210267c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/49d138dc-8804-4ca6-89f1-d44b9210267c) | [![\[OR\] \[SBC\] \[PH\] \[E3\] \[CBS\] \[1\] \[ST\] Retail Deposit and Account Services](https://no-cache.hubspot.com/cta/default/3893111/22b0f984-9476-4ed6-b0d1-8c51f81ab7d0.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/22b0f984-9476-4ed6-b0d1-8c51f81ab7d0) |
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6)**Gain Competency:** For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the **OR-5000 Operational Resilience Expert Implementer course**, provide in-depth insights and practical toolkits for effectively embedding this model.
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-04-15T12:36:28.079Z",
"datePublished" : "2026-04-02T08:48:46.000Z",
"headline" : "[OR] [SBC] [E3] [CBS] [1] [SbPS] Identify Severe but Plausible Scenarios",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-sbc-e3-cbs-1-sups-identify-severe-but-plausible-scenarios",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```