[OR] [UBP] [E2] [P1 to P3] [C1] OR Planning Methodology

Operational Resilience Planning Methodology for Union Bank of the Philippines

Introduction

Operational resilience has emerged as a critical priority for financial institutions operating in an increasingly complex, digital, and interconnected environment.

For Union Bank of the Philippines, a leading digital bank in the Philippines, the ability to anticipate, withstand, recover from, and adapt to disruptions is not only a regulatory expectation but also a strategic imperative to maintain customer trust and financial stability.

In alignment with the Bangko Sentral ng Pilipinas (BSP) requirements—particularly under BSP Circular No. 1203—Union Bank adopts a structured Operational Resilience Planning Methodology comprising three integrated phases: Plan, Implement, and Sustain.

These phases provide a systematic approach to building resilience capabilities across the organisation, ensuring that critical business services remain operational even under severe but plausible disruptions.

This chapter introduces the three phases of this methodology and outlines their respective stages, providing a roadmap for how Union Bank can embed resilience into its strategy, operations, and organisational culture.

Purpose of the Chapter

The purpose of this chapter is to provide readers with a clear understanding of the end-to-end Operational Resilience Planning Methodology adopted by Union Bank of the Philippines. It serves to:

• Explain the structured three-phase approach (Plan, Implement, Sustain) to operational resilience
• Highlight the key stages within each phase and their respective objectives
• Establish a logical flow from strategy development to execution and continuous improvement
• Align the methodology with regulatory expectations from the Bangko Sentral ng Pilipinas
• Prepare the reader for a deeper exploration of each stage in subsequent chapters

By the end of this chapter, readers should be able to appreciate how a phased methodology enables Union Bank to transition from resilience planning to operational execution and long-term sustainability.

Overview of the Three Phases of Operational Resilience

The Operational Resilience Planning Methodology is structured into three progressive phases:

• Phase 1: Plan – Establish the foundation by assessing current capabilities, identifying gaps, and defining the strategic direction

• Phase 2: Implement – Operationalise resilience by identifying critical services, setting tolerances, and testing response capabilities
• Phase 3: Sustain – Embed resilience into the organisation’s culture, governance, and continuous improvement processes

Each phase consists of five stages, forming a comprehensive lifecycle approach.

Phase 1: Plan

The Plan Phase focuses on understanding the organisation’s current state and defining a clear roadmap for operational resilience.

The five stages are:

• Assess Capability and Maturity [Stage 1]
  Evaluate Union Bank’s current resilience capabilities across business continuity, ICT resilience, third-party risk, and operational risk management
• Analyse Gap  [Stage 2]
  Identify gaps between current capabilities and regulatory expectations (e.g., BSP Circular No. 1203)
• Develop Strategy and Roadmap  [Stage 3]
  Define a structured roadmap with prioritised initiatives to close identified gaps
• Confirm Risk Appetite  [Stage 4]
  Establish acceptable levels of disruption, aligned with the bank’s risk tolerance and business objectives
• Develop and Embed Governance [Stage 5]
  Create governance structures, roles, policies, and oversight mechanisms to support resilience initiatives

Key Outcome of Phase 1

A well-defined operational resilience strategy and governance framework aligned with regulatory requirements and organisational objectives.

Phase 2: Implement

The Implement Phase translates strategy into action by identifying critical services, mapping dependencies, and testing resilience under stress scenarios.

The five stages are:

• Identify Critical Business Services [Stage 1]
  Determine services whose disruption would have a significant impact on customers, financial stability, or regulatory compliance
• Map Processes and Resources [Stage 2]
  Map end-to-end processes, including people, technology, facilities, and third-party dependencies
• Set Impact Tolerance [Stage 3]
  Define maximum tolerable disruption thresholds (e.g., downtime, data loss, customer impact)
• Conduct Scenario Testing [Stage 4]
  Test the bank’s ability to remain within impact tolerances under severe but plausible scenarios
• Improve Lessons Learned [Stage 5]
  Capture insights from testing and real incidents to strengthen resilience capabilities

Key Outcome of Phase 2

A validated and tested resilience capability, ensuring that critical business services can operate within defined impact tolerances during disruptions.

Phase 3: Sustain

The Sustain Phase ensures that operational resilience becomes an integral part of Union Bank’s culture and continuous improvement processes.

The five stages are:

• Introduce Cultural Change [Stage 1]
  Foster a resilience-first mindset across all levels of the organisation
• Develop Communication Strategy [Stage 2]
  Ensure clear communication during disruptions and ongoing resilience initiatives
• Implement Training and Awareness [Stage 3]
  Equip staff with the knowledge and skills to respond effectively to disruptions
• Provide Self-assessment [Stage 4]
  Enable business units to regularly assess their resilience capabilities
• Conduct Independent Quality Review [Stage 5]
  Perform independent audits and reviews to validate resilience effectiveness

Key Outcome of Phase 3

A resilient organisation with embedded capabilities, supported by continuous monitoring, learning, and improvement.

The three-phase Operational Resilience Planning Methodology—Plan, Implement, and Sustain—provides Union Bank of the Philippines with a structured and comprehensive approach to achieving resilience.

By progressing from strategic planning to execution and ongoing enhancement, the bank ensures that resilience is not a one-time initiative but a continuous journey.

Aligned with the expectations of the Bangko Sentral ng Pilipinas and guided by BSP Circular No. 1203, this methodology positions Union Bank to safeguard its critical business services, protect its customers, and maintain trust in the financial system—even amid evolving threats and disruptions.

Blogs marked [x] are under construction

For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.