[OR] [WFP] [E1] [C5] Identifying Critical Business Services

eBook 1: Chapter 5

Critical Business Services (Operations) of Wells Fargo Philippines in an Operational Resilience Program

Introduction

This chapter aims to identify and define the Critical Business Services (CBS), or Critical Operations, of Wells Fargo Philippines in the context of implementing an operational resilience program. Critical Business Services is used synonymously with Critical Operations.

As a global capability centre rather than a full-service bank, its CBS is not a customer-facing retail banking service but a mission-critical support service that enables global banking operations.

The objective is to help readers understand how CBS can be interpreted as a shared-services and operations hub, and how these services align with regulatory expectations, including those outlined in BSP Circular No. 1203 (2024).

This chapter also demonstrates how operational resilience principles—such as disruption tolerance, mapping dependencies, and scenario testing—apply to offshore banking operations.

What is a ‘Critical Business Service’?

In operational resilience, a Critical Business Service (CBS) is a service whose disruption would cause intolerable harm to customers, policyholders, the organisation, or the wider financial system.

A service is typically considered critical when its disruption would lead to:

• Significant financial harm to customers or policyholders
• Inability for customers to access insurance protection or benefits
• Material reputational or regulatory consequences for the insurer
• Systemic risk to the financial system

Operational resilience frameworks focus on maintaining service delivery to customers, rather than simply restoring internal systems. This means the emphasis is on customer outcomes and market impact, not just IT recovery.

Examples of critical business services (operations)  in financial institutions often include:

• Technology development and support
• Operations, processing and shared services
• Risk, compliance, and regulatory operations
• Finance and accounting services
• Customer support and contact center services
  

Similarly, for an insurance company, services such as claims payment or policy servicing are typically considered critical because disruptions could directly harm policyholders.

Understanding Critical Business Services (CBS)

A Critical Business Service is a service whose disruption would cause material harm to customers, financial stability, or the institution itself. Regulators require institutions to identify these services, define tolerance for disruption, and ensure they can continue during severe but plausible scenarios.

For Wells Fargo Philippines, CBS must be viewed as a global operations and technology hub that supports multiple lines of business.

Operational Profile of Wells Fargo Philippines

Wells Fargo Philippines operates as a global capability center delivering:

• Technology development and support
• Operations, processing and shared services
• Risk, compliance, and regulatory operations
• Finance and accounting services
• Customer support and contact center services

It also supports functions such as:

• Payment processing and correspondent banking operations
• Financial crime operations, sanctions, and regulatory reporting
• Data analytics and project management

These functions form the basis for identifying CBS.

Operational Profile of Wells Fargo Philippines

Wells Fargo Philippines operates as a global capability center delivering:

• Technology development and support
• Operations, processing, and shared services
• Risk, compliance, and regulatory operations
• Finance and accounting services
• Customer support and contact center services

It also supports functions such as:

• Payments processing and correspondent banking operations
• Financial crime operations, sanctions, and regulatory reporting
• Data analytics and project management

These functions form the basis for identifying CBS.

Critical Business Services (CBS) of Wells Fargo Philippines

The table below identifies the CBS aligned to its operational role:

Mapping CBS to BSP Operational Resilience Requirements

Under BSP Circular No. 1203 (2024), banks and financial institutions (including foreign bank operations and support entities) must:

Identify Critical Operations

Institutions must determine which services are critical and approved by the Board.

Application to Wells Fargo Philippines:

• Payment processing and financial crime operations are clearly critical operations due to systemic and regulatory impact.

Set Tolerance for Disruption (Maximum Tolerable Level of Disruption)

Banks must define how long a service can be disrupted without causing unacceptable harm.

Examples:

• Payments processing: near real-time tolerance (minutes to hours)
• AML monitoring: minimal delay tolerance due to regulatory risk

Map Interdependencies

Institutions must map:

• People
• Technology
• Third parties
• Facilities

Application:

• Wells Fargo Philippines relies heavily on:
• Global IT infrastructure
• Cross-border teams (US and India)
• Third-party vendors

Scenario Testing (Severe but Plausible Events)

Examples required by BSP include:

• Cyberattacks or ransomware
• Failure of critical third-party providers
• Payment system disruptions
• Natural disasters (e.g., typhoons, earthquakes)

Application:

• A cyberattack affecting AML systems
• A system outage disrupting global payments processing
• A pandemic impacting workforce availability

Business Continuity & Incident Response

Institutions must:

• Maintain incident response plans
• Ensure continuity of critical operations
• Conduct regular testing and exercises

Governance and Oversight

• The board is responsible for oversight
• Senior management is responsible for implementation

Reporting & Disclosure

Institutions must report:

• Nature and impact of disruptions
• Whether tolerance thresholds were breached
• Actions taken to maintain services

Key Observations

• Non-customer-facing but mission-critical
  Wells Fargo Philippines does not directly deliver retail banking services, yet its CBS are essential to the continuity of global banking.
  
  
• High regulatory sensitivity
  Functions such as AML, sanctions, and payments are regulator-critical, even when delivered offshore.

• Technology-driven resilience
  CBS are highly dependent on IT systems and global connectivity, making cyber resilience a priority.
  
  
• Interconnected global model
  Disruptions in the Philippines can cascade across global operations due to shared-service integration.

The Critical Business Services of Wells Fargo Philippines reflect its role as a global operations and technology hub rather than a traditional bank. Its CBS—such as payments processing, financial crime operations, and technology support—is vital to maintaining the continuity of Wells Fargo’s global services.

Aligned with BSP Circular No. 1203, these services must be:

    • Clearly identified
    • Supported by defined disruption tolerances
    • Mapped across dependencies
    • Tested against severe scenarios

Ultimately, operational resilience for Wells Fargo Philippines is about ensuring that global banking services remain uninterrupted, even when disruptions occur locally—making its CBS a critical pillar of enterprise-wide resilience.

Blogs marked [x] are under construction.

Strengthening Operational Resilience in Wells Fargo Philippines: A Practical Implementation Guide
eBook 1: Understanding Your Organisation: Wells Fargo Philippines
C1 [x]	C2 [x]	C3 [x]	C4 [x]
C5	C6 [x]	C7 [x]	C8 [x]

 

For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.