eBook OR

[OR] [MBT] [E3] [CBS] [11] [MPR] Map Processes and Resources

Written by Moh Heng Goh | Nov 26, 2025 8:57:50 AM


CBS-11 Overseas Remittance and Foreign Exchange Services

The process of mapping the critical business functions and resources for Metrobank’s CBS-11 Regulatory and Compliance Reporting is essential to ensure operational resilience.

Compliance with regulatory requirements is a cornerstone of Metrobank's ability to maintain its reputation and secure its operational continuity.

By identifying and mapping key processes, people, technologies, third-party vendors, and upstream/downstream dependencies, Metrobank can proactively mitigate risks, comply with legal requirements, and ensure efficient functioning of its services under any circumstance.

This approach aligns with operational resilience regulations and helps identify weaknesses in the system, ensuring the business can withstand severe disruptions and continue to meet its regulatory obligations.

The "Map Processes and Resources" is a vital component in ensuring the reliability and compliance of CBS-11, encompassing activities related to regulatory reporting, compliance monitoring, risk mitigation, and the systems that support these functions.

Table P3: Map Processes and Resources for CBS-11

 

Sub-CBS Code

Sub-CBS

Processes

People

Technology (Applications and Infrastructure)

Third-party Vendors

Upstream/Downstream Dependencies

11.1

Regulatory Reporting Framework

- Development of reporting frameworks

- Compliance Officers

- Regulatory reporting software (e.g., Axiom, SAS)

- Regulatory authorities (e.g., BSP, SEC)

- Internal audit, legal, and risk teams

 

 

- Design of processes to adhere to regulatory standards

- Legal Advisors

- Data management systems

- External auditors

- Financial systems (e.g., accounting software)

11.2

Compliance Monitoring and Auditing

- Continuous monitoring of compliance with regulations

- Compliance Officers

- Audit management tools (e.g., ACL, IDEA)

- Third-party audit firms

- Internal systems for monitoring (transaction systems, etc.)

 

 

- Internal audits and checks

- Internal Auditors

- Monitoring software (e.g., Splunk, IBM QRadar)

- Risk and compliance consulting firms

- Business units (e.g., retail banking, corporate banking)

11.3

Submission of Regulatory Reports

- Compilation and submission of periodic regulatory reports

- Regulatory Reporting Specialists

- Report generation tools (e.g., Microsoft Excel, Power BI, SQL databases)

- External regulatory bodies (e.g., BSP, SEC)

- Financial reporting systems, HR systems, transaction data

 

 

- Ensuring timely and accurate submissions to regulatory bodies

- Data Analysts

- Regulatory submission portals

- Data providers (e.g., Bloomberg, Thomson Reuters)

- Finance and legal departments

11.4

Risk Assessment and Mitigation in Reporting

- Risk identification and analysis in reporting processes

- Risk Managers

- Risk management software (e.g., RiskWatch, Crystal Ball)

- Legal consultants

- Operational risk management teams

 

 

- Development of mitigation strategies

- Compliance Officers

- Data visualisation tools for risk analysis (e.g., Tableau)

- Cybersecurity providers

- IT and cybersecurity departments

11.5

Reporting Systems and Technology

- Maintenance and upgrade of reporting systems

- IT and Systems Administrators

- Reporting platforms (e.g., Oracle, SAP, Microsoft Dynamics)

- IT support services

- Data centre providers, software vendors

 

 

- Integration of new technologies to improve reporting efficiency

- Database Administrators

- Cloud infrastructure (e.g., AWS, Azure)

- Data warehousing providers

- Data governance teams, business units

 
  

Mapping the processes and resources for Metrobank's CBS-11 Regulatory and Compliance Reporting ensures that the bank remains compliant with regulatory standards and maintains operational resilience.

By comprehensively identifying each process, the required resources, and the dependencies between various internal and external elements, Metrobank can enhance its capacity to manage risks, identify potential vulnerabilities, and implement corrective measures.

With a proactive approach to operational resilience, the bank can ensure the continued effectiveness of its regulatory reporting, even in the face of severe disruptions.

This map also highlights the critical role that technology, people, and third-party vendors play in supporting Metrobank’s compliance operations, underscoring the importance of coordinated efforts across departments and with external partners.

 

Building Resilient Banking Operations: The Metrobank Operational Resilience Implementation Guide

eBook 3: Starting Your OR Implementation
CBS-11 Regulatory and Compliance Reporting
CBS-11 DP CBS-11 MD CBS-11 MPR CBS-11 ITo CBS-11 SuPS CBS-11 ST

 

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

If you have any questions, click to contact us.