Ebook

[BCM] [BML] [E3] [BIA] Corporate and BU MBCO

Written by Moh Heng Goh | Feb 1, 2026 3:02:01 PM

 Corporate and Business Unit Minimum Business Continuity Objective (MBCO)
 

Introduction

As the largest and most systemically important financial institution in the Maldives, Bank of Maldives (BML) plays a critical role in ensuring financial stability, economic continuity, and public confidence in the national banking system.

Disruptions to BML’s services—whether caused by technology failures, natural disasters, cyber incidents, or operational crises—could have far-reaching implications for individuals, businesses, and government operations nationwide.

In line with the requirements of ISO 22301: Business Continuity Management Systems, this chapter defines the Corporate and Business Unit Minimum Business Continuity Objectives (MBCO) for Bank of Maldives.

The MBCO establishes the minimum acceptable level of products and services that must be maintained or restored during a disruption in order for the organisation to continue achieving its critical business objectives.

These objectives are specific,  measurable, and time-bound, providing a clear benchmark for resilience planning, response, and recovery.

Purpose of the Chapter

The purpose of this chapter is to articulate the Bank of Maldives’ minimum service obligations during disruptive events, both at the corporate level and across key business units (Critical Business Functions – CBFs).

By defining measurable MBCOs, this chapter enables management to:

  • Set clear continuity thresholds aligned with regulatory, customer, and systemic expectations
  • Prioritise recovery strategies and resource allocation during incidents
  • Support Business Impact Analysis (BIA), recovery planning, and crisis decision-making
  • Demonstrate compliance with ISO 22301 and regulatory expectations for operational resilience

Readers are expected to gain a clear understanding of the minimum level of banking services that the Bank of Maldives must sustain to protect customers, maintain market confidence, and meet statutory obligations during periods of disruption.

Corporate Minimum Business Continuity Objective (Corporate MBCO)

Corporate MBCO Statement (ISO 22301–Aligned)

During any significant disruption, Bank of Maldives shall maintain or restore critical banking services sufficient to support national payment flows, customer access to essential funds, liquidity stability, and regulatory compliance, ensuring that:

  • At least 70–80% of systemically critical customer-facing banking services (including deposits, withdrawals, and payments) remain available or are restored within agreed recovery timeframes
  • Electronic payment, settlement, and liquidity-supporting services operate at a level adequate to prevent systemic financial instability
  • Regulatory, AML, and statutory reporting obligations continue at a minimum compliant level
  • Customer communication and support services are available to manage enquiries, incidents, and advisories

This minimum service level shall be sustained until full operational capability is restored, thereby enabling the Bank to continue fulfilling its financial, social, and regulatory responsibilities during a disruption.

Table C1: Corporate MBCO

Corporate MBCO Statement

Measurable Minimum Continuity Threshold

Bank of Maldives shall maintain or restore essential banking services to support national financial stability, customer access to funds, and regulatory compliance during any disruption.

  • 70–80% availability of critical customer-facing banking services

  • 80% continuity of domestic payment and settlement services

  • 100% compliance with critical regulatory and AML obligations

  • Minimum customer communication capability was maintained throughout the disruption

Business Unit Minimum Business Continuity Objectives (BU MBCO)

The following table defines the minimum acceptable level of service for each Critical Business Function (CBF) during a disruption.

Table C2: Business Unit MBCO

CBF Code

Critical Business Function (CBF)

Business Unit MBCO Statement

Measurable Minimum Continuity Threshold

CBF-1

Retail & Corporate Banking Services

Ensure continued access to essential banking services for priority retail and corporate customers.

≥70% of essential deposit, withdrawal, and account enquiry services are available

CBF-2

Payment & Settlement Services

Maintain continuity of domestic payment and settlement processing to prevent systemic disruption.

≥80% of critical payment and settlement transactions processed within cut-off times

CBF-3

ATM & Digital Banking Operations

Provide ongoing access to cash and digital self-service banking channels.

60–70% availability of ATMs and digital banking platforms

CBF-4

Treasury & Liquidity Management

Preserve the Bank’s ability to monitor liquidity and execute funding actions.

100% capability for liquidity monitoring and critical funding transactions

CBF-5

Core Banking System Operations

Support priority customers and transaction processing via core banking systems.

Core banking is available in restricted or degraded mode, supporting critical transactions

CBF-6

Customer Support & Call Centre Services

Maintain customer communication and incident support services.

50–60% call centre and customer support capacity maintained

CBF-7

Credit Risk & Loan Management

Continue oversight of credit exposure and loan repayment processing.

Critical credit monitoring and high-risk portfolio management were maintained

CBF-8

Compliance, AML & Regulatory Reporting

Ensure uninterrupted compliance with regulatory and AML obligations.

100% execution of mandatory AML monitoring and regulatory reporting

CBF-9

IT Infrastructure & Cybersecurity Operations

Maintain stability, availability, and security of critical IT systems.

≥90% availability of critical infrastructure and cybersecurity monitoring

CBF-10

Branch Operations & Cash Handling

Ensure physical access to essential banking and cash services.

≥50% of strategically critical branches or cash points are operational

 

The Corporate and Business Unit Minimum Business Continuity Objectives defined in this chapter establish a clear and measurable baseline for Bank of Maldives’ operational resilience.

By articulating the minimum acceptable level of service delivery during disruptions, BML ensures that its most critical obligations—to customers, regulators, and the national financial system—can be met even under adverse conditions.

These MBCOs serve as a foundational input into Business Impact Analysis, recovery strategy development, and crisis management planning.

When effectively embedded into the Bank’s Business Continuity Management System, they strengthen decision-making during incidents, support regulatory compliance with ISO 22301, and reinforce the Bank of Maldives’ commitment to financial stability, customer trust, and national economic resilience.

 

Ensuring Service Continuity and Compliance: ISO 22301 BCMS at Bank of Maldives
eBook 3: Starting Your BCM Implementation
MBCO P&S [x] RAR T1 [x] RAR T2 [x] RAR T3 [x] BCS T1 [x]  List of CBF

More Information About Business Continuity Management Courses

To learn more about the course and schedule, click the buttons below for the  BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].

 

Please feel free to send us a note if you have any questions.