[MTE Executive Summary] Building Operational Resilience in the Philippines: A Hands-On Approach to BSP Circular 1203 Compliance

Operational Resilience and BSP Circular 1203: What Financial Institutions Need to Know

Introduction

The latest BCM Institute Meet-the-Expert (MTE) session explored the growing importance of Operational Resilience and its implications for financial institutions operating under the Bangko Sentral ng Pilipinas (BSP) Operational Resilience Guidelines.

While the discussion focused on BSP Circular 1203 and the Philippine banking sector, the key message was clear: Operational Resilience is rapidly becoming a global business priority that extends far beyond financial institutions.

Organisations across industries are beginning to adopt Operational Resilience principles to address increasingly complex disruptions arising from cyber threats, third-party dependencies, technology failures, supply chain disruptions, and geopolitical uncertainty.

A recurring theme throughout the session was the distinction between Business Continuity Management (BCM) and Operational Resilience.

Many organisations mistakenly assume that Operational Resilience is simply an expanded BCM programme.

In reality, Operational Resilience represents a broader organisational capability that integrates four key domains: Business Continuity Management, Operational Risk Management, Cyber Resilience, and Third-Party Risk Management.

Together, these disciplines enable organisations to continue delivering critical services despite severe disruptions.

The session also highlighted the evolution of regulatory expectations worldwide.

Regulators in Europe, the United Kingdom, Singapore, Malaysia, the US,  Canada, and the Philippines are increasingly focusing on resilience outcomes rather than the existence of plans and procedures.

This shift requires organisations to identify their Critical Operations (or Critical Business Services), establish impact tolerances, understand interdependencies, and conduct scenario testing against severe but plausible events.

To support implementation efforts, BCM Institute presented its Operational Resilience Planning Methodology, a structured three-phase approach comprising Plan, Implement, and Sustain.

The methodology is designed to help organisations translate regulatory requirements into practical implementation activities while avoiding common mistakes encountered by early adopters.

The session also introduced BCM Institute's Operational Resilience eBook Series.

Together, these resources form the foundation of BCM Institute's "Train-to-Implement" approach, which combines professional development with practical implementation guidance.

The webinar concluded with a discussion on the future direction of the profession. Operational Resilience is increasingly becoming the umbrella discipline that brings together Business Continuity, Operational Risk, Cyber Resilience, and Third-Party Risk Management.

As organisations continue their resilience journey, many are expected to move beyond Operational Resilience towards the broader goal of Organisational Resilience.

The key takeaway is simple: Operational Resilience is no longer an emerging concept.

It is becoming an essential capability for organisations seeking to maintain trust, deliver critical services, and meet evolving stakeholder and regulatory expectations in an increasingly uncertain environment.

This is Dr Goh's summary of the presentation during the BCM Institute's Meet-the-Expert webinar.

The webinar is summarised by Dr Goh Moh Heng, President of the BCM Institute.

Dr Goh Moh Heng, President of BCM Institute, summarises this webinar. If you have any questions, please speak to the author.