Operational Resilience Management Report
"Plan" Phase – Stage 2: Analyse Gap
Completion Report
Executive Summary
This report outlines the strategy and roadmap developed to strengthen OCBC Bank’s ability to anticipate, prepare for, respond to, and adapt to operational disruptions as part of the "Plan" phase of its operational resilience planning methodology.
The approach aligns with the Monetary Authority of Singapore (MAS) 's regulatory expectations, industry best practices, and OCBC’s risk appetite.
This stage provides a foundation for implementation across business units and functions, ensuring a structured approach to building and enhancing operational resilience.
Objectives
-
Define the operational resilience strategy that is aligned with business objectives.
-
Prioritise Important Business Services (IBS) and establish corresponding tolerance thresholds.
-
Outline the roadmap for achieving resilience targets over the next 3 years.
-
Integrate the roadmap into the broader enterprise risk management and governance framework.
Strategic Approach
Resilience Vision and Guiding Principles
-
Vision: To ensure OCBC Bank can deliver critical services through disruption, safeguarding customer trust and financial stability.
-
Principles:
-
Customer-centricity
-
Risk-based prioritisation
-
Accountability and ownership
-
Continuous improvement
-
Alignment with Enterprise Strategy
-
Integrate with OCBC's digital transformation and sustainability goals.
-
Embed resilience into the strategic planning and change management process.
Defining Critical Business Services (CBS)
-
Based on materiality and customer impact, the following CBS have been prioritised:
-
Real-time payments and fund transfers (FAST/GIRO/PayNow)
-
Trade finance processing
-
Retail digital banking platforms
-
Corporate treasury services
-
Setting Impact Tolerance Levels
-
Established maximum tolerable disruption durations (MTDs) for each IBS.
-
Example:
-
Digital Banking: 2 hours
-
FAST Transfers: 1 hour
-
Roadmap for Implementation (2025–2028)
Timeline | Milestone |
---|---|
Q3 2025 | Finalise CBS and impact tolerances |
Q4 2025 | Conduct dependency mapping and scenario testing |
Q1 2026 | Integrate resilience requirements into change initiatives |
2026 | Enhance monitoring, reporting, and control systems |
2027 | Mature third-party and technology risk alignment |
2028 | Achieve the target maturity level across all CBS |
Key Enablers and Resources
-
Governance Structure: Establishment of an Operational Resilience Steering Committee.
-
Cross-Functional Collaboration: Risk, IT, Operations, Compliance, and Business Lines.
-
Technology Investments: Enhanced observability, data analytics, and automation.
-
Skills and Training: Operational Resilience awareness and role-based training programs.
Risk Considerations
-
Complexity in mapping interdependencies across jurisdictions and third-party providers.
-
Regulatory changes and supervisory expectations may evolve.
-
Resource constraints during parallel digital initiatives.
Mitigation measures include phased implementation, stakeholder engagement, and continual alignment with MAS guidelines.
Recommendations for Management Endorsement
-
Approve the Operational Resilience Strategy and 3-Year Roadmap.
-
Endorse the prioritised list of Important Business Services and defined impact tolerances.
-
Support budget allocation for technology, training, and external consulting (if required).
-
Assign business unit accountability for the implementation of resilience enhancements.
Prepared by:
Operational Resilience Office
OCBC Bank
"Plan" Phase of the Operational Resilience Planning Methodology | ||||||
Management Report for Completion of Phase and Stage | ||||||
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
More Information About Blended Learning OR-5000 [OR-5] or OR-300 [OR-3]
To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
|
![]() |
![]() |
![]() |