[OR] [OCBC] [E3] [Report] [P1] [S3] [C5] Developing Strategy and Roadmap

Operational Resilience Management Report

"Plan" Phase – Stage 2: Analyse Gap

Completion Report

Executive Summary

This report outlines the strategy and roadmap developed to strengthen OCBC Bank’s ability to anticipate, prepare for, respond to, and adapt to operational disruptions as part of the "Plan" phase of its operational resilience planning methodology.

The approach aligns with the Monetary Authority of Singapore (MAS) 's regulatory expectations, industry best practices, and OCBC’s risk appetite.

This stage provides a foundation for implementation across business units and functions, ensuring a structured approach to building and enhancing operational resilience.

Objectives

• Define the operational resilience strategy that is aligned with business objectives.

• Prioritise Important Business Services (IBS) and establish corresponding tolerance thresholds.

• Outline the roadmap for achieving resilience targets over the next 3 years.

• Integrate the roadmap into the broader enterprise risk management and governance framework.

Strategic Approach

Resilience Vision and Guiding Principles

• Vision: To ensure OCBC Bank can deliver critical services through disruption, safeguarding customer trust and financial stability.

• Principles:

  • Customer-centricity

  • Risk-based prioritisation

  • Accountability and ownership

  • Continuous improvement

Alignment with Enterprise Strategy

• Integrate with OCBC's digital transformation and sustainability goals.

• Embed resilience into the strategic planning and change management process.

Defining Critical Business Services (CBS)

• Based on materiality and customer impact, the following CBS have been prioritised:

  • Real-time payments and fund transfers (FAST/GIRO/PayNow)

  • Trade finance processing

  • Retail digital banking platforms

  • Corporate treasury services

Setting Impact Tolerance Levels

• Established maximum tolerable disruption durations (MTDs) for each IBS.

• Example:

  • Digital Banking: 2 hours

  • FAST Transfers: 1 hour

Roadmap for Implementation (2025–2028)

Key Enablers and Resources

• Governance Structure: Establishment of an Operational Resilience Steering Committee.

• Cross-Functional Collaboration: Risk, IT, Operations, Compliance, and Business Lines.

• Technology Investments: Enhanced observability, data analytics, and automation.

• Skills and Training: Operational Resilience awareness and role-based training programs.

Risk Considerations

• Complexity in mapping interdependencies across jurisdictions and third-party providers.

• Regulatory changes and supervisory expectations may evolve.

• Resource constraints during parallel digital initiatives.

Mitigation measures include phased implementation, stakeholder engagement, and continual alignment with MAS guidelines.

Recommendations for Management Endorsement

• Approve the Operational Resilience Strategy and 3-Year Roadmap.

• Endorse the prioritised list of Important Business Services and defined impact tolerances.

• Support budget allocation for technology, training, and external consulting (if required).

• Assign business unit accountability for the implementation of resilience enhancements.

Prepared by:

Operational Resilience Office
OCBC Bank

More Information About Blended Learning OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.