Implement Phase – Stage 2: Map Processes and Resources
CBF-1: Core Retail and Corporate Banking Services
Chapter CBS-1 [P2-S2]
As a leading financial institution in Malaysia, Maybank provides a comprehensive range of essential banking services to retail and corporate customers nationwide.
Among these, the CBS-1: Core Retail and Corporate Banking Services stands as a fundamental pillar that supports the daily financial activities of millions of individuals and businesses.
To comply with operational resilience requirements outlined by regulators such as Bank Negara Malaysia (BNM) and to align with global best practices, it is essential to conduct a thorough mapping of each service’s dependencies.
This mapping helps the organisation understand and document how people, processes, technology, and third-party providers contribute to the delivery of each Sub-Critical Business Service (Sub-CBS).
Purpose of Chapter
This chapter presents a detailed dependency mapping table that outlines the resource components underpinning each Sub-CBS within CBS-1. It provides a structured view that links business processes to their supporting infrastructure and identifies potential vulnerabilities.
This enables Maybank to develop robust resilience strategies, prioritise recovery actions, and ensure continuity in the face of disruptions.
Below is the "Map Processes and Resources" table for CBS-1: Core Retail and Corporate Banking Services at Maybank Malaysia, in line with operational resilience regulations.
This mapping ensures that each Sub-CBS is supported by identified resources—people, processes, technology, and third-party vendors—to enable continuity and recovery in the event of disruptions.
Table: Map of Processes and Resources for Maybank’s Core Retail and Corporate Banking Services
Sub-CBS Code |
Sub-CBS |
People |
Processes |
Technology (Applications & Infrastructure) |
Third-Party Vendors |
1.1 |
Account Management |
Relationship Managers, Branch Staff, Operations Team |
Customer onboarding, account opening, KYC/ AML checks, and account maintenance |
Core Banking System (e.g., Finacle), KYC/ AML System, CRM, Document Management System, Enterprise Data Warehouse |
National Registration Dept (identity verification), Document storage providers |
1.2 |
Payment and Fund Transfer Services |
Treasury Ops, Payment Processing Staff, Call Centre |
Interbank GIRO, IBFT, DuitNow, SWIFT processing, RTGS/ RENTAS settlements |
Payment Hub, SWIFT Interface, RTGS/ RENTAS System, Anti-Money Laundering Monitoring, Payment Gateway, Middleware |
PayNet (DuitNow, IBFT), SWIFT, MEPS, Visa/Mastercard Network |
1.3 |
Cash Management and Treasury Operations |
Corporate Relationship Managers, Treasury Ops, Product Team |
Liquidity management, bulk payments, cash pooling, balance sweeping |
Treasury Management System, Corporate Online Banking Platform, FX Trading System, Cash Forecasting Tools |
Bloomberg, Reuters, FX trading platforms, ERP integration partners |
1.4 |
Loan and Credit Processing |
Credit Analysts, Loan Processing Officers, Risk Managers |
Credit assessment, loan origination, disbursement, and repayment monitoring |
Loan Origination System, Credit Scoring Engine, Document Management System, Risk Rating Tools |
Credit bureaus (CTOS, RAM), Legal service providers, Valuation firms |
1.5 |
Branch and Digital Channel Operations |
Branch Managers, IT Support, Digital Banking Team |
Cash deposit/withdrawal, cheque processing, mobile/online banking ops, ATM/CDM servicing |
Branch Teller System, Self-Service Kiosks (ATM/CDM), Mobile & Internet Banking App, Core Network Infrastructure |
ATM service providers (e.g., NCR, Diebold), Telcos, Cloud service providers |
1.6 |
Customer Service and Dispute Resolution |
Contact Centre Agents, Complaint Management Officers, Supervisors |
Complaint logging, case escalation, resolution handling, and SLA monitoring |
Customer Care CRM, Call Centre System, Case Management System, Chatbot/AI Assistants |
Outsourced Call Centre Vendors, Survey Platforms (e.g., NPS tools), Live Chat providers |
1.7 |
Compliance, Risk, and Fraud Monitoring |
Compliance Officers, Risk Analysts, Fraud Analysts |
Transaction monitoring, regulatory reporting, fraud detection, internal controls and surveillance |
Fraud Management System, GRC Platform, AML Monitoring Tools, Regulatory Reporting System, Behavioural Analytics Platforms |
Regulatory tech vendors, AML/KYC solution providers, and External auditors |
This resource mapping serves as the foundational layer of operational resilience for Maybank's CBS-1 Core Retail and Corporate Banking Services.
It identifies critical interdependencies and enables targeted resilience strategies across human resources, business processes, technologies, and third-party partners.
Each sub-CBS can now be further assessed for impact tolerances, continuity planning, and recovery strategies in alignment with regulatory requirements, such as those from Bank Negara Malaysia (BNM) and international guidelines, including those from the FCA, MAS, and APRA.
The dependency mapping exercise for CBS-1: Core Retail and Corporate Banking Services reinforces Maybank’s commitment to enhancing its operational resilience posture.
By identifying the interdependencies among people, processes, technologies, and third-party vendors, the bank is better equipped to manage risk, respond effectively to incidents, and maintain uninterrupted service delivery to its customers.
This detailed view serves not only as a compliance artefact but also as a strategic tool for proactive planning, capability assessment, and continuous improvement.
Moving forward, this dependency mapping will support scenario testing, impact tolerance analysis, and coordinated response planning, ensuring Maybank can uphold its role as a trusted and resilient financial partner in an increasingly complex and interconnected environment.
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.
More Information About Blended Learning OR-5000 [BL-OR-5] or OR-300 [BL-OR-3]
To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
|
![]() |
![]() |