Operational Resilience in Action: Case Studies and Best Practices for Maybank
BB OR [C] 16

[OR] [MB] [E4] [CBS] [4] [MD] Map Dependency

New call-to-action

In today’s increasingly interconnected financial ecosystem, Payment and Settlement Systems serve as the backbone of a bank’s operational integrity and customer trust.

For Maybank, one of Southeast Asia’s leading financial institutions, Critical Business Service CBS-4– Payment and Settlement Systems plays a pivotal role in ensuring the secure, timely, and accurate movement of funds across a diverse array of channels, including retail, corporate, domestic, and cross-border environments.

This chapter provides a comprehensive dependency mapping analysis of CBS-4, identifying the critical components required to support its end-to-end functionality.

The mapping focuses on four key dependency types—People, Process, Technology, and Third Party—highlighting how each contributes to the resilience, compliance, and service continuity of Maybank’s payment systems.

It also outlines how these dependencies interact with various sub-processes such as Real-Time Gross Settlement (RENTAS), e-Wallet integration, JomPAY, ATM settlement, fraud monitoring, and reconciliation.

This structured view serves not only as an operational reference but also as a vital resource for business continuity planning, regulatory compliance (such as BNM’s RMiT), and service resilience assessments.

Dr Goh Moh Heng
Operational Resilience Planner-Specialist-Expert
New call-to-action

Map Dependency

New call-to-action

CBS-4: Payment and Settlement Systems

Introduction

[OR] [MB] [E4] [CBS] [4] [MD] Map DependencyIn today’s increasingly interconnected financial ecosystem, Payment and Settlement Systems serve as the backbone of a bank’s operational integrity and customer trust.

For Maybank, one of Southeast Asia’s leading financial institutions,  CBS-4: Payment and Settlement Systems plays a pivotal role in ensuring the secure, timely, and accurate movement of funds across a diverse array of channels, including retail, corporate, domestic, and cross-border environments.

This chapter provides a comprehensive dependency mapping analysis of CBS-4, identifying the critical components required to support its end-to-end functionality.

The mapping focuses on four key dependency types—People, Process, Technology, and Third Party—highlighting how each contributes to the resilience, compliance, and service continuity of Maybank’s payment systems.

It also outlines how these dependencies interact with various sub-processes such as Real-Time Gross Settlement (RENTAS), e-Wallet integration, JomPAY, ATM settlement, fraud monitoring, and reconciliation.

This structured view serves not only as an operational reference but also as a vital resource for business continuity planning, regulatory compliance (such as BNM’s RMiT), and service resilience assessments.

Sub-CBS

Dependency Type

Dependency Detail (What/Who)

Connectivity (Interaction with CBS/Components)

1. Retail Funds Transfer Processing

Technology, Process

Core banking systems, Middleware, API gateways, Batch processing systems

Integrated with customer channels and settlement engines

People

IT Ops, Business Analysts

Oversight and daily support

Third Party

Interbank transfer networks (e.g., DuitNow)

Linked via national payment rails

2. Corporate & Bulk Payments

Technology, Process

Host-to-host systems, File upload portals, ERP integration

Batches uploaded by clients, processed through payment engines

People

Corporate banking teams

Configuration and client onboarding

3. Real-Time Gross Settlement (RENTAS)

Technology, Third Party

RENTAS gateway, SWIFT interface, BNM RENTAS system

Direct integration with central bank systems for settlement

Process

Queue management, Settlement logic

RTGS queue prioritised within CBS

4. Cross-Border Payments (SWIFT)

Technology, Third Party

SWIFT Alliance, Messaging queues, Nostro accounts

SWIFT network integration for MT message types

People

Treasury Ops, Compliance

Handles exception management and message formatting

5. Cheque Clearing

Process, Technology

CTS system, Image capture tools, Centralised Cheque Clearing

Exchanges cheque data with the national clearing house

Third Party

MyClear/PayNet

National clearing system involvement

6. E-Wallet & Mobile Payment Integration

Technology, Third Party

API layer, Mobile SDKs, Partner e-Wallet providers

Two-way sync for transaction push/pull

Process

Onboarding, Transaction reconciliation

Uses reconciliation engine and monitoring tools

7. JomPAY & Bill Payments

Technology, Third Party

JomPAY platform, API integrations, Biller network

Pulls from billing data, interacts with customer payment instructions

People

Retail Ops, Vendor Management

Ensures biller updates and dispute handling

8. Merchant & Acquiring Payments

Technology, Process

POS terminals, Payment gateway, Acquiring switch

Transaction routing through a payment gateway

Third Party

Card schemes (Visa, Mastercard)

Settlement with card networks

9. ATM & CDM Transactions Settlement

Technology, Process

ATM switch, Core banking system, Cash loading teams

Transaction logs processed and settled to customer accounts

People

Branch Ops, ATM Engineers

Maintenance and monitoring

10. Fraud & Risk Monitoring in Payments

Technology, Process

Fraud detection engines, Rule management systems

Real-time transaction feeds for analysis

People

Fraud Analysts, Risk Teams

Manual review and alert handling

11. Reconciliation & Daily Settlement

Process, Technology

Reconciliation engine, GL mapping tools

Interfaces with all transaction systems for EOD balancing

People

Finance Ops, Treasury

Oversight of daily positions and issues

12. Chargeback & Dispute Resolution

People, Process, Tech

Dispute workflow tool, CRM, Core payment platform

Linked to transaction systems and card networks for claim initiation

Third Party

Card networks (Visa, Mastercard, etc.)

Provides dispute evidence and resolution rules

13. Payment System Resilience & Uptime

Technology, Process

HA systems, DR Sites, Monitoring tools

Tied into all sub-CBS; ensures redundancy and failover capabilities

People

Infra & Tech Ops, Business Continuity Mgmt

Incident handling, BCP execution

Purpose of "Dependency Detail (What/Who is Involved)"

The “Dependency Detail” column identifies and describes the specific internal or external components that are crucial to each process within CBS-4. This includes:

  • People: Functional roles or teams responsible for oversight, execution, or decision-making (e.g., Treasury Operations, Fraud Analysts).
  • Processes: Key activities or workflows that form part of the payment and settlement lifecycle (e.g., Bulk File Processing, Dispute Intake).
  • Technology: Core systems, interfaces, or digital tools used to execute, monitor, or support transactions (e.g., Core Banking System, SWIFT Gateway).
  • Third Parties: External service providers, regulatory bodies, and partner institutions that play an operational or regulatory role (e.g., Bank Negara Malaysia, SWIFT, PayNet).

By detailing “what” is being relied upon or “who” is involved, this column helps stakeholders understand the precise nature of each dependency, which is critical for assessing potential vulnerabilities, resource allocation, and prioritisation in resilience planning.

Purpose of "Connectivity (Interaction with CBS or Other Components)"

The “Connectivity” column explains how each dependency interacts with CBS-2 or other components within Maybank’s operational ecosystem.

It articulates the operational relationship and integration points, such as:

  • How a system supports a process or links to another system (e.g., middleware connecting mobile apps to the core banking engine).
  • How people or teams coordinate across departments or with third parties.
  • How external platforms are integrated to facilitate transaction flow, compliance, or settlement.

This information is crucial because understanding the interdependencies and data or operational flow helps to:

  • Map single points of failure or cascading impacts in case of disruptions.
  • Design more effective contingency plans and recovery strategies.
  • Ensure alignment between internal capabilities and external obligations.
  • Strengthen real-time monitoring and reduce blind spots in operational risk.

Together, the “Dependency Detail” and “Connectivity” columns form the foundation of a meaningful dependency map.

While “Dependency Detail” clarifies the parties and processes involved in delivering each sub-process, “Connectivity” reveals the operational dynamics and systemic links that underpin Maybank’s payment and settlement ecosystem.

This combination enables a deep understanding of the service architecture, facilitating targeted risk mitigation, business continuity planning, and operational resilience enhancement for CBS-4.

Summing Up ...

The dependency mapping exercise for CBS-4: Payment and Settlement Systems reveals the complexity and critical interdependence of people, processes, technology platforms, and external partners in delivering seamless payment services for Maybank’s customers.

Each element, from internal operational teams and real-time processing engines to third-party platforms such as RENTAS, SWIFT, and PayNet, is essential to maintaining trust, ensuring compliance, and sustaining operational uptime.

As digital transformation accelerates and customer expectations evolve, a clear understanding of these dependencies becomes essential.

It enables proactive risk management, enhances service design, and supports regulatory adherence, particularly in areas such as operational resilience, cyber risk mitigation, and financial system stability.

Moving forward, maintaining an up-to-date dependency map will be crucial to anticipating disruptions, designing recovery strategies, and strengthening the bank’s overall service resilience framework.

 

Operational Resilience in Action: Case Studies and Best Practices for MayBank

eBook 4: Starting Your OR Implementation
CBS-4 Payment and Settlement Systems
CBS-4 DP CBS-4 MD CBS-4 MPR CBS-4 ITo CBS-4 SuPS CBS-4 ST
[OR] [MB] [E4] [DP] [CBS] [2] Payment and Settlement Systems [OR] [MB] [E4] [CBS] [4] [MD] Map Dependency [OR] [MB] [E4] [CBS] [4] [MPR] Map Processes and Resources [OR] [MB] [E4] [CBS] [4] [ITo] Establish Impact Tolerances [OR] [MB] [E4] [CBS] [1] [SuPS] Identify Severe but Plausible Scenarios [OR] [MB] [E4] [CBS] [4] [ST] Perform Scenario Testing


New call-to-actionNew call-to-actionGain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the [OR-3] OR-300 Operational Resilience Implementer course and the [OR-5] OR-5000 Operational Resilience Expert Implementer course.

BL-OR-3 Register Now BL-OR-3_Tell Me More BL-OR-3_View Schedule
BL-OR-5_Register Now BL-OR-5_Tell Me More  [BL-OR] [3-4-5] View Schedule
[BL-OR] [3] FAQ OR-300

If you have any questions, click to contact us.Email to Sales Team [BCM Institute]

FAQ BL-OR-5 OR-5000
OR Implementer Landing Page

New call-to-action

New call-to-action

 

Your Comments Here:

 

More Posts

New Call-to-action