Map Dependency
CBS-4: Payment and Settlement Systems
Introduction
In today’s increasingly interconnected financial ecosystem, Payment and Settlement Systems serve as the backbone of a bank’s operational integrity and customer trust.
For Maybank, one of Southeast Asia’s leading financial institutions, CBS-4: Payment and Settlement Systems plays a pivotal role in ensuring the secure, timely, and accurate movement of funds across a diverse array of channels, including retail, corporate, domestic, and cross-border environments.
This chapter provides a comprehensive dependency mapping analysis of CBS-4, identifying the critical components required to support its end-to-end functionality.
The mapping focuses on four key dependency types—People, Process, Technology, and Third Party—highlighting how each contributes to the resilience, compliance, and service continuity of Maybank’s payment systems.
It also outlines how these dependencies interact with various sub-processes such as Real-Time Gross Settlement (RENTAS), e-Wallet integration, JomPAY, ATM settlement, fraud monitoring, and reconciliation.
This structured view serves not only as an operational reference but also as a vital resource for business continuity planning, regulatory compliance (such as BNM’s RMiT), and service resilience assessments.
Sub-CBS |
Dependency Type |
Dependency Detail (What/Who) |
Connectivity (Interaction with CBS/Components) |
1. Retail Funds Transfer Processing |
Technology, Process |
Core banking systems, Middleware, API gateways, Batch processing systems |
Integrated with customer channels and settlement engines |
People |
IT Ops, Business Analysts |
Oversight and daily support |
|
Third Party |
Interbank transfer networks (e.g., DuitNow) |
Linked via national payment rails |
|
2. Corporate & Bulk Payments |
Technology, Process |
Host-to-host systems, File upload portals, ERP integration |
Batches uploaded by clients, processed through payment engines |
People |
Corporate banking teams |
Configuration and client onboarding |
|
3. Real-Time Gross Settlement (RENTAS) |
Technology, Third Party |
RENTAS gateway, SWIFT interface, BNM RENTAS system |
Direct integration with central bank systems for settlement |
Process |
Queue management, Settlement logic |
RTGS queue prioritised within CBS |
|
4. Cross-Border Payments (SWIFT) |
Technology, Third Party |
SWIFT Alliance, Messaging queues, Nostro accounts |
SWIFT network integration for MT message types |
People |
Treasury Ops, Compliance |
Handles exception management and message formatting |
|
5. Cheque Clearing |
Process, Technology |
CTS system, Image capture tools, Centralised Cheque Clearing |
Exchanges cheque data with the national clearing house |
Third Party |
MyClear/PayNet |
National clearing system involvement |
|
6. E-Wallet & Mobile Payment Integration |
Technology, Third Party |
API layer, Mobile SDKs, Partner e-Wallet providers |
Two-way sync for transaction push/pull |
Process |
Onboarding, Transaction reconciliation |
Uses reconciliation engine and monitoring tools |
|
7. JomPAY & Bill Payments |
Technology, Third Party |
JomPAY platform, API integrations, Biller network |
Pulls from billing data, interacts with customer payment instructions |
People |
Retail Ops, Vendor Management |
Ensures biller updates and dispute handling |
|
8. Merchant & Acquiring Payments |
Technology, Process |
POS terminals, Payment gateway, Acquiring switch |
Transaction routing through a payment gateway |
Third Party |
Card schemes (Visa, Mastercard) |
Settlement with card networks |
|
9. ATM & CDM Transactions Settlement |
Technology, Process |
ATM switch, Core banking system, Cash loading teams |
Transaction logs processed and settled to customer accounts |
People |
Branch Ops, ATM Engineers |
Maintenance and monitoring |
|
10. Fraud & Risk Monitoring in Payments |
Technology, Process |
Fraud detection engines, Rule management systems |
Real-time transaction feeds for analysis |
People |
Fraud Analysts, Risk Teams |
Manual review and alert handling |
|
11. Reconciliation & Daily Settlement |
Process, Technology |
Reconciliation engine, GL mapping tools |
Interfaces with all transaction systems for EOD balancing |
People |
Finance Ops, Treasury |
Oversight of daily positions and issues |
|
12. Chargeback & Dispute Resolution |
People, Process, Tech |
Dispute workflow tool, CRM, Core payment platform |
Linked to transaction systems and card networks for claim initiation |
Third Party |
Card networks (Visa, Mastercard, etc.) |
Provides dispute evidence and resolution rules |
|
13. Payment System Resilience & Uptime |
Technology, Process |
HA systems, DR Sites, Monitoring tools |
Tied into all sub-CBS; ensures redundancy and failover capabilities |
People |
Infra & Tech Ops, Business Continuity Mgmt |
Incident handling, BCP execution |
Purpose of "Dependency Detail (What/Who is Involved)"
The “Dependency Detail” column identifies and describes the specific internal or external components that are crucial to each process within CBS-4. This includes:
- People: Functional roles or teams responsible for oversight, execution, or decision-making (e.g., Treasury Operations, Fraud Analysts).
- Processes: Key activities or workflows that form part of the payment and settlement lifecycle (e.g., Bulk File Processing, Dispute Intake).
- Technology: Core systems, interfaces, or digital tools used to execute, monitor, or support transactions (e.g., Core Banking System, SWIFT Gateway).
- Third Parties: External service providers, regulatory bodies, and partner institutions that play an operational or regulatory role (e.g., Bank Negara Malaysia, SWIFT, PayNet).
By detailing “what” is being relied upon or “who” is involved, this column helps stakeholders understand the precise nature of each dependency, which is critical for assessing potential vulnerabilities, resource allocation, and prioritisation in resilience planning.
Purpose of "Connectivity (Interaction with CBS or Other Components)"
The “Connectivity” column explains how each dependency interacts with CBS-2 or other components within Maybank’s operational ecosystem.
It articulates the operational relationship and integration points, such as:
- How a system supports a process or links to another system (e.g., middleware connecting mobile apps to the core banking engine).
- How people or teams coordinate across departments or with third parties.
- How external platforms are integrated to facilitate transaction flow, compliance, or settlement.
This information is crucial because understanding the interdependencies and data or operational flow helps to:
- Map single points of failure or cascading impacts in case of disruptions.
- Design more effective contingency plans and recovery strategies.
- Ensure alignment between internal capabilities and external obligations.
- Strengthen real-time monitoring and reduce blind spots in operational risk.
Together, the “Dependency Detail” and “Connectivity” columns form the foundation of a meaningful dependency map.
While “Dependency Detail” clarifies the parties and processes involved in delivering each sub-process, “Connectivity” reveals the operational dynamics and systemic links that underpin Maybank’s payment and settlement ecosystem.
This combination enables a deep understanding of the service architecture, facilitating targeted risk mitigation, business continuity planning, and operational resilience enhancement for CBS-4.
Summing Up ...
The dependency mapping exercise for CBS-4: Payment and Settlement Systems reveals the complexity and critical interdependence of people, processes, technology platforms, and external partners in delivering seamless payment services for Maybank’s customers.
Each element, from internal operational teams and real-time processing engines to third-party platforms such as RENTAS, SWIFT, and PayNet, is essential to maintaining trust, ensuring compliance, and sustaining operational uptime.
As digital transformation accelerates and customer expectations evolve, a clear understanding of these dependencies becomes essential.
It enables proactive risk management, enhances service design, and supports regulatory adherence, particularly in areas such as operational resilience, cyber risk mitigation, and financial system stability.
Moving forward, maintaining an up-to-date dependency map will be crucial to anticipating disruptions, designing recovery strategies, and strengthening the bank’s overall service resilience framework.
Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.