--- title: "[OR] [MLRe] [E2] [C19] Conducting Independent Quality Review of OR Sustain Phase for Malaysian Life Reinsurance Group Berhad" description: How MLRe obtains independent assurance on its OR programme using the Three Lines Model, and closes the Plan-Implement-Sustain cycle. image: https://blog.bcm-institute.org/hubfs/MLRE%20Graphic%20Folder/MLRE%20E2%20Morepost/%5BOR%5D%20%5BMLRE%5D%20%5BE2%5D%20%5BP3%5D%20%5BS5%5D%20%5BC19%5D%20Conducting%20Independent%20Quality%20Reviews.jpg --- [![BCMIWhiteLogo.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogo.png?width=556&name=BCMIWhiteLogo.png "BCMIWhiteLogo.png")](http://www.bcm-institute.org/) - [Home](https://www.bcm-institute.org/) - [About Us](https://www.bcm-institute.org/about-us-3/) - [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/) - [Our History](https://www.bcm-institute.org/about-us/our-history/) - [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/) - [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/) - [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/) - [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog) - [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses) - [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses) - [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses) - [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses) - [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses) - [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses) - [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses) - [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered) - [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification) - [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification) - [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification) - [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification) - [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification) - [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification) - [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit) - [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage) - [Store](https://www.bcm-institute.org/store-2/) - [Contact Us](http://www.bcm-institute.org/about-us/contact-us/) - - ###### Building Organisational Resilience: An Operational Resilience Guide for Malaysian Life Reinsurance ![\[BB\] \[Ins\] Secure Cloud Collaboration Network](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20Insurance/BB%20Insurance%20V2%202026/%5BBB%5D%20%5BIns%5D%20Secure%20Cloud%20Collaboration%20Network.png?width=1677&height=938&name=%5BBB%5D%20%5BIns%5D%20Secure%20Cloud%20Collaboration%20Network.png "[BB] [Ins] Secure Cloud Collaboration Network") # \[OR\] \[MLRe\] \[E2\] \[C19\] Conducting Independent Quality Review of OR Sustain Phase for Malaysian Life Reinsurance Group Berhad [![\[OR\] \[MLRE\] \[Full Banner\] Building Organisational Resilience An Operational Resilience Guide for Malaysian Life Reinsurance ](https://no-cache.hubspot.com/cta/default/3893111/6898dbc1-274c-4300-9b8e-97cdd96a7a30.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6898dbc1-274c-4300-9b8e-97cdd96a7a30)The final stage of the methodology gives Malaysian Life Reinsurance Group Berhad (MLRe) objective assurance. This chapter covers Stage 5 of the Sustain phase: **Conduct Independent Quality Review**. [![\[OR\] \[E2\] \[C19\] \[P3\] \[S5\] Conducting Independent Quality Review](https://no-cache.hubspot.com/cta/default/3893111/ce795037-24ce-4c90-afd2-5253ea9ebb4c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ce795037-24ce-4c90-afd2-5253ea9ebb4c)[![\[Logo\] \[OR\] Certification Transparent](https://no-cache.hubspot.com/cta/default/3893111/09ce1ea0-4d44-4deb-867f-2e2b1b867768.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/09ce1ea0-4d44-4deb-867f-2e2b1b867768) [Dr Goh Moh Heng](https://blog.bcm-institute.org/or-v2/author/dr-goh-moh-heng) Nov 13, 2026 ### [![x \[OR\] \[MLRE\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/141492be-2bd8-434d-a664-dfdf2c7480ba.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/141492be-2bd8-434d-a664-dfdf2c7480ba) [![\[OR\] \[E2\] \[C19\] \[P3\] \[S5\] Conducting Independent Quality Review](https://no-cache.hubspot.com/cta/default/3893111/ce795037-24ce-4c90-afd2-5253ea9ebb4c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ce795037-24ce-4c90-afd2-5253ea9ebb4c) ### Conducting Independent Quality Review [![\[OR\] \[MLRE\] \[E2\] \[C19\] Conducting Independent Quality Reviews](https://no-cache.hubspot.com/cta/default/3893111/49efb618-a3da-4326-98a0-73442c498044.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/49efb618-a3da-4326-98a0-73442c498044)The final stage of the methodology gives Malaysian Life Reinsurance Group Berhad (MLRe) objective assurance. This chapter covers Stage 5 of the Sustain phase: **Conduct Independent Quality Review**. ## What is an Independent Quality and Assurance Review? An Independent Quality Review (IQR) is an objective evaluation of MLRe's operational resilience programme by someone who is not responsible for running it. It tells the Board and BNM whether the programme is well designed, operating as intended and delivering the intended outcomes. ### The Three Lines Model - **First line:** business and service owners who own and manage resilience. - **Second line:** Risk, Compliance and the OR function, which set frameworks and monitor. - **Third line:** Internal Audit and other independent assurance providers, who give objective assurance to the Board. The IQR belongs to the third line. The self-assessment in Chapter 18 sits in the first and second lines. ### Red flags reviewers should look for - Critical services or tolerances not approved or not reviewed. - Scenario tests that always "pass", or cover only technology. - Dependency maps that omit third parties or are out of date. - Overdue lessons-learned actions with no escalation. - Board reports that describe activity but not outcomes. - Staff who cannot explain their roles in a disruption. ## How to Conduct an Independent Quality Review ### 1. Prepare the IQR 1. **Determine scope:** which parts of the programme and which critical services to review, using the Three Lines Model. 2. **Select the reviewer:** someone with operational resilience and risk expertise and no stake in the outcome, such as Internal Audit, an external audit or consulting firm, or an industry specialist. 3. **Set review criteria:** based on best practice, MLRe's own policy and standards, and BNM requirements. 4. **Prepare data:** collect documents, test reports, logs, training records and prior self-assessment results. 5. **Agree the approach:** share scope, objectives and method with the reviewer and agree timing. ### 2. Conduct the IQR 1. **Review on site:** observe processes, interview staff and Board members, and examine documents. 2. **Test and evaluate:** assess controls, incident response plans and training, including observing a simulation or tabletop exercise. 3. **Analyse data:** compare evidence with criteria. 4. **Draft the report:** summarise strengths, weaknesses, improvement opportunities and recommendations. ### 3. Review and report 1. **Respond to findings:** management responds formally and proposes an improvement plan. 2. **Finalise the report:** combine the reviewer's findings with management's responses for the Board Risk Management Committee and senior management. 3. **Implement the action plan:** agree timelines, responsibilities and resources. 4. **Monitor and report:** track progress and report regularly on effectiveness. ## Illustrative Review Plan for MLRe | **Area** | **Review question** | **Evidence** | | --- | --- | --- | | **Governance** | **Does the Board approve and challenge OR decisions?** | **Minutes, papers** | | **Critical services and tolerances** | **Are they current and evidence-based?** | **Inventory, BIA records** | | **Dependencies** | **Are third parties included and maintained?** | **Maps, contracts** | | **Scenario testing** | **Are tests severe but plausible and honestly reported?** | **Exercise reports** | | **Improvement** | **Are lessons implemented and verified?** | **Action log** | | **Culture and training** | **Do staff know their roles?** | **Interviews, surveys** | ## Practical Tips - Allow the reviewer free access, and do not rehearse staff answers. - Rotate reviewers periodically for fresh perspective. - Schedule the review ahead of BNM engagement so findings can be addressed first. ## [![\[Banner\] \[Summing\] \[OR\] \[E2\] \[C19\] Conducting Independent Quality Reviews](https://no-cache.hubspot.com/cta/default/3893111/c8a957a9-acb3-45ed-98ab-290e94e02707.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c8a957a9-acb3-45ed-98ab-290e94e02707)Summary of the Methodology With independent review, MLRe completes the three-phase cycle: **Plan** (assess, analyse gaps, develop strategy, confirm risk appetite, embed governance), **Implement** (critical services, interdependencies, impact tolerances, scenario testing, lessons learned) and **Sustain** (culture, communication, training, self-assessment, independent review). Findings from the review feed back into the next Plan cycle, so resilience keeps improving.   [![\[OR\] \[MLRE\] \[34 Banner\] Building Organisational Resilience An Operational Resilience Guide for Malaysian Life Reinsurance ](https://no-cache.hubspot.com/cta/default/3893111/cf0d3512-4dc7-4e6e-96a9-74e9c30a002c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/cf0d3512-4dc7-4e6e-96a9-74e9c30a002c) | **eBook 2: Implementing Operational Resilience for Malaysian Life Reinsurance** | | | | | --- | --- | --- | --- | | **C1** | **C2** | **C8** | **C14** | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/17a2eb25-208f-4500-9dea-4e79a6d9f06a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/17a2eb25-208f-4500-9dea-4e79a6d9f06a) | [![\[OR\] \[MLRE\] \[E2\] \[C2\] Five Stages of the "Plan" Phase](https://no-cache.hubspot.com/cta/default/3893111/132af509-6e86-4d7a-8997-70e40b8a3037.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/132af509-6e86-4d7a-8997-70e40b8a3037) | [![\[OR\] \[MLRE\] \[E2\] \[C8\] Five Stages of the "Implement" Phase](https://no-cache.hubspot.com/cta/default/3893111/f70329aa-1c8f-481a-b4df-ddcce98fab6b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f70329aa-1c8f-481a-b4df-ddcce98fab6b) | [![\[OR\] \[MLRE\] \[E2\] \[C14\] Five Stages of the "Sustain" Phase](https://no-cache.hubspot.com/cta/default/3893111/b3074256-e267-4914-96ff-2907cb4185be.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b3074256-e267-4914-96ff-2907cb4185be) |   | | **"Sustain" Phase of the Operational Resilience Planning Methodology** | | | | | | | --- | --- | --- | --- | --- | --- | --- | | | **C14** | **C15** | **C16** | **C17** | **C18** | **C19** | | | [![\[OR\] \[MLRE\] \[E2\] \[C14\] Five Stages of the "Sustain" Phase](https://no-cache.hubspot.com/cta/default/3893111/b3074256-e267-4914-96ff-2907cb4185be.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b3074256-e267-4914-96ff-2907cb4185be) | [![\[OR\] \[MLRE\] \[E2\] \[C15\] Introducing Cultural Change Management](https://no-cache.hubspot.com/cta/default/3893111/d235f6ae-3c9e-4d0e-9b78-3d608dea680e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d235f6ae-3c9e-4d0e-9b78-3d608dea680e) | [![\[OR\] \[MLRE\] \[E2\] \[C16\] Developing A Communication Strategy](https://no-cache.hubspot.com/cta/default/3893111/9ea889cc-aed0-4f6a-bc3c-0eb955401032.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9ea889cc-aed0-4f6a-bc3c-0eb955401032) | [![\[OR\] \[MLRE\] \[E2\] \[C17\] Implementing Training and Awareness](https://no-cache.hubspot.com/cta/default/3893111/f95b47d6-7233-491b-ae23-3415a76d96e8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f95b47d6-7233-491b-ae23-3415a76d96e8) | [![\[OR\] \[MLRE\] \[E2\] \[C18\] Providing Self-Assessment](https://no-cache.hubspot.com/cta/default/3893111/b21a9dd1-adcc-46d4-9afc-df879e7c0336.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b21a9dd1-adcc-46d4-9afc-df879e7c0336) | [![\[OR\] \[MLRE\] \[E2\] \[C19\] Conducting Independent Quality Reviews](https://no-cache.hubspot.com/cta/default/3893111/49efb618-a3da-4326-98a0-73442c498044.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/49efb618-a3da-4326-98a0-73442c498044) |   ## **Comments** ![CTA Banner\_OR](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_OR.jpg "CTA Banner_OR") --- ![CTA Banner\_ORA](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_ORA.jpg "CTA Banner_ORA") --- ![CTA Banner\_BCM](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_BCM.jpg "CTA Banner_BCM") --- ![CTA Banner\_ITDR](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_ITDR.jpg "CTA Banner_ITDR") --- ![CTA Banner\_CM](https://blog.bcm-institute.org/hubfs/CTA%20Banner%20for%20Blog/CTA%20Banner_CM.jpg "CTA Banner_CM") ![BCMIWhiteLogoSmall.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogoSmall.png?width=72&name=BCMIWhiteLogoSmall.png "BCMIWhiteLogoSmall.png") All rights reserved. Copyright 2026 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Dr Goh Moh Heng", "url" : "https://blog.bcm-institute.org/or-v2/author/dr-goh-moh-heng" }, "dateModified" : "2026-11-13T08:31:36.452Z", "datePublished" : "2026-11-13T08:31:28.000Z", "headline" : "[OR] [MLRe] [E2] [C19] Conducting Independent Quality Review of OR Sustain Phase for Malaysian Life Reinsurance Group Berhad", "image" : [ "https://blog.bcm-institute.org/hubfs/MLRE%20Graphic%20Folder/MLRE%20E2%20Morepost/%5BOR%5D%20%5BMLRE%5D%20%5BE2%5D%20%5BP3%5D%20%5BS5%5D%20%5BC19%5D%20Conducting%20Independent%20Quality%20Reviews.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.bcm-institute.org/or-v2/or-mlre-e2-c19-conducting-independent-quality-review-of-or-sustain-phase-for-malaysian-life-reinsurance-group-berhad", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png" }, "name" : "BCMI Pte Ltd" } } ```