英文【奥纬咨询】实现东南亚银行的运营弹性

OPERATIONAL RESILIENCEHow banks can prepare, adapt, and thrive amid rising risksFIVE PRIORITIES FOR BANKS IN SOUTHEAST ASIA TO BUILDJonas HeckmannJulian Granger-BevanMaksim RyabukhinThomas Garside© Oliver Wyman2Operational resilience is the capability of a bank to continue delivering its critical operations and services during periods of disruption, according to The Basel Committee on Banking Supervision.Achieving this has become both increasingly challenging and vital. Banks today face a volatile environment marked by escalating cyber threats, technology interdependencies, complex third-party relationships, and potential global disruptions, from pandemics to large-scale technology incidents. In this context, resilience cannot be treated merely as a compliance obligation. It must be a strategic priority for boards and C-suite executives seeking to protect customers, safeguard reputation, maintain competitiveness, ensure long-term viability, and uphold financial system stability.Since the Basel Committee published its Principles for Operational Resilience in 2021, regulators worldwide have introduced frameworks with the shared goal of protecting customers and preserving financial stability. Drawing on global experience, Oliver Wyman has supported more than 15 banks across North America, Europe (including preparations for the Digital Operational Resilience Act [DORA]), and Australia. We expect Southeast Asian banks to follow a similar path as regional regulators formalize their own frameworks, integrating business continuity, IT risk, and third-party risk management into a comprehensive, harmonized approach.This report draws on extensive conversations with regulators, boards, and C-suite executives across Southeast Asia. It distils their most pressing concerns, challenges, and insights into five critical priorities to help banks meet regulatory expectations, embed resilience at the heart of operations, and strengthen their ability to protect customers and financial stability. © Oliver Wyman3Five Priorities For Banks In Southeast Asia To Build Operational ResilienceThe following sections explore five critical priorities for Southeast Asian banks as they strengthen their operational resilience:• Clarify what operational resilience means — and how it complements, rather than replaces, business continuity management.• Define critical business services and set impact tolerances to focus resources where customer and market impact is greatest.• Manage third- and fourth-party risks amid growing reliance on cloud providers and interconnected ecosystems.• Navigate the operational resilience journey by learning from global leaders and aligning strategies with regulatory expectations.• Establish clear ownership and governance to embed accountability across the organization.PRIORITY 1 CLARIFY WHAT OPERATIONAL RESILIENCE MEANS — AND HOW IT COMPLEMENTS, RATHER THAN REPLACES, BUSINESS CONTINUITY MANAGEMENTOperational resilience is a capability within a bank’s non-