Digital Shift Turns Bank Operational Risk Into Systemic Threat

Banking has shifted from branch-based, human-led operations to always-on payments, cloud infrastructure, artificial intelligence and partnerships with FinTech firms. Michael Grimwade, Managing Director for Operational Risk at ICBC Standard Bank, argues that while digitisation can improve efficiency and controls, it can also replace frequent, low-value human errors with rarer but much larger systemic failures. The shift matters because legacy risk frameworks were built for failures contained within a bank, not concentrated technology dependencies capable of spreading disruption across institutions.

The paper, received in revised form on Oct. 24, 2023 and published in December 2023, cites Knight Capital’s $460 million loss in 45 minutes in 2012 and Bangladesh Bank’s five fraudulent SWIFT transfers totaling $101 million in 2016. It notes that average fraudulent SWIFT transaction sizes fell tenfold to 100-fold after early 2018, to between $250,000 and $2 million, as controls improved. The warning is that AI, cloud concentration and third-party dependencies could again amplify losses unless banks strengthen change management, model governance, resilience and cybersecurity.