The objective is not to maximise the number of AI experiments. It is to repeatedly turn the right opportunities into safe, adopted and measurable outcomes.

01

Start with the bank’s strategy

AI is a means. The outcome comes first.

An AI strategy should begin with the institution’s priorities, the jobs its people perform and the outcomes its clients experience. The model is a design choice later.

BCG argues that banks should anchor AI in business strategy and move beyond disconnected pilots.[Boston Consulting Group, 21 May 2025]

01Client outcomes
02Employee effectiveness
03Revenue growth
04Operational efficiency
05Risk reduction
06Service quality
07Strategic differentiation

A good strategy narrows the field. It gives the portfolio a clear reason to say yes, wait or stop.

02

Treat AI as a platform product

Build once. Learn repeatedly. Reuse deliberately.

Domain products should feel specific to the user. Underneath, they should reuse enterprise capabilities for identity, retrieval, models, tools, evaluation and operations.

I would build the platform through real use cases, hardening each shared capability as more products reuse it.

Interactive reference model

One platform, five connected layers

Illustrative enterprise architecture—not the architecture of any specific bank.

01

Selected layer

User experiences and domain applications

Where work happens: relationship-manager tools, operations workbenches, research experiences and specialist applications.

  • RM workspace
  • Operations console
  • Knowledge assistant
03

Provide differentiated access

The same AI environment should not serve every task.

Access should depend on user role, business domain, client-data access, data sensitivity, approved tools, deployment environment, permitted actions and required human approval.

The model below is illustrative. A bank would adapt tiers to its classifications, policies and architecture.

Tier 1

Public and non-confidential work

Approved public information, general drafting and low-risk productivity tasks.

  • Enterprise identity
  • Approved tools
  • Usage monitoring
Tier 2

Internal business information

Internal knowledge and workflows, with domain-based access and stronger data controls.

  • Role and domain access
  • Data-loss controls
  • Human review
Tier 3

Confidential client or regulated data

Strictly bounded use cases in controlled environments with explicit permissions and oversight.

  • Need-to-know access
  • Restricted tools
  • Approval & audit trail
04

Run a transparent use-case portfolio

Prioritisation is a set of visible trade-offs.

A less impressive use case may create more value when it is easier to adopt, safer to operate or builds capabilities the organisation can reuse.

Scores should expose assumptions. They should never replace accountable judgement.

Interactive model

Make the trade-offs visible

Change the weights. Use cases move as the portfolio's priorities change. All scores are illustrative.

Criterion weight
Selective bets
Prioritise
Stop or reshape
Quick foundations
Weighted value →Weighted readiness →RM prepPolicyPaymentsResearchIncidents

A score is a decision aid, not a decision. Portfolio review still needs evidence, judgement and accountable owners.

05

Build governance into delivery

Controls should operate with the product.

Governance that appears only at final approval is both late and inefficient. Important decisions about data, models and actions have already been made.

FINMA’s supervisory guidance points to model, data, IT, cyber, third-party, legal and reputational risks and a materiality-based control approach.[FINMA, 18 December 2024]

Safe executionby design
01Identity02Access controls03Data handling04Tool permissions05Model selection06Human review07Prompt and workflow versioning08Evaluations09Monitoring10Incident response11Vendor management12Audit trails

Agentic AI makes runtime controls more important. The system needs to know not only what a user can see, but what an agent may do, which tools it may invoke and when a human must approve.

BIS research highlights governance, skills, model risk, data governance and third-party providers as priority areas.[Bank for International Settlements, 12 December 2024]
06

Treat adoption as part of the product

Deployment is not behaviour change.

Teams need to understand the existing workflow, design the new one, equip users and stay accountable after release.

“Deploying an AI tool is not the same as changing how work gets done.”

01Workflow discovery
02Role-based training
03Local champions
04Communication
05Onboarding
06Feedback loops
07Usage analytics
08Support
09Workflow redesign
10Change management
07

Measure and scale

Evidence decides what happens next.

A use case needs a baseline before launch, product and operational measures after launch, and a clear review rhythm.

The decision is explicit: stop, improve or scale. Platform reuse and evaluation performance matter alongside business outcomes.

OutcomeUsage is a signal. Value is the result.
BaselinesAdoptionActive usageTask completionTime savedQualityUser satisfactionRevenue influenceRisk reductionCost to serveEvaluation performanceReusable components
01Stop

The evidence does not support further investment.

02Improve

The problem is valid; the product or control needs work.

03Scale

Outcome, adoption and operations are ready to expand.

Evidence base

Research behind the thesis.

Selected primary and institutional sources. The full bibliography is available on the sources page.

Boston Consulting Group21 May 2025

For Banks, the AI Reckoning Is Here

Original source
FINMA18 December 2024

Guidance 08/2024: Governance and risk management when using artificial intelligence

Original source
Bank for International Settlements12 December 2024

Regulating AI in the financial sector: recent developments and main challenges

Original source

A useful conversation

Building enterprise AI that survives contact with reality.

I am always interested in difficult product, platform and transformation mandates—especially where trust matters as much as speed.

Start a conversation