TL;DR: Banking digitalisation, automation, cyber security, AI for AML, and customer experience across life, health, wealth, lending, and payments cluster into a pattern that financial services programmes now have to align operational change with identity and control decisions, according to Comarch. The governance issue is not whether to digitise, but how to keep access, trust, and user experience coherent while processes become more automated.
Editorial analysis by NHI Mgmt Group, based on content published by Comarch: “Our experts”.
Key questions
Q: How should banks govern access for automated lending and payments workflows?
A: Banks should govern automated lending and payments workflows as identity subjects with clear ownership, least-privilege scope, and a defined revocation path.
Q: Why does AI for AML still need strong access governance?
A: AI for AML still depends on governed access because model quality is only as good as the data, permissions, and change controls around it.
Q: What breaks when banking automation is built without lifecycle controls?
A: When banking automation lacks lifecycle controls, access often outlives the workflow that created it.
Practitioner guidance
- Align automation with identity ownership Inventory the finance workflows being digitised and assign a clear identity owner for each one, including human users, service accounts, and AI-assisted steps.
- Separate model access from model output For AI-supported AML and related controls, define who may train, tune, approve, and override the model, and keep those rights distinct from day-to-day alert review.
- Design customer journeys with security checkpoints Place authentication, authorisation, and step-up controls at points where they protect the transaction without forcing unnecessary friction across banking, lending, and payments journeys.
Bottom line: Banking digitalisation is not only a channel shift. It changes who or what is authorised to act across finance workflows.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Banking digitalisation is now an identity governance programme in disguise. The article clusters automation, cyber security, AML, and customer experience because finance transformation now changes how authority is issued and consumed. That means IAM and IGA teams are no longer supporting the business from the side line. They are governing the operational shape of the business itself, especially where workflows span humans, services, and decision systems.
A question worth separating out:
Q: How do security and customer experience fit together in digital banking?
A: Security and customer experience fit together when controls are designed around the journey rather than bolted on afterward. Good teams place authentication, step-up checks, and entitlement controls where they reduce risk without creating avoidable friction. In practice, the question is not whether to add controls, but where they belong in the flow.
👉 Read our full editorial: Comarch’s content points to banking digitalisation and AI-led finance