Tighter regulation and intense competition compress margins because they raise the cost of operating while making it harder to charge for commoditised services. Revenue becomes more sensitive to market swings, and banks lose the flexibility that once came from higher-risk, higher-return products. The result is a smaller pool of durable profit, especially when trading conditions are weak.
Why regulation raises the cost base in investment banking
Tighter regulation pushes fixed and variable costs up at the same time. Compliance, surveillance, capital planning, reporting, controls testing, and governance all require people, systems, and audit-ready processes, so even routine business lines carry more overhead. That matters most in investment banking because many products already have thin spreads, and EU NIS2 Directive-style obligations show how resilience and control expectations can translate into recurring operating burden.
Regulation also limits the ways banks can earn return. Higher capital, conduct, liquidity, and disclosure expectations reduce balance-sheet efficiency and make it harder to justify aggressive risk-taking. When a business once relied on leverage, proprietary positioning, or complex product structuring to lift returns, more of that upside is absorbed by mandatory safeguards and capital charges.
That cost pressure is not just about headcount. Firms must maintain stronger controls over data, access, model usage, recordkeeping, and third-party dependencies, so the “cost of doing the trade” rises even when the trade itself looks unchanged to the client. The economic effect is that more revenue is needed just to cover the same service, which narrows durable margin.
Why competition makes pricing power harder to defend
Intense competition compresses margins because many core banking services become easier to compare and harder to differentiate. When multiple banks can structure the same financing, place similar debt, or execute the same advisory work, clients push fees lower and split mandates across providers. Commoditised work becomes especially vulnerable because the buyer can shop on price and speed rather than on unique capability.
Competitive pressure also shifts the mix of business toward lower-return work. Banks may keep client relationships by accepting thinner economics on execution while hoping to recover value elsewhere, but that cross-subsidy weakens when rivals offer equivalent service. In practice, this creates a cycle in which fee compression is fastest in the most standardised products and slowest only where expertise, scale, or distribution are genuinely scarce.
Market cycles amplify the problem. In weaker trading conditions, the same fixed platform costs are spread across lower revenue, and banks have less room to offset fee pressure with trading gains or volatile upside. That is why sustained competition is most damaging when paired with a soft market, because there is less cushion available from higher-margin activities.
Why the margin squeeze persists rather than self-corrects
The pressure lasts because regulation and competition reinforce each other. Regulation raises the minimum cost of participation, while competition prevents those costs from being passed through cleanly to clients. The result is a structural squeeze: banks must invest more to operate safely and compliantly, yet they cannot simply raise prices without losing business.
Over time, this changes product strategy. Firms tend to favour balance-sheet light advisory, financing, and execution models, while pushing harder on scale, automation, and selective specialisation. Where differentiation is weak, the response is often consolidation, exit, or a move into adjacent services with better economics. The underlying issue is not a temporary earnings dip, but a reduced ability to convert gross revenue into stable operating profit.
Risk and Threat Considerations
Margin pressure becomes a strategic risk when it encourages underinvestment in controls, weaker client service, or mispriced business lines. If a bank tries to defend returns by taking more complexity or hidden risk, it can improve short-term revenue while increasing conduct, capital, and operational exposure.
Failure mechanism: Elevated cost and fee compression push management toward volume, leverage, or product complexity to preserve earnings, but those responses can amplify model risk, conduct risk, and loss severity when market conditions turn.
Impact: The institution may end up with lower-quality earnings, thinner resilience, and a higher probability that a single market shock or control failure erodes the already reduced margin pool.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0 sets the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | GV.SC-01 — Supply Chain Risk Management | Fee pressure often shifts risk into vendors and outsourced control layers. |
| GV.RM-01 — Risk Management Strategy | Margin pressure is a strategic risk that affects capital allocation and business mix. | |
| PR.AA-05 — Least Privilege | Heavier regulation increases the need for tighter access control in operating processes. | |
| Recommendation — Assess third-party dependencies that add hidden cost or resilience exposure. Set portfolio thresholds that reflect risk-adjusted return after control costs. Apply least privilege to the systems that support regulated banking workflows. | ||
| ISO/IEC 27001:2022 | A.5.31 — Legal, statutory, regulatory and contractual requirements | Tighter regulation directly raises the compliance burden on banking operations. |
| A.5.15 — Access control | Banks need stronger control governance as operating processes become more regulated. | |
| Recommendation — Map operating controls to legal and regulatory obligations that affect cost. Restrict access to sensitive banking systems and review entitlements regularly. | ||
Practitioner Guidance
What to prioritise: Separate genuinely differentiated revenue from activity that is only profitable when leverage, volatility, or opaque pricing are available. If a business line cannot defend margin after full compliance, funding, and control costs, treat it as a portfolio decision rather than a forecasting issue.
What to verify: Test whether fee income still covers the full operating burden, including governance, reporting, and control remediation. The important signal is not headline revenue, but whether the franchise can maintain acceptable returns in a low-volatility, low-spread environment.
Practitioner takeaway: The durable answer to margin compression is not to chase more volume in commoditised products, but to concentrate capital and attention where the bank can still earn a risk-adjusted premium after regulation and competition have done their worst.
Related resources from NHI Mgmt Group
- Why do platform companies put pressure on traditional banking business models?
- How should security teams prepare for sustained DNS and DDoS pressure?
- Why do tighter budgets and rising compliance pressure make service management harder for mid-sized organisations?
- Why do higher transaction volumes and tighter regulation make fraud harder to manage in Latin America?
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on September 26, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org