Connect with us

Business

Q&A: Enhancing the employee experience in the banking sector

Source: Finance Derivative

As costs for everyday items continue to fluctuate and reports of company layoffs and budget reviews increase, economic uncertainty around the world has people on edge.

In banking, these dynamics all place a strain on services. A continued tight labour market also makes it difficult to fill open jobs and keep expertise and staffing at the rights levels.

Consumers too are dealing with a considerable amount of stress to make ends meet. When they reach out to banks, employees on the frontline often find themselves the undeserving targets of angry customers. People get anxious when they are unable to quickly resolve their financial questions. And this has an economic impact for banks too – angry consumers are more likely to air their frustrations on social media, leading to reputational damage.

On top of this, there’s considerable tension between banks and their employees as many are ordering return-to-office mandates, with JPMorgan Chase recently joining the list of many organisations making this a requirement. Employees are also faced with concerns that their jobs may be displaced with the rise of automation and AI, leading them to feel increasingly insecure. Under these conditions, it is more important than ever that banks invest in their employee experience to support staff retention and in turn, customer satisfaction.

David Porter, Managing Director of Financial Services at Genesys, discusses the impact of increasing pressure on banking services and their employees, and how banks can deploy the right tools to alleviate this.

How have customer expectations of banks changed in recent years?

As technology evolves, customer expectations are continually being reset. People today want more. More convenience, more ease of use, and more seamless experiences. Brands such as Uber, Google and Amazon are setting this standard. Being able to self-serve has become a differentiator between those that deliver on customer expectations, and those that don’t. These expectations are no different to the ones the banking sector now faces.

In the banking industry, customers want digital experiences that allow them to perform tasks with ease, such as checking balances, transferring funds, and setting up recurring payments, all without having to step foot inside a branch. Any issues that may arise must be addressed quickly and efficiently, but this hasn’t been straightforward to achieve. And when you look at the data, it’s easy to see why – only 18% of banking executives have reported being in a ‘mature stage’ of digital transformation efforts.

What barriers does the banking sector currently face approaching their customer experience?

An executive at Citi recently shared with me that efficiency, quick wins, and employee engagement were top priorities at present – and they’re not alone as it appears to be a growing industry trend. This is a step change, as typically, the employee experience has been viewed as secondary to that of the customer experience within banking. However, as the industry increasingly faces challenges in hiring throughout customer service functions, from front to back office, the employee experience has become increasingly important. Banks are far more open to exploring introducing tools and capabilities to improve this. Yet barriers to implementing these tools remain.

Banks are highly regulated, meaning that adopting technology in a way that is compliant with industry standards is always a challenge. Any new channels or capabilities that are deployed need to be properly reviewed and risk assessed, which in some cases means a slower time to market.

While the industry has seen huge progress, with challenger banks accelerating the transition to a digital-first banking model, many financial services companies continue to be held back due to legacy technology infrastructures and silos between department; particularly larger traditional banks. This results in disjointed customer journeys. In fact, according to our own recent research, only 26% of financial services companies today offer multiple channels for customer interactions and have integrated technologies and connected data. With consumer demand for digital skyrocketing and contact volumes increasing, more needs to be done to accelerate the transition to a unified omnichannel experience that provides visibility into the customer journey end-to-end.

What has the impact of this been on employees?

Employees are under increasing amount of strain to meet heightened customer expectations. For example, when a customer reaches out for assistance, they expect employees to have the necessary information on how and why they got there. Customers don’t like having to repeat authentication processes and the details of their issue. Being met with unsatisfying solutions can quickly lead to frustration as they feel like they’re going round in circles. Employees often take the brunt of these frustrations.

Additionally, with banking services seeing an increasing number of customers reaching out, employees are being stretched to meet service demand. This means that customers are not always matched with the best person with the right expertise to deal with their issue, leading to additional stress on both sides if a meaningful solution isn’t found.

Why is it important that banks invest in their experience?

For banks to be successful, they need to recognise the link between employee satisfaction and customer satisfaction. This will require an overhaul of traditional thinking around the employee experience.

While many banks are reverting back to office-based working, hybrid continues to be favoured by employees. As such, for banks to be competitive at a time where both customer and employee experience are closely tied, they need to cater to employee needs and empower them with ways of working that suit them. However, with no one set definition of what this looks like, banks are navigating doing so in a way that meets both employee and business needs.

At the same time, banks have faced an overhaul in service delivery. Branch-based service models have been in decline, which has pushed more customers to reach out via digital channels, increasing strain on services. When employees are under this amount of pressure, without the appropriate means to manage it, the outcome is often a high turnover of staff. Banks are then having to work harder to recruit new talent for roles that are increasingly difficult to fill, and remaining employees are increasingly stretched due to understaffing, which has a domino effect on the customer experience they deliver.

This has forced banking leaders to recognise the importance of employee engagement. With banks struggling to fill job vacancies, especially in the back office, they need to find ways to reduce employee frustration and make jobs more efficient, simpler and quicker. While the priority has been equipping customers with self-service options, now banks need to turn the table and provide employees and invest in the right tools to provide them with real and meaningful support.

With advancements in technology, particularly AI, banks have an opportunity to reimagine traditional work processes and empower their employees with the means to thrive. It’s important that instead of succumbing to fears about AI replacing employees, these are positioned as tools to help supercharge performance and create satisfying experiences for employees and customers alike. Doing so will not only drive greater efficiencies, but improve customer loyalty.

What technology can banks implement to improve their employee experience?

Banks stand a lot to gain by investing in modern cloud-based technologies. While banks face challenges in overhauling multiple legacy systems and ensuring solution aligns with strict regulation, adopting a single cloud-based platform means banks can better sync operations across the business for a more seamless experience for both customer and employee across the board.

At the same time, layering modern technologies, like AI, on top of this can add additional complexity, particularly when banks are dealing with sensitive customer information, meaning they need to have stringent measures to ensure data is handled securely. However, banks have already made significant progress with AI – predictive engagement and routing capabilities are supporting banks to offer personalised services by predicting customer needs and behaviours, and offering tailored products and solutions, vastly improving the customer journey.

Bots powered by generative AI are proving to be a gamechanger here, improving efficiency and outcomes for customers. Bots can quickly sort and prioritise knowledge content most relevant to customer inquiries, whether that’s on how to set up a saving account or where their local bank is. Through this, employees can save time resolving queries, while ensuring the solutions they provide are meaningful to the individual customer.

Additionally, investing in modern employee experience technologies tightly integrated with their customer experience can help banks improve engagement with their workforce. AI too has a role to play here. For example, through AI-powered coaching and real time insights, they can provide employees with valuable guidance on how to improve performance, supported with recommendations and training plans personalised to their specific need. This creates a continuous learning loop, where human capabilities are enhanced by AI’s support and insights.

Through implementing tools like these, and more specifically, AI, banks can become more employee centric and show themselves as employers who truly care. Employees have the support they need to thrive, allowing them to deliver an experience in line with what today’s customers want.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Business

Why Resilience Is Replacing Prevention as the Defining Cybersecurity Strategy

by Manuel Sanchez, Information Security and Compliance Specialist, iManage

For decades, cybersecurity centered around prevention. Build the right walls around your perimeter, deploy the right tools, train your people not to click the wrong links, and you could keep the bad actors out.

Today, the question driving security strategy is no longer “how do we stop a breach?” but “how do we survive one?” It is a subtle but profound shift in philosophy, and it is reshaping everything from how IT and Security leaders structure their teams to how they select their vendors and deploy AI.

Rehearsing for the worst

The practical expression of this shift is visible in how security teams are being restructured. Organisations are establishing dedicated disaster recovery teams – not to prevent incidents, but to contain and recover from them when they occur. These teams maintain detailed, regularly updated playbooks covering everything from backup restoration to stakeholder communications, with roles pre-assigned and procedures rehearsed well in advance.

In many ways, this mirrors the logic behind disaster drills: fire alarms matter, but knowing the evacuation routes and the post-incident recovery plan determines how well an organisation survives. Critically, responsibility cannot rest with the CISO alone. Business continuity after a cyber incident is a whole-company challenge – which means every core part of the organisation is involved to sustain critical business operations.

Governance in the gray areas

Running alongside this shift is a governance crisis that is easy to underestimate until it becomes a serious risk. As organisations adopt more applications across more vendors and hosting services, the shared responsibility model that was supposed to keep cloud accountability clear has become increasingly difficult to enforce.

The sheer volume of cloud applications in use at any given enterprise is too vast for consistent governance under current approaches – and bad actors have become skilled at identifying exactly where vendor responsibility ends, and customer accountability begins, then operating precisely in that “gray area”. Being aware of this risk and putting preventative measures in place is important, but recognising the role these cloud applications play and the impact to key business operations if these applications were compromised, is critical.

Meanwhile, data volumes continue to grow exponentially, and unstructured data continues to accumulate in the background across many digital systems. Why is this important? If you don’t know what data you have, where it is stored, who has access to it, and, most importantly, how it is protected – onsite or cloud backup – this makes the recovery process a lot harder.

AI agents on the rise – and with it new risks

Although the focus of this article is on resilience, prevention must still remain an essential part of your defences. On that front, the accelerating adoption of autonomous AI in cyber defence tasks is reshaping security operations as visibly as anything else happening in the field right now. The volume, speed, and sophistication of modern threats have simply outpaced what human analysts can manage in real time.

The shift is toward AI that doesn’t just flag anomalies for human review, but actively detects, analyses, and neutralises threats as they emerge, even using predictive models to anticipate attacks before they fully materialise. This frees human experts to focus on strategic decisions and complex defence work rather than spending their days firefighting.

Autonomous AI does, however, introduce risks of its own. When AI agents operate across systems – accessing sensitive repositories, triggering actions, sharing data – they expand the attack surface in ways that aren’t always immediately visible.

Managing the digital identities of AI agents, much like managing employee access credentials, is becoming a critical security discipline. Accordingly, comprehensive traceability frameworks that log every action an agent takes are no longer optional; they are the foundation of responsible AI deployment in any security context.

The supply chain wake-up call

The case for moving from a “prevention” mindset to a “resilience” one is further bolstered by recent high-profile breaches via compromised managed service providers, which have forced a fundamental reset in how organisations evaluate their vendors.

The era of cost-first selection is over. Security credentials, demonstrated through continuous and verifiable evidence, are now non-negotiable for any provider hoping to retain enterprise clients – and what organisations are demanding goes well beyond point-in-time audits. They want real-time visibility into every third-party integration, every software update, and every vendor interaction – including the cloud services the vendors themselves use.

“Trust but verify” has become the operational standard, and providers who cannot demonstrate validated controls and live monitoring are finding themselves out of contention. It is a structural shift that will reshape the vendor landscape considerably — and it is already underway.

A new era demands a new approach

In the end, prevention still matters, but resilience – instilled via the key focus areas above – is what turns disruption into survivable events rather than existential crises. The organisations that are honest about the limits of prevention and embrace the shift towards resilience won’t just better withstand the next wave of attacks – they’ll be differentiating themselves from competitors still clinging to yesterday’s playbook.

Continue Reading

Business

Adapting compliance in a fragmented regulatory world

Rasha Abdel Jalil, Director of Financial Crime & Compliance at Eastnets, discusses the operational and strategic shifts needed to stay ahead of regulatory compliance in 2025 and beyond.

As we move through 2025, financial institutions face an unprecedented wave of regulatory change. From the EU’s Digital Operational Resilience Act (DORA) to the UK’s Basel 3.1 rollout and upcoming PSD3, the volume and velocity of new requirements are constantly reshaping how banks operate.

But it’s not just the sheer number of regulations that’s creating pressure. It’s the fragmentation and unpredictability. Jurisdictions are moving at different speeds, with overlapping deadlines and shifting expectations. Regulators are tightening controls, accelerating timelines and increasing penalties for non-compliance. And for financial compliance teams, it means navigating a landscape where the goalposts are constantly shifting.

Financial institutions must now strike a delicate balance: staying agile enough to respond to rapid regulatory shifts, while making sure their compliance frameworks are robust, scalable and future-ready.

The new regulatory compliance reality

By October of this year, financial institutions will have to navigate a dense cluster of regulatory compliance deadlines, each with its own scope, jurisdictional nuance and operational impact. From updated Common Reporting Standard (CRS) obligations, which applies to over 100 countries around the world, to Australia’s new Prudential Standard (CPS) 230 on operational risk, the scope of change is both global and granular.

Layered on top are sweeping EU regulations like the AI Act and the Instant Payments Regulation, the latter coming into force in October. These frameworks introduce new rules and redefine how institutions must manage data, risk and operational resilience, forcing financial compliance teams to juggle multiple reporting and governance requirements. A notable development is Verification of Payee (VOP), which adds a crucial layer of fraud protection for instant payments. This directly aligns with the regulator’s focus on instant payment security and compliance.

The result is a compliance environment that’s increasingly fragmented and unforgiving. In fact, 75% of compliance decision makers in Europe’s financial services sector agree that regulatory demands on their compliance teams have significantly increased over the past year. To put it simply, many are struggling to keep pace with regulatory change.

But why is it so difficult for teams to adapt?

The answer lies in a perfect storm of structural and operational challenges. In many organisations, compliance data is trapped in silos spread across departments, jurisdictions and legacy platforms. Traditional approaches – built around periodic reviews, static controls and manual processes – are no longer fit for purpose. Yet despite mounting pressure, many teams face internal resistance to changing established ways of working, which further slows progress and reinforces outdated models. Meanwhile, the pace of regulatory change continues to accelerate, customer expectations are rising and geopolitical uncertainty adds further complexity.

At the same time, institutions are facing a growing compliance talent gap. As regulatory expectations become more complex, the skills required to manage them are evolving. Yet many firms are struggling to find and retain professionals with the right mix of legal, technical and operational expertise. Experienced professionals are retiring en-masse, while nearly half of the new entrants lack the right experience needed to step into these roles effectively. And as AI tools become more central to investigative and decision-making processes, the need for technical fluency within compliance teams is growing faster than organisations can upskill. This shortage is leaving compliance teams overstretched, under-resourced and increasingly reliant on outdated tools and processes.

Therefore, in this changing environment, the question suddenly becomes how can institutions adapt?

Staying compliant in a shifting landscape

The pressure to adapt is real, but so is the opportunity. Institutions that reframe compliance as a proactive, technology-driven capability can build a more resilient and responsive foundation that’s now essential to staying ahead of regulatory change.

This begins with real-time visibility. As regulatory timelines change and expectations rise, institutions need systems that can surface compliance risks as they emerge, not weeks or months later. This means adopting tools that provide continuous monitoring, automated alerts and dynamic reporting.

But visibility alone isn’t enough. To act on insights effectively, institutions also need interoperability – the ability to unify data from across departments, jurisdictions and platforms. A modern compliance architecture must consolidate inputs from siloed systems into a unified case manager to support cross-regulatory reporting and governance. This not only improves accuracy and efficiency but also allows for faster, more coordinated responses to regulatory change.

To manage growing complexity at scale, many institutions are now turning to AI-powered compliance tools. Traditional rules-based systems often struggle to distinguish between suspicious and benign activity, leading to high false positive rates and operational inefficiencies. AI, by contrast, can learn from historical data to detect subtle anomalies, adapt to evolving fraud tactics and prioritise high-risk alerts with greater precision.

When layered with alert triage capabilities, AI can intelligently suppress low-value alerts and false positives, freeing up human investigators to focus on genuinely suspicious activity. At the more advanced stages, deep learning models can detect behavioural changes and suspicious network clusters, providing a multi-dimensional view of risk that static systems simply can’t match.

Of course, transparency and explainability in AI models are crucial. With regulations like the EU AI Act mandating interpretability in AI-driven decisions, institutions must make sure that every alert or action taken by an AI system is auditable and understandable. This includes clear justifications, visual tools such as link analysis, and detailed logs that support human oversight.

Alongside AI, automation continues to play a key role in modern compliance strategies. Automated sanction screening tools and watchlist screening, for example, help institutions maintain consistency and accuracy across jurisdictions, especially as global lists evolve in response to geopolitical events.

Similarly, customisable regulatory reporting tools, powered by automation, allow compliance teams to adapt to shifting requirements under various frameworks. One example is the upcoming enforcement of ISO 20022, which introduces a global standard for payment messaging. Its structured data format demands upgraded systems and more precise compliance screening, making automation and data interoperability more critical than ever.

This is particularly important in light of the ongoing talent shortages across the sector. With newer entrants still building the necessary expertise, automation and AI can help bridge the gap and allow teams to focus on complex tasks instead.

The future of compliance

As the regulatory compliance landscape becomes more fragmented, compliance can no longer be treated as a tick-box exercise. It must evolve into a dynamic, intelligence-led capability, one that allows institutions to respond to change, manage risk proactively and operate with confidence across jurisdictions.

To achieve this, institutions must rethink how compliance is structured, resourced and embedded into the fabric of financial operations. Those that do, and use the right tools in the process, will be better positioned to meet the demands of regulators today and in the future.

Continue Reading

Business

Why Shorter SSL/TLS Certificate Lifespans Are the Perfect Wake-Up Call for CIOs

By Tim Callan, Chief Compliance Officer at Sectigo and Vice-Chair of the CA/Browser Forum

Let’s be honest: AI has been the headline act this year. It’s the rockstar of boardroom conversations and LinkedIn thought leadership. But while AI commands the spotlight, quantum computing is quietly tuning its instruments backstage. And when it steps forward, it won’t be playing backup. For CIOs, the smart move isn’t just watching the main stage — it’s preparing proactively for the moment quantum takes center stage and rewrites the rules of data protection.


Quantum computing is no longer a distant science project. NIST has already published standards for quantum-resistant algorithms and set a clear deadline: RSA and ECC, the cryptographic algorithms that protect today’s data, must be deprecated by 2030. We’re no longer talking about “forecasts;” we are talking about actual directives from government organizations to implement change. And yet, many organizations are still treating this like a future problem. The reality is that threat actors aren’t waiting. They’re collecting encrypted data now, knowing they’ll be able to decrypt it later. If we wait until quantum machines are commercially viable, we’ll be too late. The time to prepare is before the clock runs out and, unfortunately, that clock is already ticking.

For CIOs, this is an infrastructure and risk management crisis in the making. If your organization’s cryptographic infrastructure isn’t agile enough to adapt, the integrity of your digital operations and the trust they rely on could very soon be compromised.

The Quantum Threat Is Already Here

Quantum computing’s potential to disrupt global systems and the data that runs through it is not hypothetical. Attackers are already engaging in “Harvest Now, Decrypt Later” (HNDL) strategies, intercepting encrypted data today with the intent to decrypt it once quantum capabilities mature.

Recent research found that an alarming 60% of organizations are very or extremely concerned about HNDL attacks, and 59% express similar concern about “Trust Now, Forge Later” threats, where adversaries steal digitally signed documents to forge them in the future.

Despite this awareness, only 14% of organizations have conducted a full assessment of systems vulnerable to quantum attacks. Nearly half (43%) of organizations are still in a “wait and see” mode. For CIOs, this gap highlights the need for leadership: it’s not
enough to know the risks exist, you must identify which systems, applications, and data flows will still be sensitive in ten or twenty years and prioritize them for PQC migration.

Crypto Agility Is a Data Leadership Imperative

Crypto agility (the ability to rapidly identify, manage, and replace cryptographic assets) is now a core competency for IT leaders to ensure business continuity, compliance, and trust. The most immediate pressure point is SSL/TLS certificates. These certificates authenticate digital identities and secure communications across data pipelines, APIs, and partner integrations.

The CA/Browser Forum has mandated a phased reduction in certificate lifespans from 398 days today to just 47 days by 2029. The first milestone arrives in March 2026, when certificates must be renewed every six months, shrinking to near-monthly by 2029.

For CIOs, it’s not just an operational housekeeping issue. Every expired or mismanaged certificate is a potential data outage. That means application downtimes, broken integration, failed transactions and compliance violations. With less than 1 in 5 organizations prepared for monthly renewals, and only 5% fully automating their certificate management processes currently, most enterprises face serious continuity and trust risks.

The upside? Preparing for shortened certificate lifespans directly supports quantum readiness. Ninety percent of organizations recognize the overlap between certificate agility and post-quantum cryptography preparedness. By investing in automation now, CIOs can ensure uninterrupted operations today while laying a scalable foundation for future-proof cryptographic governance.

The Strategic Imperative of PQC Migration

Migrating to quantum-safe algorithms is not a plug-and-play upgrade. It’s a full-scale transformation. Ninety-eight percent of organizations expect challenges, with top barriers including system complexity, lack of expertise, and cross-team coordination. Legacy systems (many with hardcoded cryptographic functions) make this even harder.

That’s why establishing a Center of Cryptographic Excellence (CryptoCOE) is a critical first step. A CryptoCOE centralizes governance, aligns stakeholders, and drives execution. According to Gartner, by 2028 organizations with a CryptoCOE will save 50% of costs in their PQC transition compared to those without.

For CIOs, this is a natural extension of your role. Cryptography touches every layer of enterprise infrastructure. A CryptoCOE ensures that cryptographic decisions are made with full visibility into system dependencies, risk profiles and regulatory obligations.

By championing crypto agility as an infrastructure priority, CIOs can transform PQC migration from a technical project into a strategic initiative that protects the organization’s most critical assets.

The Road Ahead

The shift to 47-day certificates is a wake-up call. It marks the end of static cryptography and the beginning of a dynamic, agile era. Organizations that embrace this change will not only avoid outages and compliance failures, but they’ll be also prepared for the quantum future.

Crypto agility is both a technical capability and a leadership mandate. For CIOs, the path forward to quantum-resistant infrastructure can be clear: invest in automation, build cross-functional alignment, and treat cryptographic governance as a core pillar of enterprise resilience.

Continue Reading

Copyright © 2021 Futures Parity.