In recent years, the digital transformation of different types of banks has begun to show a trend of differentiation. Large banks have strong scientific and technological strength, and some have set up financial technology subsidiaries, which have sufficient human, material and financial resources to carry out digital transformation; Small and medium-sized banks are more inclined to support their digital business development through technology outsourcing services because of lack of funds and talents and relatively poor scientific and technological strength. The outsourcing dependence and industry concentration in some fields are increasing.
Balance innovation and risk.
Relevant data show that with financial technology becoming a competitive highland, the investment in information technology by banking financial institutions has increased year by year, especially the demand for technology outsourcing by small and medium-sized banks has increased rapidly. In 2020, banking institutions invested 207.8 billion yuan in information technology, a year-on-year increase of 20%; In 20 19, the contract value of bank information technology outsourcing increased by 56.3% year-on-year, and the number of projects increased by 13.8% year-on-year.
"Therefore, based on the main principles of risk orientation, strengthening supervision and integration with the international community, the Measures put forward comprehensive requirements for the risk management of bank information technology outsourcing, and balanced innovation and risk for digital transformation." Zheng Yuyang said.
Clear classification and hierarchical management mode
In fact, before the promulgation of the Measures, as early as 20 13 and 20 14, the regulatory authorities had already formulated the Guidelines for Banking IT Outsourcing Risk Supervision. With the expansion of outsourcing business scope, diversification of project forms and gradual increase of risk points, today's supervision methods keep pace with the times, focusing on filling shortcomings and plugging loopholes.
"From the content point of view, the Measures integrate the previous guidelines for the supervision of information technology outsourcing risks in the banking industry, and form a unified guidance for the supervision of information technology outsourcing risks in financial institutions by expanding the scope of application, integrating the original regulatory rules and adding new standards and requirements." Zheng Chenyang said that the definition of "information technology outsourcing behavior" in the Measures is broader than before, which increases the information technology activities involving important data and customer personal information processing that banks and insurance institutions cooperate with other third parties.
From the perspective of classification, the Measures formally put forward the hierarchical management of information technology outsourcing activities and related service providers, and adopted differentiated control measures for important outsourcing and general outsourcing. For important outsourcing, the Measures require banks and insurance institutions to conduct due diligence on service providers, conduct on-site inspections on off-site outsourcing services, consider the possibility of termination of important outsourcing, and formulate exit strategies. According to the Measures, "outsourcing involving centralized storage or processing of important data of banks and insurance institutions and sensitive personal information of customers" is listed as an important outsourcing.
The existing ecological model of scientific and technological cooperation may be reshaped.
"Regulatory measures have a greater impact on small and medium-sized financial institutions that rely more on outsourcing and small outsourcing service providers with poor risk control, reputation and qualifications. Some small technology companies with insufficient strength and frequent risks may face elimination, while technology giants with higher concentration will bid farewell to the era of' winner takes all', and some small and medium-sized financial institutions need to adjust the outsourcing cooperation mode in time. " Zheng Chenyang said that the promulgation of the "Measures" will mainly affect small and medium-sized financial institutions and small outsourcing service providers, and then change the existing scientific and technological ecological cooperation model of financial institutions. In the future, outsourcing business will increase to head service providers with higher compliance and risk control level. At the same time, the phenomenon of "take all" by service providers will also be reversed.
In addition, Zheng Chenyang suggested that small and medium-sized financial institutions should establish an outsourcing system suitable for their own scientific and technological strategic objectives, incorporate outsourcing risks into comprehensive risk management, improve the organizational structure covering the board of directors, senior management, outsourcing risk authorities and senior management teams, clarify the access standards of service providers, and selectively carry out outsourcing business. Initially, they can focus on less risky outsourcing services, such as consulting planning and business support.
It is worth mentioning that in the cooperation mode, in the future, * * * will enjoy the outsourcing service platform or become a new trend, and the selected financial institutions and outsourcing vendors will match according to certain market-oriented mechanisms and rules to realize complementary advantages and share value. In addition, it is also a good cooperation mode for large financial institutions to export information technology to small and medium-sized financial institutions, thus creating a win-win cooperation technology ecosystem.
This article is from the Financial Times.