Banking risks from AI and machine learning – EY

Welcome to the forefront of conversational AI as we explore the fascinating world of AI chatbots in our dedicated blog series. Discover the latest advancements, applications, and strategies that propel the evolution of chatbot technology. From enhancing customer interactions to streamlining business processes, these articles delve into the innovative ways artificial intelligence is shaping the landscape of automated conversational agents. Whether you’re a business owner, developer, or simply intrigued by the future of interactive technology, join us on this journey to unravel the transformative power and endless possibilities of AI chatbots.
EY helps clients create long-term value for all stakeholders. Enabled by data and technology, our services and solutions provide trust through assurance and help clients transform, grow and operate.
Artificial Intelligence (AI)
Strategy, Transaction & Transformation
Audit
Tax Function Operations
Climate Change & Sustainability
EY Partner Ecosystem
Technology Transformation
Supply Chain & Operations
Discover how EY insights and services are helping to reframe the future of your industry.

Power Utilities
How digital twin technology powers the future at Xcel Energy
28 Aug 2025Subbu Natarajan
Strategy and Transactions
How Bristol Myers Squibb overhauled working capital to fund its future
20 Aug 2025Gerado Gonzalez
Alliances
How St James’s Hospital's journey to cloud transformed cancer care
09 Jun 2025EY Americas
Asking the better questions that unlock new answers to the working world's most complex issues.
See more
Case studies
Webcasts
Podcasts
 
CEO Agenda
CFO Agenda
Operations Leaders
Technology Leaders
Marketing & Growth Leaders
Cybersecurity & Privacy Leaders
Risk Leaders
EY Center for Board Matters
At EY, our purpose is building a better working world. The insights and services we provide help to create long-term value for clients, people and society, and to build trust in the capital markets.
See more
2025 EY US Generation Survey
16 Dec 2025EY Americas
EY US names Dante D’Egidio as next US Managing Partner
11 Dec 2025EY Americas
EY survey: AI-driven productivity is fueling reinvestment over workforce reductions
09 Dec 2025EY Americas
We bring together extraordinary people, like you, to build a better working world.
Experienced professionals
Early career opportunities
MBA and advanced-degree students
Contract workers
EY-Parthenon careers

No results have been found
Topics
General
People
Recent Searches
Trending
Tax and Finance Operations Survey: How can tax and finance leaders build agile functions that thrive?
Tax and finance functions need to create agility and facilitate continuous transformation to deal with constant disruption and leverage AI.
Understanding the impact of AI on assurance
EY Assurance is developing future-ready AI talent and services to help our clients navigate the complexities of responsible innovation. Learn more.
Megatrends 2026 and beyond
EY’s Futures Reimagined framework helps leaders navigate the NAVI era’s megatrends for resilience and growth. Discover how.
Select your location

Authors
EY Americas Financial Services Data and Analytics Leader
Managing Director, Financial Services Consulting and Center for Board Matters, Ernst & Young LLP
Artificial intelligence and machine learning (AI/ML) have been near the top of the strategic agenda for boards and bank leaders for several years and are likely to continue. The emergence of generative AI tools capable of producing rich, prompt-based content and code has further fueled this focus. Even before generative AI burst onto the scene, boards were challenged to assess the full range of AI and machine learning risks. These challenges are highlighted in two 2022 surveys performed by Ernst & Young LLP (EY) and the Institute of International Finance (IIF) and are further supported by recent roundtable sessions we’ve held with chief risk officers (CROs) from financial services.
How EY can help
Artificial Intelligence Consulting Services
Our Consulting approach to the adoption of AI and intelligent automation is human-centered, pragmatic, outcomes-focused and ethical.
The key AI/ML implementation focus areas for bank risk management teams are credit risk management and fraud detection. Additionally, with generative AI, use cases are being explored in these areas and for broader regulatory compliance and policy frameworks. Generative AI has the potential to bring significant advancements and transform business functions.
 
However, AI/ML early adopters face increased risks, such as lawsuits arising from the use of web-based copyrighted material in AI outputs, concerns about bias, lack of traceability due to the “black box” nature of AI applications, and threats to data privacy and cybersecurity. As a result, many financial institutions are opting for a cautious approach to AI/ML. They are initially implementing applications in non-customer-facing processes or to aid customer-facing employees where the primary goals are improving operational efficiency and augmenting employee intelligence by offering insights, recommendations and decision-making support.
 
Lack of clear regulatory direction complicates board oversight. Regulators have expressed concerns about AI use in the business, including the embedding of bias into algorithms used for credit decisions and the sharing of inaccurate information by chatbots. Data privacy and security and the transparency of other models are also on authorities’ radars. Generative AI has amplified these concerns.
 
With AI usage increasingly democratized, robust, agile governance has become an urgent board priority. Even if companies don’t define or set up controls, boards must be diligent in ensuring that companies take a holistic and strategic approach to overseeing AI usage in risk management and overall business operations.
 
 
 
AI/ML are crucial for speeding up digital transformations in financial services over the next three years, alongside modernized platforms, automated processes and cloud technologies. Improvements in generative AI over the last year have only increased this urgency. Directors should be aware that technology risk and project risk are interconnected and can reinforce each other. There is a risk that AI could be overshadowed by project risks as banks strive to modernize core functions and migrate to the cloud.
Our research also confirms that the majority of CROs see digital transformation and AI risks continuing to grow. There’s no doubt that generative AI will play a prominent role in ongoing digital transformation, especially in customer-facing operations, which will further increase the risk profile. Boards must continually consider how generative AI will amplify the existing risks of AI. For example, the adoption of large language models will strain computational and data management capabilities and make the explanation of existing AI models even more complex.
As with other functions across the business, risk management teams are expanding their use of AI/ML to improve their own work. At some organizations, the rapid pace of adoption means boards must engage management as soon as possible to establish oversight.

According to our survey, CROs are using advanced technologies to:
Interestingly, CROs at global systemically important banks (G-SIBs) were more likely to focus on automation (67%) and financial crime monitoring (50%) in their AI/ML deployments than non-G-SIBs. All CROs expect to use these technologies for these activities in the future, indicating that we’re still in the early days.
In the future, we expect to see risk teams using AI to scan and review regulations and for process, risk and control diagnostics. Over time, AI-enabled scenario modelling will be used for market simulation, portfolio optimization and credit risk assessments. Automation of model documentation for consistency, clarity and reproducibility is another way banking CROs will adopt generative AI.
The use of AI/ML is being governed through existing risk models and enterprise risk frameworks, according to our research. Most banks surveyed use model monitoring feedback mechanisms and controls – or are in the process of defining feedback mechanisms – to ensure machine learning models deliver the expected outcomes.
According to survey respondents, the primary techniques used in validating machine learning models in credit risk management include:
Source: 2022 annual EY-IIF survey report on machine learning
Nearly every institution uses a range of mechanisms to avoid bias and discriminatory outcomes for credit risk management and AML. Mechanisms include institutional codes of ethics; auditing, testing and controls; and the exclusion of sensitive attributes from feature analysis, selection and engineering. All these frameworks need to be continuously reviewed and evolved to support generative AI and address the incremental risks associated with this technology – including hallucinations (where the models create fictitious responses), IP rights and bias management.
Board directors have concerns about the regulatory uncertainty concerning AI and machine learning in risk management and other business functions. To address this, boards may support management in engaging with regulators and participating in industry initiatives to establish adoption standards. Relative to anti-money laundering, CROs are particularly concerned about the complex and opaque nature of some algorithms and regulatory supervisors’ lack of experience with these technologies. Banks may also engage regulators to discuss transparency, bias and ethical issues, and regulatory constraints for credit risk applications.
In a dynamic banking market, board directors have more risks to consider than ever before – and AI/ML should top the list, as our research confirms. Effective board oversight will only become more important as generative AI creates transformative new possibilities in finance, IT, product development, customer service, marketing and other parts of the business. We expect forward-looking banks to embrace AI-driven risk management strategies, enhance the operating model and build ecosystems with robust data governance and ethical, legal and regulatory frameworks for generative AI.
Boards should consider whether the organization has an underlying data and innovation culture. Those with strong data and/or innovation cultures will likely be more successful in their deployment of generative AI. Generative AI should support not only business goals but also company values. Change management and workforce alignment should be included as part of the larger equation.
Relative to the risk function, boards should support CROs and other business leaders in devising long-term and holistic roadmaps for AI usage, including generative AI.
In one of our recent roundtables, CROs pointed to several issues where AI can help:
As AI becomes more deeply embedded in operations and processes – both within risk management and in the broader business – the priority for boards must be to understand how AI is used by CROs and risk management teams to mitigate other threats to the business.
The 2022 annual EY-IIF survey and report on machine learning: uses in credit risk and AML applications — The IIF surveyed 43 financial institutions across global regions, including G-SIBs, national banks, regional banks and other financial institutions. EY and the IIF performed analysis of the survey results covering a broad range of topics.

The 2022 12ᵗʰ annual EY-IIF survey of global banking CROs — EY, in conjunction with the IIF, surveyed CROs or other senior risk executives from 88 banks in 30 countries around the world from June 2022 through October 2022. Participants were interviewed, completed a survey or both. Participating banks were headquartered in Asia-Pacific (11%), Europe (16%), Latin America (18%), the Middle East and Africa (19%), and North America (36%), and 14% were G-SIBs.
EY and IIF are collaborating on the 2023 EY-IIF survey of global banking CROs as well as the 2023 AI/ML Use in Financial Services survey, which explores these themes further. The surveys will be published late 2023.
Contact EY professionals to learn more about the resources we offer financial services directors.

EY/IIF global bank risk management survey
The survey reveals CROs’ views on the most urgent issues facing their organizations now and in the next three to five years.

There’s no doubt that AI will become more deeply embedded in more operations and processes – both within risk management and in the broader business. For boards, the priority must be to understand the full range of risks, especially when AI is used by CROs and risk management teams to mitigate other threats to the business.

About this article
Authors
Related articles
Technology-fueled transformation for financial services
Tech-forward EY Financial Services solutions help you harness the transformational power of technology, innovation and people to unlock new sources of value at speed and scale.
How can financial institutions adopt generative AI responsibly?
Organizations need to take steps to move forward with the responsible activation of generative AI (artificial intelligence) in financial services.
How can financial services firms derive value from generative AI?
Can banks and financial institutions drive and sustain the responsible activation of generative AI (artificial intelligence) in financial services?
How AI will affect compliance organizations
Recent developments in AI present the financial services industry with many opportunities for disruption. Learn more about the potential impacts.
The CRO cyber risk agenda: What boards should be asking
The latest EY-IIF survey of banking CROs highlights the challenges of increasingly interconnected risks and where boards should engage.
Preparing financial services cybersecurity for quantum computing
Quantum computing may seem years off, but financial services cybersecurity teams can take steps now to secure data. Read more.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

source

Scroll to Top