Does digital transformation matter for operational risk exposure?

Abstract

Basel Committee recommends banks maintain a capital buffer for operational risk exposure based on business volumes, assuming aggressive actions for quicker business growth could increase risk exposures. We argue that technological innovations expose banks to more operational risk because technology helps increase business volume, but system failure, problems with internal processes, and disruptions from external and internal security threats are inherent to technology. Based on 10 years of data for 264 banks from 43 countries, we find that digitalized banking operation is an underlying driver of operational risk that comes with increased business volume. Banks proactively take more operational risks by increasing cyber spending to tackle FinTech competition in the digitalized economy. Digitalization could generally matter for operational risk exposure, but the natural experiment does not find cybersecurity threats per se could increase operational risks even though cybersecurity appears to be a serious threat to digital banking. The study creates new avenues for future research.