Banking and Finance Law Daily Wrap Up, FINANCIAL TECHNOLOGY—BPI reports on board governance of fintech, (Feb 3, 2026)
Organizations Mentioned:Bank Policy Institute
The report looks at how financial institutions are increasingly elevating technology oversight to the board level and how technology, AI, data governance, cybersecurity, and resilience have rapidly become core priorities for boards of financial institutions.
A new survey of large financial institutions finds that boards are increasingly formalizing technology oversight through dedicated board level technology committees. The Bank Policy Institute’s report, Cyber Board Governance: The Role of Board Technology Committees for Financial Services Companies, summarizes survey responses from a group of large, complex financial institutions, including global systemically important banks, super-regional U.S. banks, asset servicing firms, and insurance companies. According to the report, many financial institutions are creating dedicated board technology committees to address cybersecurity, digital transformation, and emerging technologies such as artificial intelligence. The report shows that these committees are typically small, meet more frequently than in the past, and include directors with deep technology or cyber expertise.
The survey suggests that financial institution boards are moving toward structured, standing committees with defined mandates, deeper expertise, and more frequent engagement. According to the survey, 64 percent of the 25 financial institution respondents have already formed or are considering forming a board-level technology committee. Most technology committees are standing committees focused on technology strategy, digital transformation, emerging technologies such as AI, and cybersecurity and operational resilience.
Technology committees are typically small and specialized, averaging four to five directors. Institutions are prioritizing directors with deep experience in technology, cybersecurity, digital transformation and risk management. Several respondents emphasized the value of having a former chief information officer, chief technology officer, or cybersecurity leader serve as chair or key committee member.
Areas of focus. Respondents identified AI and emerging technologies as top areas of board focus, including oversight of generative AI controls, ethics, and model risk management. Boards also reported increased attention to fraud, identity management, data governance, and post-quantum computing considerations.
In addition to cybersecurity and resilience, committees are overseeing enterprise technology strategy, modernization efforts, cloud migration, and alignment between business and IT functions. Many charters now explicitly cover AI, data strategy, analytics, ethics, and risk management, reflecting growing board involvement in advanced technologies. This structure, the report notes, supports integrated oversight of technology, cyber, and operational risk without duplicating responsibilities across committees.
Boards are also strengthening coordination between technology and risk committees and expanding director education through regular briefings and tabletop exercises, according to the report. Emerging risk areas highlighted by respondents include third and fourth party vendor risk, given increasing reliance on cloud and software as a service providers. Some institutions also reported adding fraud oversight to technology committee responsibilities, pointing to the growing role of technology in fraud prevention and detection.
Eighty percent of respondents provide regular technology risk updates or education sessions for the full board, regardless of whether a formal technology committee exists. Institutions reported using tabletop exercises, recurring cyber risk briefings, and targeted deep dive sessions to keep directors current on rapidly evolving issues.
Companies: Bank Policy Institute
IndustryNews: CyberPrivacyFeed DataPrivacy DataSecurity DirectorsOfficersEmployers FinTech GCNNews Privacy