Moody's Warns Banks' AI Push Is Making Them More Dependent on Big Tech

Moody's has issued a warning that banks racing to deploy artificial intelligence could be trading one operational risk for another. The credit rating agency's analysis suggests that growing reliance on a relatively small group of cloud and AI providers could leave financial institutions vulnerable to outages, cybersecurity failures, pricing pressure, and concentrated vendor risk.

The Warning

Financial institutions are adopting AI for a wide range of functions, including credit decisions, customer service, claims processing, fraud detection, and internal automation. Major banks have committed billions of dollars to AI-driven transformation. For example, Lloyds Banking Group has committed billions of pounds to a technology-led transformation that includes extensive AI deployment.

However, Moody's analysis highlights that this transformation creates new dependencies. If a major cloud provider or AI vendor experiences an outage, the bank's AI-powered operations could be disrupted. If a vendor changes its pricing, the bank's cost structure could shift unexpectedly. If a vendor's security is compromised, the bank's data could be at risk.

The concern is not hypothetical. Cloud provider outages have disrupted services across multiple industries in recent years. While financial institutions typically have business continuity plans, the increasing integration of AI into critical operations means that cloud disruptions could have more severe consequences than in the past.

The Concentration Problem

The AI industry is dominated by a small number of companies. Amazon Web Services, Microsoft Azure, and Google Cloud control the vast majority of cloud infrastructure. OpenAI, Google, and Anthropic lead in AI model development. This concentration means that a failure at any single provider could affect multiple financial institutions simultaneously.

The concentration problem is compounded by the specialized nature of AI infrastructure. Unlike traditional IT services, which can often be migrated between providers relatively quickly, AI infrastructure involves complex dependencies between models, data, and infrastructure that make migration more difficult.

For regulators, the concentration of AI capabilities among a few companies raises concerns about systemic risk. If the failure of a single provider could simultaneously affect multiple financial institutions, the resulting disruption could have broader economic consequences.

What Banks Should Consider

Moody's warning suggests that financial institutions should carefully evaluate their AI vendor relationships and develop strategies for managing concentration risk. Several approaches can help.

Multi-cloud strategies, while technically complex, can reduce dependence on any single provider. Some banks are also exploring hybrid approaches that combine cloud-based AI with on-premises infrastructure for critical operations.

Vendor assessment should extend beyond technical capabilities to include financial stability, security practices, and business continuity planning. Banks should also negotiate contractual protections that address the specific risks of AI vendor dependency.

The most important consideration may be governance. Banks should establish clear oversight of AI vendor relationships, including regular assessment of concentration risk and contingency planning for vendor disruptions.

Sources: The Guardian, Moody's Research