Leading Through Transformation: Governance, Workforce, and the Road Ahead
By: Paul Schaus
April 21, 2026
Over the course of this series, I have examined eight technology forces reshaping banking, from agentic AI to lending transformation, from stablecoins and payments modernization to cybersecurity, from customer experience to core infrastructure. Each article has addressed a specific domain, but the deeper truth that connects all of them is this, "Technology determines the menu of what is possible, but leadership determines the meal that gets served". The institutions that will thrive in 2026 and beyond are not necessarily those with the largest technology budgets or the most sophisticated algorithms. They are the ones that master the human dimensions of transformation, governance, talent, culture, and strategic discipline. In two decades of consulting at CCG Catalyst, I have never seen a technology initiative succeed without executive commitment, and I have never seen a well managed institution fail for lack of technology.
CSI's research shows that 78 percent of banking leaders believe AI should augment rather than replace human judgment, and 76 percent trust AI-driven decisions when proper oversight is in place. These are healthy instincts. But IBM and Ponemon Institute research reveals a troubling counterpoint: 67 percent of organizations reported experiencing an AI-related security incident, and 63 percent had no formal AI governance policies at the time. That disconnect between the expressed belief in oversight and the actual absence of governance frameworks is the single biggest risk in banking technology today.
Experian names AI accountability as the number one shift for 2026, and I agree completely. The governance conversation needs to move beyond the question of whether banks should use AI, that question is settled. The far more consequential question of how they govern it responsibly. This means formal AI acceptable use policies that define which tools are approved, what data categories may be processed, how outputs are validated, and what escalation procedures apply when autonomous systems encounter edge cases. It means board-level reporting on AI risk that goes beyond the superficial metrics of how many pilots are running to the substantive questions of what decisions AI is making, what errors it is producing, and what controls prevent harm.
Shadow AI, the unauthorized use of AI tools by employees without IT or compliance oversight, deserves particular attention. As I discussed in my article "Lending Transformation: AI, Private Credit, and the Battle for Borrowers", I have seen loan officers using public language models to draft credit memos containing confidential borrower information and risk analysts prompting consumer AI tools with proprietary portfolio data. Every such instance represents a potential data exposure that could trigger regulatory consequences, customer trust violations, and reputational damage. Governance is not bureaucracy. It is the mechanism that allows innovation to proceed without creating unacceptable risk.
Finastra reports that 43 percent of institutions cite talent shortages as a modernization barrier. Deloitte documents the 93/7 spending imbalance; 93 percent of AI-related spending goes to technology infrastructure while only 7 percent goes to people. EY's AI Bank white paper calls for what it describes as talent reconstruction, a fundamental rethinking of how financial institutions attract, develop, and retain the workforce needed for an AI-powered future.
I want to push back on the framing of this as an external talent shortage. In my experience, it is at least as much a self-inflicted leadership problem. Banks that offer competitive technology roles with genuine career advancement, invest in continuous learning and reskilling programs, and build cultures that embrace change rather than resist it are finding the people they need. At CCG Catalyst, we work with banks on talent strategy regularly, and the institutions complaining most loudly about talent shortages are often the same ones offering below-market compensation, maintaining rigid hierarchies that frustrate ambitious technologists, and running on outdated systems that no talented engineer wants to spend their career maintaining.
The 93/7 spending ratio is not just a budgeting imbalance; it is very much an organizational philosophy that virtually guarantees failure. For every dollar spent on AI technology, banks should be investing at least twenty-five cents on the people side, governance frameworks, training programs, change management, cross-functional team development, and organizational design. Technology will not deploy itself, will not govern itself, and will not generate business value without skilled, empowered people directing it toward the right problems. The institutions that rebalance this equation will be the ones that turn AI from a collection of science projects into an enterprise-wide capability.
EY's research documents that 60 to 70 percent of organizations struggle to scale AI beyond isolated pilot programs. Capgemini's World CIB Report outlines four pillars for successful transformation: a client-centric operating model, AI-powered workflows, becoming a trusted digital partner, and culture and workforce transformation. Of those four pillars, I would argue that culture is the one that matters most and gets funded least.
The scaling challenge is almost entirely an organizational problem. Technological scales, which is what technology does. What does not scale automatically is the cross-functional collaboration, the governance discipline, the change management rigor, and the executive commitment needed to move from a successful departmental pilot to an enterprise-wide capability. I have watched this dynamic play out across dozens of institutions. The pilots that remain pilots are invariably the ones that lack executive air cover and cross-functional accountability. The ones that scale production have both a senior sponsor who removes organizational barriers and a governance structure that coordinates across business lines.
My recommendation to bank leaders is to stop measuring AI success by the number of pilots launched and start measuring it by the number of use cases that reach production scale with measurable business impact. A bank with three AI applications in full production is in a fundamentally stronger position than one with thirty pilots in various stages of experimentation. Focus beats breadth every time.
Comptroller Jonathan Gould has emphasized that AI should be governed by the same risk-based, technology-neutral principles that apply to all banking activities. The 2023 interagency guidance on third-party risk management is clear and comprehensive. The model risk management framework in SR 11-7, supplemented by OCC Bulletin 2025-26 for community banks, provides proportionate but unambiguous expectations. The GAO's 2025 report on AI oversight in financial services signals that supervisory attention will only intensify.
Here is my strongest conviction after many years in this industry, (1) banks that build robust governance earn regulatory confidence, and (2) regulatory confidence is a competitive moat. The institutions I advise that move fastest on innovation are invariably the ones with the strongest compliance cultures. This is not a paradox. It is a direct causal relationship. When examiners trust that an institution has sound governance, they are more comfortable with that institution's pace of innovation. When governance is weak or absent, every new initiative becomes a regulatory conversation. Compliance-first accelerates innovation because you do not have to retrofit governance later, and I have never seen it work the other way around.
CSI's research shows that 86 percent of community bank leaders are optimistic about their technology prospects. Their top priorities, technology modernization, cybersecurity, and operational efficiency are exactly the right ones. Community banks have something that no amount of technology spending can replicate, it is embedded community relationships, local market knowledge, and the trust that comes from decades of serving their neighbors. The strategic imperative is to enhance that advantage with technology, not to abandon it in pursuit of the latest digital trend.
Proportionate governance that enables innovation without overwhelming limited resources is entirely achievable. I have seen community banks implement AI-driven fraud detection, modernize their payments infrastructure, and build data analytics capabilities that rival much larger institutions. It requires discipline, focus, and a willingness to invest in people alongside technology. But it is within reach of any institution whose leadership commits to the effort.
All of the trends examined in this series converge on a single strategic question, can your institution execute coordinated transformation across multiple fronts simultaneously? AI governance connects to cybersecurity. Payment modernization connects to core infrastructure. Customer experience is connected to data quality. Stablecoin readiness connects to regulatory preparedness. No trend exists in isolation, and no technology initiative will deliver its full potential without progress on the others.
My advice is to appoint a transformation leader, whether a Chief Transformation Officer or a senior executive with explicit cross-functional authority who owns the coordination across these interconnected initiatives. Without that single point of accountability, transformation efforts will fragment into competing departmental projects that duplicate investment, create integration gaps, and fail to deliver the enterprise-wide impact that justifies the cost.
The research across all seventeen reports examined in this series converges on a single conclusion: 2026 is the year when the gap between executing institutions and planning institutions becomes measurably visible in market share, customer satisfaction, operational efficiency, and financial performance. I have spent my career helping banks navigate technology transitions, and I have never seen the stakes higher or the timeline shorter. Institutions that invest in governance, people, and organizational capacity, not just technology will lead the industry into its next chapter. The future of banking belongs to leaders who act with both ambition and discipline. The time to act is now.
EY, Reconstructing the Financial Paradigm Through Intelligent Agents (AI Bank white paper)
Deloitte Insights, Tech Trends 2026 (The AI Dilemma chapter)
CSI/CITE Research, 2026 Banking Priorities Executive Report (October 2025 survey)
Experian, Global Insights 2026: 7 Shifts
Capgemini, World CIB Report 2026
Finastra, Financial Services State of the Nation Survey 2026
BAI/ProSight, 2026 Banking Outlook Executive Report
IBM/Ponemon Institute, Cost of a Data Breach Report (cited in CSI report)
OCC, Comptroller Jonathan Gould Remarks on AI Oversight (2025)
OCC Bulletin 2025-26, Model Risk Management: Clarification for Community Banks
Interagency Guidance on Third-Party Relationships: Risk Management (2023)
Interagency Guidance on Model Risk Management (SR 11-7)
GAO-25-107197, Artificial Intelligence: Use and Oversight in Financial Services
Next in this series: What Should Your Institution Do? A Roadmap by Size, Charter, and Ambition
CCG Catalyst Consulting is a banking and fintech advisory firm that has guided over 600 financial institutions through core modernization, digital transformation, AI strategy, payments, contract negotiations, and M&A. Through its Bankers Fintech Council, CCG Catalyst also bridges the gap between banks and fintechs to accelerate responsible innovation. Managing Partner Paul Schaus is a recognized Top 25 Financial Services Consultant, and subject matter expert in banking, bringing experience across every level of the industry to the firm's advisory practice. Learn more at www.ccgcatalyst.com