Journal
APEX 2016 AWARD WINNER FINANCIAL TECHNOLOGY
Available to download at CAPCO.COM/INSTITUTE #44 11.2016 EMPOWERING THE [FINANCIAL] WORLD
Pushing the pace of Financial Technology, together we’ll help our clients solve technology challenges for their business – whether it’s capital markets in Mumbai or community banking in Macon.
We leverage knowledge and insights from our clients around the world:
clients in towns everywhere are becoming 20,000 more efficient, modern and scalable.
transactions processed help solve clients’ 27 billion challenges — big and small.
moved across the globe in a single year $9 trillion empowers our clients’ communities to build storefronts, homes and careers.
hearts and minds have joined forces to 55,000 bring you greater capabilities in even the smallest places.
Empowering the Financial World FISGLOBAL.COM
© 2016 FIS and/or its subsidiaries. All Rights Reserved. The Capco Institute Journal of Financial Transformation
Recipient of the Apex Award for Publication Excellence
Editor Shahin Shojai, Global Head, Capco Institute
Advisory Board Christine Ciriani, Partner, Capco Chris Geldard, Partner, Capco Nick Jackson, Partner, Capco
Editorial Board Franklin Allen, Nippon Life Professor of Finance, University of Pennsylvania Joe Anastasio, Partner, Capco Philippe d’Arvisenet, Adviser and former Group Chief Economist, BNP Paribas Rudi Bogni, former Chief Executive Officer, UBS Private Banking Bruno Bonati, Chairman of the Non-Executive Board, Zuger Kantonalbank Dan Breznitz, Munk Chair of Innovation Studies, University of Toronto Urs Birchler, Professor Emeritus of Banking, University of Zurich Géry Daeninck, former CEO, Robeco Stephen C. Daffron, CEO, Interactive Data Jean Dermine, Professor of Banking and Finance, INSEAD Douglas W. Diamond, Merton H. Miller Distinguished Service Professor of Finance, University of Chicago Elroy Dimson, Emeritus Professor of Finance, London Business School Nicholas Economides, Professor of Economics, New York University Michael Enthoven, Board, NLFI, Former Chief Executive Officer, NIBC Bank N.V. José Luis Escrivá, Director, Independent Revenue Authority, Spain George Feiger, Pro-Vice-Chancellor and Executive Dean, Aston Business School Gregorio de Felice, Head of Research and Chief Economist, Intesa Sanpaolo Allen Ferrell, Greenfield Professor of Securities Law, Harvard Law School Peter Gomber, Full Professor, Chair of e-Finance, Goethe University Frankfurt Wilfried Hauck, Chief Financial Officer, Hanse Merkur International GmbH Pierre Hillion, de Picciotto Professor of Alternative Investments and Shell Professor of Finance, INSEAD Andrei A. Kirilenko, Visiting Professor of Finance, Imperial College Business School Mitchel Lenson, Non-Executive Director, Nationwide Building Society David T. Llewellyn, Professor of Money and Banking, Loughborough University Donald A. Marchand, Professor of Strategy and Information Management, IMD Colin Mayer, Peter Moores Professor of Management Studies, Oxford University Pierpaolo Montana, Chief Risk Officer, Mediobanca Steve Perry, Chief Digital Officer, Visa Europe Derek Sach, Head of Global Restructuring, The Royal Bank of Scotland Roy C. Smith, Kenneth G. Langone Professor of Entrepreneurship and Finance, New York University John Taysom, Visiting Professor of Computer Science, UCL D. Sykes Wilford, W. Frank Hipp Distinguished Chair in Business, The Citadel Financial Technology
Operational Transformational
8 Opinion: Time is Risk: Shortening the U.S. 67 The Rise of the Interconnected Digital Bank Trade Settlement Cycle Ben Jessel John Abel 79 The Emergence of Regtech 2.0: From Know 13 Opinion: Where Do We Go From Here? Your Customer to Know Your Data Preparing for Shortened Settlement Cycles Douglas W. Arner, Jànos Barberis, Beyond T+2 Ross P. Buckley Steven Halliwell, Michael Martinen, Julia 87 U.S. Regulation of FinTech – Recent Simmons Developments and Challenges 17 Opinion: Seeing the Forest for the Trees C. Andrew Gerlach, Rebecca J. Simmons, – The Taming of Big Data Stephen H. Lam Sanjay Sidhwani 97 Strains of Digital Money 20 Development of Distributed Ledger Technology Ignacio Mas and a First Operational Risk Assessment 111 Banking 2025: The Bank of the Future Udo Milkau, Frank Neumann, Jürgen Bott Rainer Lenz 31 Digital Finance: At the Cusp of Revolutionizing 122 Banks Versus FinTech: At Last, it’s Official Portfolio Optimization and Risk Assessment Sinziana Bunea, Benjamin Kogan, David Stolin Systems Blu Putnam, Graham McDannel, Veenit Shah 132 The Un-Level Playing Field for P2P Lending Alistair Milne 39 Safety in Numbers: Toward a New Methodology for Quantifying Cyber Risk 141 Blockchain in a Digital World Sidhartha Dash, Peyman Mestchian Sara Feenan, Thierry Rayna
45 Potential and Limitations of Virtual Advice in 151 FinTech in Developing Countries: Charting Wealth Management New Customer Journeys Teodoro D. Cocca Ross P. Buckley, Sarah Webster
58 Overview of Blockchain Platforms and Big Data Guy R. Vishnia, Gareth W. Peters Dear Reader,
Welcome to issue 44 of the Capco Institute FinTech, Financial Technology, is driving ideas. As a consequence, they can deliv- Journal of Financial Transformation. disruption of the traditional value chain, er transformational technologies and cus- actively shaping financial services and the tomer experiences, in shorter time scales. As we near the end of 2016, the politi- next generation of digital service offerings. It is credible to believe that FinTech will as- cal climate continues to present signifi- It is reducing process cost and timescales sume an even greater role in the year ahead cant challenges for the financial industry. and transforming the customer experience, – the more we understand, challenge, lever- Across Europe, Brexit rumblings continue through ever increasing personalization. age, and integrate financial technologies, with implications for the future location and In short, FinTech is no longer theory, but is the more we can achieve, at greater pace. growth of key European financial services now at the epicenter of disruption. That’s why the theme of this Journal is so hubs. In the United States, the aftermath of timely and important. the Presidential election promises impacts Our Journal offers analysis of two key ar- that could be significant. eas of FinTech impact: T+2 and blockchain. As ever, we hope you enjoy the quality of the Technology will play a central part in pre- expertise and opinion on offer and that you More than ever, our industry needs clear paring for shortened settlement cycles be- will want to continue the debate with us. understanding of how it can prevail and yond T+2 and blockchain is rapidly achiev- profit in the face of change. Increasingly, ing escape velocity through hard evidence With best wishes for the year ahead. it is clear that technology will offer the key of its applicability to capital markets infra- to withstanding change and to driving it. At structure. the intersection of finance and technology is a phenomenon that is reshaping the in- As we enter 2017, a radically changing dustry status quo – FinTech – the theme for finance industry ecosystem is enabling this edition. technology start-ups and long established Lance Levy global players to team and cross-pollinate CEO, Capco
5 Financial Technology: From Enabler to Greatest Challenge
The relationship between the financial ser- long time coming, but it finally arrived a Because of the level of attention on FinTech vices industry and technology has never couple of years ago with the advent of and its application by established players been as straightforward as many seem to FinTech, the all-encompassing term that to transform our industry, this edition of the think. It is true that advances in technology means different things to different peo- Journal is dedicated to financial technolo- have enabled financial institutions to- im ple. FinTech is expected to revolutionize gy. The articles look at how new technolo- prove on many of the services they provide the world of banking and finance. Insofar gies are helping improve the way trades are to clients. This includes online banking or as possible, it will extract businesses that undertaken and settled. They also examine even simple ATMs, as well as process man- should no longer be undertaken by estab- how these developments might result in agement: from instituting risk management lished financial institutions to improve the transformational change across a number models to streamlining trade execution, efficiency of processes and the service of areas within financial services, such as settlement, and clearance. provided to end-users. personal and corporate lending. However, unlike other publications covering this top- However, while a large number of benefits No doubt many are concerned about the ic, our focus is not on the dreams of the Fin- come with each new generation of tech- advent of FinTec, especially since a large Tech newcomers, but on what is genuinely nology, at every cross-section the threat of number of the firms in this field have- al taking place. new entrants has increased. These threats ready had over a decade to learn from the initially peaked during the Internet boom of likes of PayPal and other online payment We hope that you enjoy reading this edition the late 1990s, when Internet companies and peer-to-peer systems. Even worse, of the Journal and that you continue to sup- were expected to disintermediate the es- many are founded by experienced bankers, port us by submitting your best ideas to this tablished players and provide the kinds of not ambitious young technologists. Howev- publication. services, and pricing, that customers really er, as bankers started taking a deeper look wanted. The crash of the Internet stocks at the environment they realized that many On behalf of the Board of Editors, brought about an end to this threat, and in of the technologies developed by the new- fact increased the value of advice. comers, such as blockchain, could be very beneficial to their own institutions. Many The threat posed by newcomers didn’t are experimenting with these new technol- completely disappear, and many of their ogies and even collaborating with the new- protagonists were just waiting for the next comers to improve their own operations opportunity to enter the market. It was a and services. Shahin Shojai
6 Operational
Opinion: Time is Risk: Shortening the U.S. Trade Settlement Cycle
Opinion: Where Do We Go From Here? Preparing for Shortened Settlement Cycles Beyond T+2
Opinion: Seeing the Forest for the Trees - The Taming of Big Data
Development of Distributed Ledger Technology and a First Operational Risk Assessment
Digital Finance: At the Cusp of Revolutionizing Portfolio Optimization and Risk Assessment Systems
Safety in Numbers: Toward a New Methodology for Quantifying Cyber Risk
Potential and Limitations of Virtual Advice in Wealth Management
Overview of Blockchain Platforms and Big Data Opinion
Time is Risk: Shortening the U.S. Trade Settlement Cycle
John Abel – Executive Director, Settlement and Asset Servicing Strategy, Product Management Group, DTCC
If all goes according to plan, on September participants. This initiative demonstrates that securities firms and investors can be 5, 2017, the U.S. financial services industry the industry’s ongoing commitment to con- hit by losses in the intervening period and will achieve “T+2” – that is, reduce the se- tinual improvements in the operation of our become unable to finalize and pay for their curities settlement cycle from the current capital markets. transactions. “trade date plus three days” to “trade date plus two days” – a huge accomplishment To manage the risks related to unsettled expected to yield important benefits almost trades, DTCC imposes a number of risk mit- immediately after implementation. SETTLEMENT CYCLE RISK igants, not the least of which is the collec- tion of margin or clearing fund. The amount Not only will the move to T+2 reduce opera- Investors often cite the axiom “time is mon- of margin or clearing fund required from tional, systemic, and counterparty risk, limit ey” to convey the concept of opportunity each clearing member of DTCC is, in part, the pro-cyclicality that can happen during cost. For those in the business of post-trade a measure of that member’s portfolio of un- times of volatility, lower liquidity needs, processing – especially those of us at The settled trades. The greater the settlement and enable capital to be freed up faster for Depository Trust & Clearing Corporation cycle of those unsettled trades, the more reinvestment, it will also align the U.S. with (DTCC), which processes trillions of dollars trades are contained in the portfolio, which other T+2 settlement markets across the of securities transactions for the U.S. finan- in turn results in a higher amount of margin globe. cial industry each trading day – time is risk. required from that member.
The enormous, multi-year undertaking to In other words, the longer it takes after a Therefore, in the realm of post-trade settle- shorten the U.S. settlement cycle was not trade is executed to exchange funds for ment, not only can we say, “time is risk” but driven by regulatory mandate but rath- securities – that is, to settle a trade be- also “risk is money.” er was led and coordinated by market tween counterparties – the greater the risk
8 The Capco Institute Journal of Financial Transformation Time is Risk: Shortening the U.S. Trade Settlement Cycle
MITIGATING RISK STARTING AT T+1 book-entry securities. Dematerialization relieved pressure on the post-trade system Over the decades, markets have expe- Many people are surprised to learn that but did not erase the risks inherent in the rienced numerous periods of stress and in the 1920s, financial transactions in the multi-day settlement cycle. volatility, and market turmoil will inevitably U.S. were cleared and settled in just one occur in the future. In some cases, share day, even though the processes were com- prices can plummet in a matter of seconds pletely manual. But trades back then were and trading volumes can soar. relatively simple, and volume was compar- PROGRESS: FROM T+5 TO T+3 atively low. It is this history, and inevitability, of market On Monday, October 19, 1987 – known now turbulence that spurred market partici- Fast-forward to the early 1960s, when as “Black Monday” – stock markets around pants in the U.S. several years ago to begin trading volumes and the complexity of the the world crashed. In a cascading domino exploring ways to mitigate counterparty instruments grew exponentially: so much effect, global markets lost an unprecedent- risk. The logical solution, market partici- physical paper was exchanging hands that ed amount of value in a very short time. In pants agreed, was to shorten the current the SEC was forced to close the exchang- the U.S., this volatility resulted in the larg- T+3 settlement cycle, and thus narrow the es every Wednesday and increase the time est one-day percentage decline in the Dow window for post-trade processing. permitted between trade execution and Jones Industrial Average (DJIA). settlement date. Eventually the markets However, turning this seemingly simple moved to a T+5 cycle. In the months following the crash, reg- proposal into operational reality has de- ulators in the U.S. researched possi- manded several years of deliberate and T+5, or “trade date plus five days,” meant ble root causes and worked to overhaul synchronized effort by thousands of parties a trade executed on Monday (trade date) trade-clearing protocols, establish new – broker-dealers, banks, financial services would not be finalized until the following rules, and reduce credit, market, and li- firms, service providers, industry associa- Monday. On that date, payment would be ex- quidity risk. Their consensus solution: to tions, exchanges, DTCC, and regulators. changed and ownership of the asset trans- shorten the trade lifecycle and lower the ferred. For the buyer of a security, payment window of time for settlement. The march toward T+2 began in earnest would be received by the investor’s broker- two years ago, and during that time the age firm no later than five business days In 1995, the SEC adopted Rule 15c6-1 un- industry has made steady progress. DTCC, after the trade was executed; for the seller, der the Securities Exchange Act of 1934, in close collaboration with industry organi- the securities certificate would be delivered which resulted in moving from T+5 to T+3 zations and trade associations such as the to the brokerage firm no later than five busi- settlement for a number of asset classes, Securities Industry and Financial Markets ness days after the transaction. lessening the inventory of unsettled trades Association (SIFMA), representing the sell- at any one time and strengthening the U.S. side, and the Investment Company Institute This extended settlement cycle was need- financial markets to better withstand- un (ICI), for the buy-side, has assembled a ed because transactions processing hadn’t predictable times of stress. number of industry working groups to drive changed much since the 1920s: investors the project forward. would not pay until they had received phys- Today, securities in the U.S. clear and settle ical delivery of their certificates. In fact, over different periods of time through differ- Along the way these groups have kept reg- before electronic record-keeping, virtually ent clearinghouses and depositories that ulators well informed. Because a shorter all securities transactions were conducted are determined by the category of securi- settlement cycle will improve market ef- on paper and Wall Street employed hun- ty, but the majority of U.S. exchange-listed ficiency and safety and enhance -protec dreds of messengers who raced through securities are cleared and settled in three tion for investors, a number of regulators, the streets every afternoon after market business days. This customary three-day including the U.S Securities and Exchange closing, delivering certificates to brokers settlement date applies to most security Commission (SEC), have endorsed the who bought stocks and bonds and return- transactions, including stocks and cor- change. ing with checks to pay for them. porate and municipal bonds. Government securities and stock options settle on the This paperwork crunch spurred the indus- next business day following the trade, and try to begin dematerializing securities – trades in some asset classes, like commer- that is, replacing physical certificates with cial paper (CP), settle on the same day.
9 The Capco Institute Journal of Financial Transformation Time is Risk: Shortening the U.S. Trade Settlement Cycle
THE T+2 PROPOSAL THREE OPTIONS rule sets, and calling on the committee to develop a detailed implementation plan. After the unprecedented market events of Once BCG’s cost-benefit analysis was the 2007-2008 global financial crisis, many complete, the industry began the task of The Steering Committee released its plan in new regulations were enacted with the deciding whether to move to T+1 or T+2 or December. Committee members have used intent of restoring stability and confidence remain at T+3. Many industry participants the document, “T+2 Industry Implementa- and mitigating systemic risk. During this had strong opinions on each of the three tion Playbook,” to help guide them through time, Europe, as part of Target2 for Secu- options, but consensus was essential for a their development process. rities, proposed harmonizing the European decision that would have such wide-rang- settlement cycles at T+2. ing impacts on the financial system.
While the new regulations did a lot to re- After much debate, the industry agreed PLANNING FOR TESTING AND duce risk across the financial services that a move to T+2 was feasible in a rea- IMPLEMENTATION industry, none of them addressed short- sonable amount of time and would produce ening the settlement cycle. As a result, the significant benefits. But the hardest work With the roadmap in place, the industry industry launched its own effort to explore lay ahead: designing and carrying out an turned its attention to testing and imple- the feasibility of such a change. In 2012, implementation plan. mentation. The project’s implementation DTCC commissioned the Boston Consulting timeline includes a robust and rigorous in- Group (BCG) to conduct an independent In collaboration with market participants, dustry-wide testing plan in 2017 to ensure study to analyze the costs, benefits, oppor- DTCC in late 2014 formed an Industry Steer- firms have the adequate resources in place tunities, and challenges of moving to T+1 or ing Committee to provide overall direction to mitigate operational and implementation T+2 by streamlining processes in the U.S. and guidance to the T+2 project. The com- risk. market. mittee comprises representatives from many of the major trade associations and An industry group was convened to archi- BCG presented the following cost-benefit each of the impacted market segments tect how testing would be conducted and analysis and conclusions in October 2012: and is co-chaired by representatives from to start developing detailed test plans. SIFMA and ICI. The Steering Committee in The testing group focused its attention on ■■ The initial cost of moving from T+3 to a turn created a T+2 Industry Working Group industry infrastructures: the test design T+2 settlement cycle in the U.S. would responsible for evaluating the changes that involves the Bats and NASDAQ equity ex- be an estimated U.S.$550 mln. needed to occur to support the move to T+2. changes, the Options Clearing Corporation ■■ Shortening the cycle to T+2 would yield (OCC) and DTCC’s Omgeo, NSCC, and De- recurrent annual savings of approxi- pository Trust Company (DTC) subsidiaries. mately U.S.$195 mln, including a reduc- tion in the clearing fund requirements of DEFINING THE REQUIREMENTS To support the testing effort, DTCC will es- National Securities Clearing Corpora- tablish a new test environment designed to tion (NSCC) and participant capital fund- The Steering Committee quickly moved into allow members to test T+2 and T+3 func- ing costs by an estimated U.S.$25 mln – action, publishing in early 2015 a require- tionality at the same time. Testing via both meaning the initial investment would be ments document that outlined the indus- DTCC environments is scheduled to begin recovered in only 2 ½ to 3 ½ years. try-level changes required to support the in early 2017. ■■ The industry cost of getting to T+1 would move to T+2. The committee also identified be approximately U.S.$1.8 bln. the rules that would need to be modified. DTCC, with the help of the Industry T+2 ■■ Annual industry operational cost sav- Testing Group, also published two docu- ings for T+1 would be between U.S.$175 In a letter to SEC Chair Mary Jo White, ments to help members prepare for test- mln and U.S.$370 mln, depending on the Steering Committee delineated these ing. The first, issued in March 2016, gives the adoption of defined enhancements, changes and formally requested SEC sup- a high-level overview of how testing will and T+1 would reduce the clearing fund port for the T+2 project. Chair White re- be conducted while the second document, requirements of NSCC and participant sponded in the fall of 2015, indicating her released in July, provides more detail on capital funding costs by an estimated support for T+2, asking other impacted the testing facilities, including instructions U.S.$35 mln. regulators and self-regulated organizations for accessing the testing systems and sug- (SROs) to develop plans to update their own gested testing scenarios.
10 The Capco Institute Journal of Financial Transformation Time is Risk: Shortening the U.S. Trade Settlement Cycle
As testing proceeds and the target go- NASDAQ has also issued T+2 rule changes STILL ON THE TO-DO LIST live date approaches, Steering Committee for its members, and just recently, in late members will take on the added role of September 2016, the SEC also took action Although the industry has made tremen- industry “Command Center,” monitoring to propose a rule change to facilitate the dous progress in its move to T+2, some Industry readiness and coordinating imple- move to a two-date settlement cycle. For work remains ahead of implementation. mentation tasks. Ultimately, the Steering those who were still “waiting to see” what Committee will be instrumental in helping would happen next, the proposed rule ■■ Rule changes: the Industry Steering decide if the industry is ready to move to change from the SEC provides the regulato- Committee continues to meet regular- T+2 in September 2017. ry certainty necessary to help the financial ly with all the impacted regulators and services industry achieve its goal of moving SROs. Some have not yet published their to a two-day settlement cycle by Septem- rule changes for the new settlement ber 2017. cycle, but all are committed to making CRITICAL REGULATORY CHANGES their required changes well in advance of September 2017. In 1995, firms succeeded in moving from ■■ Development: with testing set to begin T+5 to T+3 by compressing the post-trade HARMONIZING GLOBAL CYCLES in early 2017, internal development work processing timeframe; this achievement re- should be complete and internally test- quired modest improvements in automation In our increasingly borderless and inte- ed by the end of 2016. Most firms are on and technology. To get to T+2, however, will grated global markets, systems need to be target to participate in testing, having impact the entire trade processing work- constructed with the flexibility to accom- identified their required changes early flow, and require changes to dependent modate trade settlement cycles in other this year. For industry participants that processes and regulations. markets and time zones. Many European are farther behind in their preparations, Union (E.U.) member states moved to T+2 Industry Steering Committee members Both buy-side and sell-side firms will have on October 6, 2014. are conducting robust outreach to en- to adapt to make T+2 work. Some firms sure everyone is aware of T+2 and its have proven to be ready and flexible, with Several markets in the Asia/Pacific region implementation schedule and to ad- a business model that can adjust well to an are already settling in T+2 or T+1; other ma- dress any issues industry members may accelerated transaction processing timeta- jor markets – including Canada, Singapore, be encountering. ble; others, especially those that still rely on Japan and Australia – still settle on the T+3 ■■ Testing: a substantial amount of indus- manual processes, have been challenged cycle, but are looking to reduce it. In fact, try testing material has been produced. to accommodate this shorter settlement the Canadian market has announced its Now industry participants must devote cycle. And while some technology chal- plans to move to T+2 on September 5, 2017, resources to understanding the sug- lenges remain to be addressed, the next coinciding with the U.S market’s move. gested test scenarios and putting in wave of changes required to migrate to T+2 place all the connections required to involve processes, behavior (business and Harmonization decreases complexity and support industry testing. client), and especially regulations. costs for firms with significant cross-bor- der activity. Currently, 65% of the world’s The Municipal Securities Rulemaking 10 largest exchanges based on market Board (MSRB), an industry SRO overseeing capitalization settle on a T+3 cycle; when WHAT TO EXPECT AT broker-dealers that buy, sell, and under- the U.S. moves to T+2, only 13% of those IMPLEMENTATION write municipal securities, was the first exchanges will remain at T+3. The change regulatory body to publish – in December to T+2 will align the U.S. markets with this A lot of thought went into the selection of the 2015 – updated rule changes to facilitate global trend, and will bolster certainty, implementation date, September 5, 2017. The shortening the U.S. settlement cycle to two safety, and soundness in capital markets fifth of September is not typically a high-vol- days. The Financial Industry Regulatory Au- around the world. ume day (no option expirations or index re- thority (FINRA) was the second, releasing balancing) nor a standard corporate action its T+2 rule changes in March 2016. FINRA date (the 1st or 15th of a month), and in 2017, is an independent, not-for-profit organiza- it falls conveniently after the long Labor Day tion authorized by the U.S. Congress to pro- weekend, giving participants an extra day to tect U.S. investors. migrate and test code changes.
11 The Capco Institute Journal of Financial Transformation Time is Risk: Shortening the U.S. Trade Settlement Cycle
The move to T+2 will start to impact certain What is the feasibility of moving the U.S. to corporate action processing long before T+1 or even T+0? Many in the industry cite the T+2 go-live. Dividend ex-dates are gen- Blockchain and other new technologies as erally announced well in advance of pay- the solution to the complexities that have, ment dates and payment dates that happen until now, impeded a shift to T+1 or T+0. after the T+2 implementation date will have However, an important reality is not widely shorter ex-date windows. recognized: current technology may not be the barrier to a shorter settlement cycle. The move to T+2 will also require a “double Much of the core trading, clearing, and set- settlement day” (trades on the last day of tlement processes already support T+1 and T+3 and the first day of T+2 will settle on T+0. Rather, it is many of the business prac- the same day), a situation that is not un- tices in place across the financial services common in the U.S. but still something par- industry that makes a move so difficult. ticipants need to plan for. While the newest technologies will un- doubtedly have a future role in post trade processing, it is unlikely they will be a “sil- NO SIMPLE SOLUTION ver bullet” for a further shortening of the settlement cycle in an industry like finan- The costs and benefits of further shortening cial services, where the diversity of play- the settlement cycle have been a subject of ers, proprietary systems, and cultures is discussion among regulators and industry so wide. Making a future transition to a T+1 participants since the implementation of or T+0 standard settlement cycle would be T+3. At the height of the dot-com boom in challenging and require extensive work by the late 1990s, when technology firms ex- the industry – regardless of the technology plored the potential for almost-instanta- used. In the meantime, the change to T+2 neous transactions, the financial industry will mitigate risk significantly for U.S.- in considered T+1 and even T+0. vestors and is an achievement the industry should be proud of. Recently the industry has even been ex- ploring the use of distributed ledger or blockchain technologies as a tool to fa- cilitate further shortening of the U.S trade settlement cycle.
While DTCC is currently focused on helping move the U.S. financial industry from the T+3 settlement cycle to T+2, we are already two steps beyond that. DTCC’s trade-cap- ture and downstream systems have been for many years aligned to support expe- dited settlement, which occurs on a daily basis for parties that request it. DTCC’s Universal Trade Capture (UTC) service, for example, gives clients the flexibility to sub- mit exchange trades for clearance and set- tlement on either a regular (T+3), shortened (T+0, T+1, T+2), or extended settlement ba- sis across all U.S. markets.
12 Opinion
Where Do We Go From Here? Preparing for Shortened Settlement Cycles Beyond T+2
Steven Halliwell – Partner, Capco Michael Martinen – Managing Principal, Capco Julia Simmons – Senior Consultant, Capco
In 2017, the U.S. and Canada will be break- BACKGROUND ON T+2 various business processes. A subsequent ing their 20-year T+3 settlement cycle in whitepaper published by the ISC in June what will be the greatest reform since In response to the trending global migra- 2015 provided a timeline leading up to Q3- 1995’s migration from T+5 to T+3. The move tion to T+2, DTCC commissioned a study 2017 go-live, complete with milestones and to T+2 settlement is intended to harmonize in 2012 to investigate the cost, benefits, high level requirements for trade process- with global markets already on a T+2 set- and challenges of the U.S. and Canada ing, asset servicing, documentation, and tlement cycle, reduce risk and exposure, migrating from a T+3 settlement cycle to regulatory guidance for the industry play- enhance market liquidity, and increase T+2. Their findings confirmed the benefits ers on target for migration. efficiencies. Both countries will -be mov of increased operational efficiencies and ing approximately 100 products in scope reduced risk (see Table 1). With a reduced settlement window comes across equities, corporate and municipal a number of material changes to the settle- bonds, and unit investment trusts (UIT) Following these findings, an Industry Steer- ment process that may pose technological to a T+2 settlement in the third quarter of ing Committee (ISC) and Industry Working and operational challenges. Firms will need 2017. These products combined account Group (IWG), along with Sub-Working to accelerate a number of activities, such for approximately U.S.$950 billion in daily Groups (SWGs), were set up to determine as liquidity management, FX processing, clearing.1 To prepare for T+2, the Deposi- the feasibility, impacts, and benefits of and margin call calculations while also tory Trust & Clearing Corporation (DTCC) is shortening the settlement cycle to T+2. reducing the time allowed to settle trans- planning to conduct industry testing in Q1- SWGs consisted of over 400 industry ex- actions. This will ultimately impact buy-side 2017 ahead of the proposed go-live date of perts from U.S. financial service organi- September 5, 2017. zations, and were tasked with providing
guidance and oversight in the migration 1 Average daily volumes taken from DTCC’s 2014 by determining the required changes to annual report
13 The Capco Institute Journal of Financial Transformation Where Do We Go From Here? Preparing for Shortened Settlement Cycles Beyond T+2
Increased efficiencies Enhanced liquidity Reduced risk and exposure Global harmonization
Cost savings related to reduced funding Reduced liquidity needs for NSCC and Reduction in operational risk and Alignment of settlement cycles across requirements and more efficient capital Lower CCP margin requirement, reduced operational incidents, and improvement geographies utilization procyclicality, and CCP liquidity need in operational controls. Decline in counterparty risk and exposure • Improvements to STP via new • Satisfying client demand for shortened • Reduction in operational risk and • Settlement cycle consistency across investments in technology settlement cycles (i.e., large purchases, operational incidents, and improvement geographies • Transition to institutional same day tax implications for retail clients) in operational controls trade matching • Decrease in pro-cyclicality during • Decline in buy-side counterparty • Cost savings related to reduced funding periods of high market stress and exposure requirements and more efficient capital volatility • Reduction in broker-to-broker utilization • Reduction in liquidity needs for NSCC counterparty risk and increase in capital availability for • Reduced retail investor risk for a member firms potential broker-dealer failure (pre- • Decline in potential systemic impact of settlement of trade) stressed market events due to lower CCP margin requirement and liquidity, and reduced pro-cyclicality
Table 1 – Benefits of T+2 Migration
and sell-side firms, custodians, utilities, and program to initiate and implement suc- Prepared firms will have already assessed vendor providers. Additionally, the required cessful change both internally and with the level of impact and developed a testing technology changes and their operational trading counterparties to ultimately ensure strategy to reduce operational risk, as well impact may be underestimated by firms, readiness. A key part of this program is a as committed to the suggested timeline to while legacy infrastructure may struggle detailed testing strategy to coordinate and decrease the likelihood of falling behind the to meet the revised needs and timeframes. execute testing with internal systems, cus- scheduled milestones ahead of the imple- Firms’ bandwidth for financial and opera- tomers, and industry infrastructures and mentation date. tional resources may become strained in utilities. the face of ongoing parallel initiatives re- Market participants should aim to complete lated to capital planning and stress testing Significant effort and investment will be internal builds by Q3-2016 and internal test- enhancements, data quality, data lineage, required from the various member firms to ing by Q1-2017. Industry-wide testing with and associated analytics and reporting, as comply with the Q3-2017 implementation DTCC for market participants will com- well as new mandates or emphasis related deadline, and maintaining a forward-look- mence in early 2017 to meet the go-live date to consumer protection and cyber security. ing perspective on shortened settlement cy- of September 5, 2017. cles will expedite a firm’s competitiveness In order to be successful in the T+2 mi- in the race toward straight-through-pro- With the current industry-wide uncertainty gration and its planned milestones by Q3- cessing (STP) and market efficiency. around the specific requirements for readi- 2017, all impacted firms will ideally have ness, many market participants are placing performed an impact assessment of their added emphasis on the testing phase. To current processes vis-à-vis the proposed adequately prepare for this increased fo- processes in order to identify the areas STEPS TO IMPLEMENTATION DATE – cus on internal and industry-facing testing, that will require investments, and will have Q3-2017 it is critical for each organization to pro- developed size and scope estimates for the duce a comprehensive testing strategy and effort required to support T+2. In parallel, The transformation to a shortened settle- determine an effective approach for testing firms should be building out an appropriate ment cycle will have a significant impact on facilitation and execution. change management and communication firms across all stages of the trade lifecycle.
14 The Capco Institute Journal of Financial Transformation Where Do We Go From Here? Preparing for Shortened Settlement Cycles Beyond T+2
“WHERE DO WE GO FROM HERE? requirements and more efficient capital industry adoption of this technology will CHAOS OR COMMUNITY?” utilization. be challenging given the size of the trad- IMPLEMENTATION AND BEYOND… ing and clearing market. From an individual The decision to move to a T+2 as opposed perspective, the way that impacted firms Borrowing the title of the last written work to an even shorter settlement cycle was establish program management to coordi- penned by Nobel Peace Prize Laureate and made prior to the advent of the advanced nate internally and with the DTCC in indus- social justice advocate Martin Luther King distributed ledger insight we now have to- try testing will establish a path to success Jr., firms looking ahead may ask whether day. This is a concept now being seriously in managing future changes to even shorter they should prepare for an even shorter addressed in the markets. DTCC’s commit- settlement cycles. settlement cycle as a path to a truly ideal ment to use Repurchase Agreements as state. The concept of STP, following the a proof of concept and the exploration of Some of the required changes needed to move to T+2 at the end of 2017, is a realistic Australian and Japanese stock exchanges accommodate same-day settlement that possibility. in developing blockchain operational archi- will challenge institutions may be more tecture demonstrate how current distribut- achievable as part of the “intermediary” In 2013, DTCC commissioned an analysis on ed ledger concepts are being applied with move to T+2. As a first step, firms can con- the potential for shortening the settlement the intent of improving operational efficien- duct a thorough analysis on the process cycle. As part of this analysis, they part- cies in the markets. behavior supporting T+1 settlement as it nered with SIFMA (Securities Industry & Fi- already exists today for certain products nancial Markets Association) to determine Much of the decision to move to a short- (such as options, a selection of mutual the feasibility of both T+2 and T+1. Based on ened settlement cycle was motivated by funds, and some fixed income products). the cost/benefit analysis, T+1 was deemed the intent of increasing processing speeds Conversely, developing shortened settle- impractical. At U.S.$550 mln, the investment while reducing settlement risk, and the ment cycle procedures using a prototype necessary for T+2 was estimated to be a concept of a distributed ledger accom- of asset classes that have low cleared vol- third of the cost of implementing changes plishes this while freeing up even more ume may be a good starting point as there to accommodate a shorter settlement of counterparty capital that would normally is little cleared infrastructure in place and, T+1 (U.S.$1.8 bln).2 be reserved for trade settlement. Providing therefore, more opportunities to create a a clear picture of counterparty assets and foundation from scratch. For these prod- T+1 is dependent on robust real time pro- liabilities via a shared network free from uct types (or any products) to move closer cessing and STP to be successful, but cur- extraneous human processes may lead the to T+0, effort must be especially focused rent institutional dependencies on batch path to a safer market less dependent on around the FX market and stock loan (to fa- processing and legacy systems pose an centralized clearing agents burdened with cilitate automation in securities recall and obstacle. In addition, due to time zone risk and responsibilities that can delay the processing of corporate actions), real time differences, foreign investors (especial- settlement process, while also leading the netting of positions, and faster guarantees ly those in the Asia Pacific region) would way to more of an agency model that the from clearing houses. have unreasonably limited time to remedi- Dodd Frank regulations are promoting. ate any issues prior to the settlement date, Once T+2 is implemented, these changes posing a radical disruption to the market. However, for the industry to convert to STP will be considered small milestones that set The burden of these obstacles cannot be and transparent markets through a cen- the stage for an additional shortening of the underestimated in considering a firm’s path tralized distributed ledger, mass market settlement cycle in sync with the advances to a shortened settlement cycle. Howev- acceptance and participation is key. Digi- towards STP. This will also align with the er, the steps firms are taking to migrate tally transforming financial instruments into generational shift in management, where to a T+2 settlement cycle will set them up computer programs known as “smart con- the millennial generation, accustomed to for success towards even more efficient tracts” with encrypted contract terms is a fast technology advances, will have more settlement processes. New investments key component of automated settlement. influence on decisions and controls. in technology will help firms improve - op While this would reduce costs by centraliz- erational efficiencies toward STP. Earlier ing or even removing operational process- matching will provide the advantage of es, it would also require industry agree- identifying and reconciling problem trades ment on acceptable standards and how 2 http://www.dtcc.com/~/media/Files/Downloads/ earlier on in the settlement process. This to sync these standard contracts securely WhitePapers/CBA_BCG_Shortening_the_ will ultimately result in reduced funding across industry infrastructure. Successful Settlement_Cycle_October2012.pdf
15 The Capco Institute Journal of Financial Transformation Where Do We Go From Here? Preparing for Shortened Settlement Cycles Beyond T+2
CONCLUSION
As industry participants strive towards the requirements for T+2 readiness and beyond, the need to strategically assess current and future plans for settlement efficiently is paramount. Increased- pres sure on operating costs and the recent commoditization of core functions within banking operations has only accelerated the discussion topic “Where do we go from here?” Mindful preparation for shortened settlement that aligns with the industry inclination toward STP can distinguish an impacted institution from competitors, and set it up for success beyond the T+2 imple- mentation timeline.
16 Opinion
Seeing the Forest for the Trees – The Taming of Big Data
Sanjay Sidhwani – SVP - Data Analytics, Synchrony Financial
The quandary of big data in recent years is issuer perspective, it is also data we gather with agile methodology. We have found similar to looking at a rainforest. There is so to provide value to a retailer. As such, our that programs that use agile methodology much of it, it is not an issue of seeing where data tools must be top notch – both scal- (created using the partnership of IT and and what it is, it is the fear of not seeing able and flexible, in order to provide greater analytics) can have a large impact on busi- the forest for the trees. A rainforest has so insights. And with the accumulation of data ness success, as described in more detail many important ecosystems and tiny ele- comes the responsibility of safeguarding below. ments that may be hugely important, simi- the storage, access, and transfer of data, lar to big data. Many businesses have the and ensuring the proper usage of key data challenge of seeing the thousands of types elements. The security and protection of of data and identifying which elements private customer data also needs to be a DATA VISUALIZATION – of the data are important, and what to do top priority. TRANSLATING DATA INTO about those elements. ACTIONABLE INSIGHTS In our experience, one strategy that is At Synchrony Financial, we are a consumer very helpful in identifying the important Data visualization can be a powerful tool to finance company with a deep heritage in elements of the data available is data vi- quickly observe trends and take action on the retail sector. As such, we have a very sualization. Data visualization tools can the data observed. These tools make it eas- large quantity of data, from several sourc- be crucial in identifying important factors, ier for leaders across all disciplines to ac- es, which could include stock keeping unit trends, and outliers in data. After these cess key data without having to dig through (SKU) data on purchase transactions, mar- important factors are uncovered, the ques- thousands of data points and charts. It keting touchpoints, channel interactions, tion becomes how to create programs that is more helpful to let the data tell a story payment history, etc. Our data is not only address the important items that can posi- through visual formats. These can include credit card data normally gathered from an tively impact a business. This can be done heat maps, infographics, and a combination
17 The Capco Institute Journal of Financial Transformation Seeing the Forest for the Trees - The Taming of Big Data
of pictures and graphs. Four types of tools THE AGILE PROCESS – USING THE and the resulting data are recorded in one are especially helpful: PARTNERSHIP OF IT AND ANALYTICS of its operational systems. Traditionally, TO IMPACT CHANGE analytics processes have been separated 1. Executive dashboards: by translating from operational systems, because these data into a visual format, dashboards Creating a partnership between the ana- processes demand considerable resourc- help users more clearly identify busi- lytics and IT teams is extremely important. es that can slow down the system and im- ness insights, trends, and performance Working together with a common vision pact business. Consequently, businesses gaps, and to more easily share the re- and goal, the two departments can use the move data to a data warehouse platform so sults across the company. Once the agile process to effectively produce work- analysts can study the information without dashboards are created, business lead- able solutions quickly and efficiently. By impacting the operational system. These ers and analysts know what to look for simplifying and speeding up the process of commercial tools can be difficult to use and and can easily interpret the data pre- analyzing big data, companies are able to result in long cycle times. sented. improve their marketing efforts and build 2. Pictures and graphs: using pictures and better customer relationships. The agile approach can solve these issues. graphs to portray data can sometimes With an agile process, the IT and analytics be the differentiating factor in observ- Let us take a look at the traditional data teams can work together toward a common ing an insight that could otherwise go model. When a customer engages with a business goal from the start. The analytics unnoticed. Paying attention to outliers business, whether to make a purchase, pay team works with IT to develop insights from and unique patterns can help highlight a bill, or make an inquiry, the interaction big data and then use the data in a timely potential opportunities and areas of im- provement. 3. Sensitivity modeling: data visualization software can be used as an interactive
tool for running sensitivity models on Analyst a particular variable. For instance, the Customer Channel Analytics DWs Authoritative impact of price changes on profitabili- integration Analytic tools Data warehouse sources ty, or the impact of weather changes Mail, call center, (weeks) (next day) Operational POS (days) systems on sales, can be assessed. Once these (same day) models are put into place, the risk of un- certainty can be reduced. 4. Heat maps: another example of an ef- Traditional analytics • Long cycle times fective way to display data is heat map- • Data moves to analytics ping. Individual values are represented • Line of business data... no variety in a tabular or graphical format in var- • Commercial tools ious colors to denote a range of per- formance from low to high. This visual representation allows users to hone in on where performance is strong, and where opportunities exist. Analyst Customer For example: Real-time integration R, PythonTM, with call center, “e”, Data visualization tools are valuable to help JavaTM, SAS and mobile Legacy organizations simplify large amounts of in- channels formation into insights through a visual for- mat. Letting the numbers tell the story often Agile analytics results in bringing insights to life and com- Data lake • Short cycle (hours/minutes) • Analyze the data where it resides municating them across the organization. • Recognize new data varieties And now that they see the data and under- (social media and mobile) stand its implications, the organization can Operational systems New data varieties • Open source tools impact change by using the agile process, as described below.
18 The Capco Institute Journal of Financial Transformation Seeing the Forest for the Trees - The Taming of Big Data
manner – yielding improved customer per- sonalization and more impactful marketing programs.
The agile process also allows for:
1. Minimization of data movement: the goal of the process is to engage the customer at the moment of decision. To react with that kind of speed, you need a platform that minimizes the number of times you move the data. A data lake provides a scalable platform where data is ingested from the operational system very quickly, without moving to the analytics environment. 2. Availability of the tools: open source tools are simpler and more affordable. Analysts run the data in real time and leverage tools in parallel to perform analysis. 3. Shorter cycle times: performing ana- lytics at scale requires a platform that is integrated with customer channels. This moves analytics closer to the cus- tomer, resulting in shorter cycle times and greater meaningful engagement.
Once an agile infrastructure is in place, there are essential steps for helping to har- ness the power of that data. First, make the implication of the data clear – not just to the analysts, but also to key stakeholders. A data platform can be used for both “push” and “pull” reporting on key business met- rics so performance of your business can be tracked.
Data in today’s world is ubiquitous. Some is clear and definable – like a specific tree in a forest. Others are more unstructured and free flowing – the eco-system and co-rela- tionships, for instance. In order to interpret the data and have an impact, data visual- ization can be used to see specific issues or trends, and the agile process can be used to provide the solutions and immedia- cy required to provide the solutions.
19 Operational
Development of Distributed Ledger Technology and a First Operational Risk Assessment1
Udo Milkau – Chief Digital Officer - Transaction Banking, DZ BANK AG, Frankfurt; and Goethe University, Frankfurt Frank Neumann – DZ BANK AG, Frankfurt Jürgen Bott – Professor of Business Administration, University of Applied Sciences in Kaiserslautern/Zweibrücken
Abstract inherent probability of errors and software aging) on one side and Distributed ledger technology (DLT) is a new approach, first imple- the static/non-changeable, approach of blockchain on the other. mented by Bitcoin, the basic features of which are the elimination of Static/non-changeable contracts can be used for short-term “one- any intermediaries in peer-to-peer (financial) transactions and the time” interactions, but any long-term relationship has to be governed replacement of “trust” by a game theoretical approach of consen- by common standards, legislative frameworks, and operational risk sus among all participants who agree “to play a repeated game.” management – together providing the possibility for adoption to real The promises of DLT are more efficiency (by removal of redundant world changes. These findings are in line with the recent develop- intermediaries), more resilience against attacks or manipulation ment of DLT to distributed “private” ledgers and to central share ser- (through multiple replicas and chaining of transactions with mutual vices utilities for, for example, post-trading processing for a closed references), and more security for asset owners (by making an orig- group of participants with pre-identified roles and responsibilities. inal transaction technically unalterable/immutable). Nevertheless, the so-called “TheDAO hack” in June 2016 made clear that a com- plex DLT-based software system is vulnerable against manipulation 1 We would like to thank the following for their comments on the previous drafts of this if one has in-depth understanding of the code and its errors. In this article: Helmut Siekmann (Goethe University Frankfurt, IMFS), Christian Janze (Goethe University Frankfurt, E-FinanceLab), Ritva Tikkanen (Justus Liebig University Gießen), paper, a first risk assessment of the new technology of “smart con- Roman Beck (IT University of Copenhagen), Thomas Schönfeld (PwC, Frankfurt), and tracts” is made and the question about “code is law” is discussed. especially thank Wolfgang König (Goethe University Frankfurt, Managing Director While the basic concept of Bitcoin does not raise new types of op- House of Finance) for the organization of the E-FinanceLab Fall Conference 2016 on “Blockchain: technology, legal and regulation, and application in the finance realm.” erational risk, the current technology of “smart contracts” has a The views expressed in this article are those of the authors and are in no way fundamental flaw due to the combination of complex software (with representative of the views of their employers.
20 The Capco Institute Journal of Financial Transformation Development of Distributed Ledger Technology and a First Operational Risk Assessment
INTRODUCTION: FROM VULNERABILITIES OF THE BITCOIN aligned with the current regulatory initiatives and do not depend per ECOSYSTEM TO THE “THEDAO HACK” se on new technologies. However, the so-called “TheDAO hack” exhibited unique characteristics, since someone was able to ex- DLT, also known as “blockchain,” has been capturing interest since ploit vulnerabilities in the underlying blockchain technology and the the publication of Ali et al.’s (2014) article in the Bank of England “smart contract” extension. TheDAO is a so called “decentralized Quarterly Bulletin. Even though we are still coming to grips with this autonomous organization,” which is an organization with no people new technology, reading through the many analyses of DLT it is not and based only on codes representing contractual relationships. In clear whether it is a solution looking for a problem or whether many June 2016, an “attacker” was able to take the equivalent of more genuinely believe that it will solve all problems of the previous de- than U.S.$40 mln from TheDAO. The fact that it happened within the cades. In reality, while DLT is an innovative jigsaw puzzle of existing rather complex technical system raises many questions, such as: pieces and can be a catalyst for new applications and solutions, as was it a “software error” or a (intended, but hidden) feature of the with all new technologies one has to assess its operational risk ram- written code? Was it a “game” in a closed environment with peculiar ifications – especially if used for critical financial infrastructures. rules or some criminal action against applicable laws?
One frequently used narrative suggests that “blockchain” provides a In this paper, the first risk assessment of DLT and “smart contracts” cryptographically secured, immutable, and resilient registry of trans- is presented. It is aligned with the framework of Aven (2011), with actions concerning rights of ownership. In other words, it would be the main focus being (i) the assumptions and limitations of the tech- a real “golden source” without any need of regulated and/or trusted nology, (ii) its usability and reliability, and (iii) our understanding and intermediaries. However, a number of incidents with Bitcoin, such as communications about it. insolvency of the Bitcoin exchange Mt. Gox, criminal Ponzi schemes such as the pyramid scheme “MMM,” or the fraud after a “security As DLT – and even more so smart contracts – is a rather new technol- breach” at the Bitcoin exchange Bitfinex [Baldwin and Poon (2016)] ogy, this paper will cover it in a step-by-step format. This approach make one question the validity of such claims. The Bitfinex case is includes an analysis of the fundamental limitations of DLT and pro- quite informative since it notified clients that it will “share” the loss- vides a risk assessment of the extension to smart contracts. It also es across its entire user community irrespective of whether a client scrutinizes the sociological aspects of new technology, where an was actually affected and where and in which currency their funds entire community wants to believe in the benefit of a new technology were [Finextra (2016)]. without considering its theoretical limitations and without applying the common standards of operational risk management. Those rather well known types of risks in the context of virtual cur- rencies have already been widely covered elsewhere [EBA (2014)] and will not be covered in this article. Our decision to exclude them was also related to the fact that (i) they all followed well-known mo- THE ROAD TO THE BLOCKCHAIN – POSSIBILITIES AND dus operandi and (ii) they happened outside of Bitcoin blockchain IMPOSSIBILITIES IN A NUTSHELL and in the “real” world of fiat money. Nevertheless, it should be mentioned that the European Commission published a number of As DLT deals, by definition, with transactions concerning rights of proposals for amendments to the current directive on fighting money ownership (something “ledgers” are designed for), its foundation laundering, financial crime, and terrorist financing as a result (July 5, is a distributed network of participants that want to execute trans- 2016). These included proposals to bring virtual currency custodian actions, i.e., transfer of rights of ownership in a network of linked wallet providers (CWPs) and virtual currency exchange platforms computer systems (“nodes”). Of course, the classic example is the (VCEPs) within the scope of the directive as obliged entities. The Eu- Internet, in which the end-users never know which other nodes for- ropean Banking Authority (EBA) commented on that proposal and ward their messages, which routes are taken, and which nodes dy- according to EBA’s point of view: “There is a risk that consumers and namically join or exit the network. business partners of VCEPs and CWPs may not be aware that the im- position of requirements on VCEPs and CWPs for AML/CFT purposes For more than 40 years, distributed computer systems have been does not include or imply consumer protection or prudential safe- studied, and the possibilities and impossibilities of the technology guards, including capital requirements, calculation of own funds, assessed [Attiya and Ellen (2014)]. Those fundamental impossibilities safeguarding requirements, separation of client accounts, and the and conditional possibilities of distributed computing have to be the extensive authorization liability” [EBA (2016)]. first step in risk assessment, as they provide the theoretical foun- dation and, consequently, the fundamental framework, in which the All the aforementioned issues concerning asset protection are technology works.
21 The Capco Institute Journal of Financial Transformation Development of Distributed Ledger Technology and a First Operational Risk Assessment
■■ The “two generals problem” (or “byzantine generals problem” [Akkoyunlu et al. (1975)]): the impossibility of synchronizing two or more participants via a network of unknown (i.e., trustless) = Electronic cash nodes in a finite time. It has to be remarked that this concerns Bitcoin the synchronization in general and not the exchange of secure, Blockchain = Game theory instead of encrypted messages. with proof-of- technical protocols work as consensus ■■ “Byzantine fault tolerance” [Lamport et al. (1982)]: possibility of resilience of a network of known nodes against failure or manip- = “Time-stamped“, i.e., DLT one-dim. recording of ulation based on a voting consensus with a pre-defined fall back (aka Blockchain) transactions (write- option in case of timeout (typically handed over to an external once/read-multiple*) third-party, such as human pilots in case the triple autopilot sys- Distributed databases = resilience by tem cannot “agree”). (with automated replication) replication (BFT) ■■ Impossibility of distributed consensus [Fischer et al. (1985)]: im- possibility of a consensus in a distributed network with the con- = store what you want + ditions that (i) one process/node may fail and (ii) the consensus Databases (DBMS) stored procedures should be reached in finite time. ■■ Proof of work concept [Dwork and Naor (1992)]: basis for a proba- Comment: The idea of “immutable” data is not linked to hash-algorithms. The bilistic approach to select a neutral referee in a network of ex-an- concept of “write once/read multiple” (WORM) is rather common for data te trustless nodes. As with any voting in an open, anonymous, storage devices, such as CD-R and DVD-R, “secure digital” non-volatile memory computer network for a quorum consensus can be compromised card, WORM hard disk drives with prevention of rewrite at physical disk level, and, recently, polymer/semiconductor write-once read-many-times memory by a single faulty entity simulating multiple identities [“Sybil At- devices. tack,” see Douceur (2002)]. Proof of work provides a “game theo- retical” solution for consensus under some conditions. Figure 1 – A schematic approach to distinguish DLT and established database management systems ■■ Introduction of the concept of “software aging” [Parnas (1994)]: understanding that software systems always have errors, which result from the interaction of the different layers, but especially that software can “get old” and will develop “unexpected” errors illustration of an approach to distinguish DLT from general database over time due to the complexity of the technology and the inter- management systems). action of multiple layers. ■■ CAP-theorem [Brewer (2000 and 2012)]: impossibility in any net- worked shared-data system that one can achieve all three desir- able properties: consistency, availability, and partition tolerance THE CONCEPT OF BITCOIN – GAME THEORY AND EVENTUAL (= fault tolerance, if part of the system fails). CONSISTENCY ■■ Development of “secure hash algorithm 2” [SHA-2 (2001)]: SHA- 2 – as an example of hash functions – is a set of injective hash The quest for “electronic cash” had the goal of creating a substitute “one-way” functions designed by the National Security Agency for real cash in an open distributed computer network of equal peers (NSA) and published by the U.S. National Institute of Standards without any intermediaries that could provide “trust.” and Technology (NIST) for the cryptographic protection of sensi- tive information against manipulation, especially when stored in In 2008, Satoshi Nakamoto (2008; a pseudonym) published a paper or transmitted via open networks. entitled “Bitcoin: a peer-to-peer electronic cash system,” [see, ■■ Double spending problem [and its prevention; see Osipkov et al. for example, Ali et al. (2014)]. It is well known that this first imple- (2007) and Hoepman (2008)]: possibilities to prevent so called mentation of DLT is inefficient, expensive, rather slow, and without “double spending” as a failure mode of electronic cash schemes, sufficient capacity as compared with established payment system as any electronic message, i.e., a bit string of 0’s and 1’s, can be networks. copied and sent to manifold different beneficiaries in a network. Nevertheless, Bitcoin was a solution to the question above – but With this set of possibilities and impossibilities in distributed com- with clear assumptions. The innovation of Bitcoin was thinking out- puting, the scene was set at the end of the last decade for practi- of-the-box and, consequently, a game theoretical solution with a cal solutions to solve the challenge of “electronic cash” in distrib- “proof-of-work” to select one neutral referee instead of “democrat- uted computer systems under certain limitations (see Figure 1 for ic” voting protocols [Decker and Wattenhofer (2013)]. The game had
22 The Capco Institute Journal of Financial Transformation Development of Distributed Ledger Technology and a First Operational Risk Assessment
a set number of parameters that had to be accepted by all. First, Synopsis I all “players” have to pledge their stakes (investment in computer Independent of the inefficiency of Bitcoin, the probabilistic approach resources = cost for hardware, energy consumption, etc.). Second, is no source of operational risk. Of course, eventual consistency im- the “proof-of-work” is the virtual equivalent to tossing the dice (to plies a typical credit risk exposure for the beneficiary, which is rather decide who may start a game). Third, the winner will be the referee common in payments. Nevertheless, insight into the game theoretical for the next block with a fixed sequence of new transactions and approach of the concept, the nature of a blockchain as a repeated is rewarded with a combination of newly created Bitcoins (i.e., sei- game, and careful consideration of the assumptions (e.g., of an egali- gniorage) and transaction fees (paid by the users). tarian – non-hierarchical – peer-to-peer network) are required.
With this set of parameters, Bitcoin is a repeated game and a closed- loop system, in which (i) transactions and (ii) incentives for the win- ners are closely linked together by the same “electronic cash,” i.e., THE REALITY OF THE BITCOIN ECOSYSTEM – TOWARDS Bitcoins. Any transfer of the concept of Bitcoin to other rights of CENTRALIZATION ownership – e.g., property – raises the question of how to include an incentive in the model without the need of external intermediaries. The actual Bitcoin ecosystem has diverged from the original con- cept. Firstly, typical “users” of Bitcoin are not keen to operate a part This game theoretical approach comes with the principle disadvan- of a payment infrastructure, but want to make Bitcoin payments in tage of the probability of two referees – at different nodes in an ex- a simple and convenient way. Those customers use Bitcoin wallet tended network with latency – creating different new blocks with providers and have to rely on them as “custodians” for their funds in different transactions in parallel at the same time (“fork”). Inthe the bitcoin ecosystem [Leinonen (2016)]. Secondly, the costly proof- Bitcoin blockchain, such forks happen with approximately 1.7% of of-work (with huge electrical power consumption and large invest- all new blocks [Decker and Wattenhofer (2013)]. This – temporary – ments in dedicated hardware) represents a negative externality with inconsistency will be automatically restored later by the blockchain socially inefficient excess of resources. algorithm, but this “interregnum” can last up to one hour, as record- ed in mid-2015. When a system trades “social” trust for an “algo- This paves the way for a centralization of the Bitcoin ecosystems rithmic” substitution, one has to recap Niklas Luhmann’s statement with an onion-like structure between a core of dedicated nodes that “trust is a mechanism to reduce complexity” [Luhmann (1968)]. (mining pools) and typical users. The current Bitcoin ecosystem The substitution comes with a price tag (inefficiency) and downsides is starting to resemble informal money transfer systems, typically (limited finality). “Hawala” systems [Passas (2006)], which work with a clearing of information messages between agents in different countries (ha- While The Economist [2015] called the blockchain technology “The waladar), typically based on some kinsmanship. trust machine,” the implementation of Bitcoin only has an “eventual consistency” [Decker and Wattenhofer (2013)]. Eventual consisten- In addition, the centralization of computing resources within so-called cy is neither new in distributed computing [Lindsay et al. (1980) and mining pools opens the door to the possibility of a “51% attack,” i.e., Vogels (2009)] nor unknown in banking [Wattenhofer (2016)]. Imagine one attacker with more than 50% of the computational “hashing” an ATM in offline mode, i.e., the ATM is able to perform transactions power in the ecosystem could calculate proof-of-work solutions in but is temporarily not connected with the bank’s host. A customer sequence faster than the rest of the network and rewrite the transac- can make a withdrawal with their debit card using an offline trans- tion history [Decker and Wattenhoffer (2013)]. One mining pool, Ghash. action limit assigned to the card. A transaction could be completed io, reached 50% of the bitcoin network’s hashing power in June 2014 even if there are insufficient funds on the account, as long as the [Cawrey (2014)]. The centralization can also be found in other block- offline transaction limit is sufficient for the stand-alone withdrawal. chain systems, e.g., in Ethereum, with one mining entity (“dwarfpool”) At a later point in time, when the ATM is back in the network again, a dominating the system with circa 48% of the resources in March 2016 reconciliation process has to align the bank’s ledger. [Dienelt (2016)]. For a deeper discussion, the reader is referred to the literature [Sirer and Eyal (2013), Eyal (2014), Hearn (2016)]. A second example is the SEPA Direct Debit Core Scheme (SDD), which grants payers a “no-questions-asked” refund right within The onion-like ecosystem is antagonistic to the original egalitarian eight weeks. A merchant debiting a payer’s account by a SDD trans- peer-to-peer concept. As Joichi “Joi” Ito wrote in a blog [Ito (2015)]: action has to wait for those eight weeks to reach finality or, respec- “there is currently centralization in the form of mining pools and core tively, has to calculate and manage the probability of a client’s recall development, [but] the protocol is fundamentally designed to need (i.e., credit risk). decentralization to function at all.”
23 The Capco Institute Journal of Financial Transformation Development of Distributed Ledger Technology and a First Operational Risk Assessment
It’s worth noting that there is a current trend to centralized systems THE EXTENSION OF THE DLT – SMART CONTRACTS AND – especially in payments (see Figure 2). Different from the traditional CODE IS LAW model of the payments industry with interoperable banks and central banks, the initial steps were towards (i) centralized business plat- The Bitcoin blockchain is a flat, sequential, one-dimensional data- forms, such as PayPal, which internalize all accounts (buyers’ and base for the transfers of rights of ownership: Alice does not send sellers’ accounts) and (ii) the Bitcoin approach of a fully decentral- Bitcoins to Bob’s account, but broadcasts a message that a certain ized electronic cash system. But the more recent developments are amount of Bitcoins can be claimed by anybody who has Bob’s cre- even closer to the concept of central “utilities,” be they provided dentials (i.e., his cryptographic key). If someone is able to access by a central bank (central bank digital currency) [Broadbent (2016), Bob’s keys, then this person has the access to Bob’s assets. Howev- Barrdear and Kumhof (2016) and Reuters (2016)], Bitcoin service er, the Bitcoin blockchain has a rudimentary status concept and dis- providers, distributed “private” ledgers (see below), or even bank- tinguishes “transactions” between unspent (available to be claimed) owned initiatives, such as the SWIFT global payments innovation and spent (already claimed). initiative [SWIFT (2016)]. The so called “smart contracts” are an extension to this recordkeep- Synopsis II ing of ownership. In the current discussion, smart contracts are often The derivation from the original concept and the development of described as self-executing/self-enforceable software representing an internal hierarchical structure centralization (instead of a peer- contractual relations, which are stored immutably on the blockchain to-peer network) lead to the development of typical single points of and, consequently, do not require any third party to create trust. In failure. These vulnerabilities raise fundamental questions about the principle, a smart contract is a terminus technicus for a program liabilities of such centralized structures – especially if not regulated code that is executed in a dedicated blockchain environment, such as in the case of Bitcoin – to open issues concerning the risk of a as Ethereum [Dienelt (2016)]. A smart contract does not do anything “51% attacks.” As long as these questions are unanswered, Bitcoin by itself, but has to be triggered by an external transaction and can will be in legal limbo but, nonetheless, has its niche as the current in return create new transactions which interact with other code on usage shows. Nevertheless, the trend to centralization, as opposed the blockchain [Greenspan (2016)]. Consequently, smart contracts to regulated interoperable intermediaries, makes one wonder about are similar to stored procedures in traditional database manage- where the responsibility for an end-to-end operational risk manage- ment systems. Nevertheless, every computer program is simply a ment sits and who is liable in case of errors? sequence of zeros and ones that performs calculations and store results on a tape or “on a chain.” This fundamental concept was
Code of the “smart contract”
Central ban + di ital currency Interaction with other code (i.e. other smart contracts)* + Compiler and virtual machine (needed to execute the code) Central Actual Bitcoin + business platforms ecosystem Potentially supporting services such as storage and messaging + Software of the blockchain itself