Digital Finance, Analytics and the Future of Markets

Introduction

Financial markets are being reshaped by software, data, communications networks and programmable financial infrastructure. Trading that once depended on physical exchanges and telephone instructions is now largely electronic. Payments increasingly occur through mobile applications and digital wallets. Banks distribute products through application programming interfaces (APIs), while technology firms embed credit, insurance and investment services within non-financial platforms. At the same time, artificial intelligence (AI), blockchain networks, tokenisation and digital currencies are changing how financial claims are created, exchanged and monitored.

These developments offer lower transaction costs, faster settlement, wider access and potentially better risk management. They also create new forms of concentration, cyber risk, privacy loss, algorithmic discrimination, operational dependence and financial instability. Digital finance should therefore be understood not simply as the replacement of paper with computers, but as a transformation of market structure, institutional boundaries and methods of decision-making.

This chapter evaluates the principal technologies and business models shaping contemporary finance. It also considers how financial data and AI can be used responsibly for forecasting, risk management and fraud detection, and why explainability, privacy, cybersecurity, sustainability and regulatory adaptability are essential to sound financial practice.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain the structure and economic significance of electronic trading and digital payments.
2. Compare fintech, open banking, embedded finance, blockchain and tokenisation.
3. Distinguish cryptocurrencies, stablecoins and central bank digital currencies.
4. Describe the use of analytics and AI in forecasting, credit, market risk and fraud detection.
5. Evaluate robo-advice and algorithmic decision-making using suitability, fairness and governance principles.
6. Analyse the risks associated with privacy, cyberattacks, third-party technology providers and operational concentration.
7. Assess sustainability and regulatory issues arising from digital financial innovation.

1. The Digital Transformation of Financial Markets

A financial market performs several fundamental functions: it mobilises savings, allocates capital, provides liquidity, discovers prices, transfers risk and enables payments. Digital technologies affect each function.

Electronic platforms reduce the need for physical intermediaries and allow orders to be matched automatically. Data systems permit lenders and insurers to assess customers using information that may be more frequent and extensive than traditional financial statements. Distributed ledgers can record ownership without a single central database, although many practical systems remain partly centralised. APIs allow customers to authorise data sharing or initiate transactions across institutions.

A useful distinction is between digitisation, digitalisation and digital transformation. Digitisation converts analogue information into digital form, such as scanning a paper statement. Digitalisation uses digital tools to improve an existing process, such as automated loan approval. Digital transformation redesigns the product, institution or market itself, such as a mobile platform that combines payments, credit, insurance and investment services.

Digital finance changes the economics of intermediation in three important ways. First, the marginal cost of processing an additional transaction can be very low. Second, data becomes an input into pricing, screening and monitoring. Third, network effects become important: a platform becomes more valuable as more users, merchants and service providers join it. Network effects may increase efficiency, but they can also produce market concentration and make institutions dependent on a small number of technology providers.

2. Electronic Trading and Market Infrastructure

2.1 How electronic trading works

Electronic trading uses interconnected systems to receive, validate, route, match and report orders. A simplified order lifecycle is:

1. An investor submits a buy or sell instruction through a broker or trading application.
2. The order-management system checks account status, limits and required information.
3. A smart-order router may select among exchanges, alternative trading systems or liquidity providers.
4. A matching engine applies market rules, commonly price priority followed by time priority.
5. The trade is confirmed, cleared and settled.

A limit order specifies the maximum purchase price or minimum sale price. A market order instructs the system to trade at the best available prices, subject to available liquidity. The difference between the best ask and best bid is the bid–ask spread. A narrow spread generally indicates lower immediate trading cost and stronger liquidity, although it does not guarantee that large orders can be executed without price impact.

Electronic trading creates several advantages: speed, wider access, transparent order handling, automated risk controls and lower operating costs. It also introduces risks. A software error can generate large erroneous orders; high-frequency strategies may intensify short-term volatility; and a participant may exploit speed or privileged access. Market design therefore requires circuit breakers, pre-trade controls, audit trails, resilience standards and surveillance.

2.2 Basic transaction-cost measures

For a purchase, the effective half-spread can be approximated by:

For a buy, trade direction is +1; for a sell, it is −1. The midpoint is:

These measures assume that the quoted bid and ask are observable and that the midpoint is a reasonable benchmark. They do not capture all costs, such as commissions, taxes, market impact or delay.

Worked example. Suppose the best bid is $49.90 and the best ask is $50.10. The midpoint is $50.00. If an investor buys at $50.10, the effective half-spread is $0.10 per share. For 500 shares, the immediate spread cost is $50, excluding commissions and subsequent price movements.

2.3 Clearing and settlement

Trading creates a contractual obligation, but ownership and payment are completed through clearing and settlement. A central counterparty may become the buyer to every seller and the seller to every buyer, reducing bilateral counterparty exposure but creating concentration and collateral risks. Settlement systems transfer cash and securities, ideally on a delivery-versus-payment basis.

Shorter settlement cycles can reduce exposure between trade date and settlement date, but they require reliable data, liquidity and operational coordination. Distributed-ledger settlement may reduce reconciliation requirements, yet it does not automatically eliminate legal, governance or cyber risks.

3. Fintech, Open Banking and Embedded Finance

Fintech refers broadly to technology-enabled financial innovation. Fintech firms may compete with banks, supply infrastructure to banks or partner with banks. Examples include digital-only banks, payment processors, alternative credit platforms, insurtech firms and wealth-management applications.

Open banking allows customers, with appropriate consent, to authorise regulated providers to access account information or initiate payments through standardised APIs. Its intended benefits include competition, personalised services and easier switching. Risks include weak consent practices, fraudulent account access, inconsistent data standards and uncertainty about liability when several providers participate in one transaction.

Open banking should be based on several principles:

• explicit, informed and revocable customer consent;
• data minimisation and purpose limitation;
• strong authentication and secure API design;
• clear allocation of liability among banks, aggregators and service providers;
• customer access to correction and deletion mechanisms where legally appropriate.

Embedded finance places financial services inside a non-financial customer journey. A transport platform may offer instant payments and driver insurance; an online marketplace may provide merchant credit; a retailer may offer instalment finance at checkout. The technology can improve convenience and use transaction data for underwriting, but the financial service may become less visible to the customer. Consumers may not understand who is responsible for the product, how pricing is determined or which protections apply.

The separation between banking and technology companies is consequently becoming less clear. Banks often possess licences, payment accounts and regulatory expertise, while technology firms may possess customer interfaces, data and cloud infrastructure. Partnerships can improve efficiency, but they require careful oversight of outsourcing, data ownership, service continuity and conduct risk.

4. Digital Payments

Digital payments include card transactions, account-to-account transfers, mobile money, digital wallets, contactless payments and real-time payment systems. They depend on a chain of participants: payer, payee, payment service provider, acquiring institution, issuing institution, network, authentication service and settlement infrastructure.

Important payment risks include:

• Operational risk: systems fail or transactions are duplicated.
• Fraud risk: credentials are stolen or a customer is manipulated into authorising payment.
• Liquidity risk: a participant cannot meet settlement obligations on time.
• Privacy risk: transaction histories reveal sensitive behavioural information.
• Exclusion risk: people without smartphones, identification documents or reliable connectivity may be disadvantaged.

A payment system must balance convenience with authentication strength. Multi-factor authentication combines categories such as something the user knows, possesses or is. Biometric authentication can improve usability but creates special privacy concerns because biometric characteristics cannot easily be replaced if compromised.

The rapid growth of instant payments reduces settlement delay but may also reduce the time available to detect fraud. Effective systems therefore use transaction monitoring, customer education, confirmation screens, velocity limits and rapid recovery procedures.

5. Blockchain, Smart Contracts and Tokenisation

A blockchain is a database maintained through a distributed network, in which transactions are grouped into blocks and linked by cryptographic methods. Participants use a consensus mechanism to agree on the state of the ledger. The economic value of a blockchain does not arise from the label alone; it depends on governance, security, legal recognition, participation incentives and the quality of the information entered.

A smart contract is software that automatically executes specified actions when coded conditions are satisfied. It is not necessarily a complete legal contract. Code may execute irreversibly even when the underlying transaction is fraudulent, ambiguous or legally defective. External facts, such as an exchange rate or weather event, require an oracle or trusted data source.

Tokenisation represents an asset or a right digitally on a ledger. A token may represent a deposit claim, bond, fund unit, commodity interest, real estate interest or access right. Tokenisation may permit fractional ownership, programmable compliance and potentially faster settlement. It does not, however, by itself establish ownership, enforceability or investor protection. The legal relationship between the token holder, issuer, custodian and underlying asset must be clearly defined.

A permissionless network allows broad participation, while a permissioned network restricts participation to approved entities. Permissioned systems may provide greater control and compliance capability; permissionless systems may provide broader accessibility and resistance to unilateral alteration. Both require governance and cybersecurity.

6. Digital Currencies

A cryptocurrency is a digitally represented asset that commonly uses distributed-ledger technology and is not necessarily issued or guaranteed by a central bank. Its price may be highly volatile, and its use can involve custody, operational, legal and market risks.

A stablecoin seeks to maintain a relatively stable value, usually by reference to a fiat currency or other assets. Stability depends on the quality, liquidity and transparency of reserves, the redemption mechanism, governance and market confidence. A stablecoin is not risk-free merely because its name contains the word “stable.”

A central bank digital currency (CBDC) is a digital liability of a central bank available under a design determined by public authorities. A retail CBDC would be used by households and firms; a wholesale CBDC would be used mainly by financial institutions for settlement. Design questions include privacy, offline access, interest payments, holding limits, interoperability, resilience and the effect on commercial-bank deposits.

Digital currencies raise monetary and financial-stability questions. If households rapidly move deposits from commercial banks into a central-bank instrument during stress, bank funding could become less stable. Conversely, programmable or highly efficient public payment infrastructure could improve inclusion and competition. Outcomes depend on design rather than technology alone.

7. Financial Data and Analytical Models

Financial institutions use data for customer segmentation, credit scoring, liquidity forecasting, market-risk measurement, fraud detection and regulatory reporting. Data quality has several dimensions: accuracy, completeness, timeliness, consistency, relevance and representativeness. A sophisticated model trained on poor or biased data can produce precise-looking but unreliable decisions.

7.1 Forecasting

A simple autoregressive model expresses a variable as a function of its past value:

Here, xₜ is the variable at time t, c is a constant, φ is the autoregressive coefficient, xₜ₋₁ is the previous observation and εₜ is an error term with expected value approximately zero under the model. A basic stationary interpretation commonly requires |φ| < 1, although practical forecasting requires diagnostic testing and may use more complex models.

Forecasts should be evaluated out of sample. A common error measure is mean absolute error:

where n is the number of observations, yᵢ is the actual value and ŷᵢ is the forecast. MAE has the same units as the target variable and treats errors linearly. It should not be used mechanically when large errors have disproportionate consequences.

7.2 Credit and risk analytics

A probability-of-default model estimates the likelihood that a borrower will default within a defined horizon. A logistic model can be written as:

p is the estimated probability of default; e is the base of natural logarithms; β₀ is the intercept; βⱼ are estimated coefficients; and xⱼ are borrower or economic variables. The model assumes that the log-odds of default are linearly related to the predictors. It should be validated for calibration, discrimination, stability and fairness.

Expected credit loss is often conceptually represented as:

PD is probability of default, LGD is loss given default as a proportion of exposure, and EAD is exposure at default measured in currency. This is a risk-management representation, not a universal accounting rule. It assumes the three components are defined consistently and that their dependence and timing are handled appropriately.

Worked example. If PD is 3%, LGD is 40% and EAD is $20,000, then expected loss is 0.03 × 0.40 × $20,000 = $240. The estimate is conditional on the model horizon, scenario assumptions and quality of the three inputs.

For market risk, value at risk (VaR) estimates a loss threshold over a specified horizon and confidence level. For example, one-day 99% VaR of $1 million means that, under the model and assumptions, the loss is expected to exceed $1 million on approximately 1% of days. VaR does not describe the size of losses beyond the threshold; expected shortfall is often used to address that limitation.

7.3 Fraud detection

Fraud analytics combines rules, anomaly detection, network analysis and supervised learning. Useful signals may include unusual location, device changes, transaction velocity, merchant patterns and links among accounts. A model should distinguish between an alert and a finding: an alert prioritises investigation, while a human or validated process determines whether fraud occurred.

Performance must be evaluated in context. In rare-event settings, accuracy can be misleading. Precision is the share of flagged cases that are truly fraudulent; recall is the share of all fraudulent cases that are detected. Increasing recall may generate more false positives and impose costs on legitimate customers. Thresholds should therefore reflect financial loss, customer harm, investigative capacity and legal obligations.

8. Artificial Intelligence, Explainability and Responsible Use

AI includes a range of methods, from statistical learning to neural networks and generative systems. Its value in finance depends on a clear purpose, reliable data, effective validation and accountable human oversight. A model that predicts well in historical data may fail when interest rates, regulation, consumer behaviour or fraud tactics change.

Responsible AI governance should include:

1. Purpose definition: identify the decision, affected persons and acceptable use.
2. Data governance: document sources, permissions, quality and retention.
3. Model validation: test performance, stability, sensitivity and stress scenarios.
4. Fairness assessment: examine disparate effects across relevant groups.
5. Explainability: provide understandable reasons for material decisions.
6. Human review: create escalation, appeal and override procedures.
7. Monitoring: track drift, errors, complaints and unexpected outcomes.
8. Accountability: assign a responsible owner and maintain audit records.

Explainability has multiple meanings. A global explanation describes how a model generally behaves; a local explanation describes why a particular case received a particular output. Neither guarantees causal truth. An explanation that merely identifies correlation may be insufficient where customers have a legal right to meaningful reasons.

Privacy protection requires more than removing names. Transaction records may be re-identified through dates, locations, counterparties or combinations with external data. Key safeguards include data minimisation, access controls, encryption, retention limits, privacy impact assessments and, where appropriate, pseudonymisation, secure multiparty computation or differential privacy. Privacy-enhancing techniques can reduce risk but may lower analytical precision and require specialist validation.

9. Robo-Advice and Algorithmic Wealth Management

Robo-advisers use digital questionnaires, portfolio algorithms and automated rebalancing to provide investment guidance or management. A typical process assesses objectives, time horizon, risk tolerance, financial capacity and constraints, then proposes a diversified portfolio.

A simplified portfolio return is:

where Rₚ is portfolio return, wᵢ is the portfolio weight of asset i and Rᵢ is the return of asset i. Portfolio risk is not simply the weighted average of individual risks because asset covariance matters:

σₚ² is portfolio variance, w is the vector of asset weights and Σ is the covariance matrix. The expression assumes that returns, weights and covariances are measured over compatible periods. Estimated covariance can be unstable, particularly when many assets and limited observations are used.

Robo-advice can lower minimum investment amounts and improve discipline, but questionnaires may oversimplify risk preferences. Algorithms may recommend products that are profitable for the provider, fail to recognise unusual personal circumstances or encourage excessive trading. Sound practice requires suitability assessment, disclosure of fees and conflicts, accessible human support, secure authentication and periodic review.

10. Cybersecurity, Operational Resilience and Regulation

Digital finance creates an expanding attack surface: customer devices, APIs, cloud systems, trading engines, identity services, payment networks and third-party vendors. Threats include phishing, ransomware, credential stuffing, malware, denial-of-service attacks, insider abuse and supply-chain compromise.

Cybersecurity is often described through confidentiality, integrity and availability. Confidentiality protects information from unauthorised access; integrity protects data and instructions from unauthorised alteration; availability ensures that services remain usable. Financial institutions also need authenticity, non-repudiation, recoverability and tested incident-response plans.

Operational resilience differs from ordinary business continuity. It focuses on maintaining important services within acceptable tolerance during disruption, including failures caused by cyberattacks, cloud outages, vendor problems or extreme events. Important controls include asset inventories, network segmentation, least-privilege access, multi-factor authentication, secure software development, backups, penetration testing and independent assurance.

Regulation is becoming technology-neutral in some areas but technology-specific in others. Common regulatory concerns include licensing, consumer protection, anti-money-laundering and counter-terrorist-financing controls, capital and liquidity, outsourcing, operational resilience, data protection, market integrity and algorithmic accountability. Cross-border services create jurisdictional conflicts and enforcement challenges. Firms should not assume that a technology company is outside financial regulation merely because it does not call itself a bank.

11. Sustainability and the Digital Finance Transition

Digital finance can support sustainability by improving access to climate data, directing capital toward sustainable projects, reducing paper processes and enabling transparent monitoring of use of proceeds. Digital tools can also create environmental costs through electricity consumption, hardware production, data-centre cooling and electronic waste.

Sustainability analysis should consider the complete life cycle of infrastructure rather than only the energy used during operation. It should also examine social effects, including digital exclusion, worker conditions in technology supply chains and surveillance risks. Claims about “green” digital finance require measurable criteria, reliable data and protection against greenwashing.

Climate risk analytics commonly considers physical risks, such as floods and heat, and transition risks, such as carbon pricing, technological substitution and changing regulation. Scenario analysis is particularly useful because historical data may not represent future climate conditions.

12. Illustrative Case: Open Banking and Fraud Control at Meridian Bank

Background

Meridian Bank, a fictional mid-sized retail bank, introduces an open-banking platform that allows customers to connect budgeting applications and authorise account-to-account payments. The service increases customer engagement, but fraud losses rise after criminals obtain credentials through social engineering.

Problem

The bank’s original fraud system relies mainly on static rules. It blocks transactions above a fixed amount but misses smaller coordinated payments and creates inconvenience for legitimate customers who travel or change devices.

Analysis

The bank maps the payment journey and identifies risks at authentication, consent, API access, payment initiation and settlement. It discovers that the system records device and transaction data inconsistently across channels. It also finds that many alerts are not linked to investigation outcomes, preventing effective model training.

Approach and solution

Meridian adopts layered controls. Strong customer authentication is combined with device intelligence, transaction-velocity rules and a supervised fraud model. The model produces a risk score, but payments are not automatically rejected solely because of the score. Low-risk transactions proceed, medium-risk transactions receive step-up authentication, and high-risk transactions are held for review.

The bank establishes data-quality controls, records customer consent, limits API permissions and appoints a model owner. It measures precision, recall, customer complaints, processing delays and confirmed loss. A fairness review tests whether certain customer groups experience disproportionate declines. The bank also creates an appeal and reimbursement process for authorised push-payment fraud where required by applicable law.

Outcome

In this illustrative case, confirmed fraud losses decline while false positives are reduced. The improvement does not result from AI alone; it comes from combining better data, layered controls, human investigation, customer communication and governance.

Learning points

The case demonstrates that digital innovation changes responsibility rather than removing it. Effective fraud prevention requires security by design, clear accountability, proportional intervention, privacy protection and continuous monitoring.

13. Future Directions and Professional Implications

Several trends are likely to influence financial markets:

• tokenised deposits, securities and funds may connect issuance and settlement more closely;
• real-time payments may become standard in domestic and cross-border commerce;
• AI agents may support research, service and operational decisions, increasing the need for controls over autonomous actions;
• cloud and specialised technology providers may become more systemically important;
• digital identity systems may improve onboarding but intensify surveillance and exclusion concerns;
• regulatory technology may automate reporting, monitoring and supervisory analysis.

Future finance professionals need more than technical familiarity. They must understand market economics, accounting, risk, law, data governance, cybersecurity and customer outcomes. They should be able to question model assumptions, interpret performance metrics, communicate uncertainty and identify when automation is inappropriate. The central professional principle is that technological capability must remain subordinate to lawful, fair, resilient and economically sound financial practice.

Chapter Summary

Digital finance transforms financial markets through electronic trading, APIs, mobile payments, cloud infrastructure, blockchain, tokenisation and AI. Electronic trading improves speed and access but requires controls against erroneous orders, manipulation and operational failure. Open banking and embedded finance increase competition and convenience while raising questions about consent, liability, data governance and consumer understanding.

Blockchain and tokenisation may improve programmability and settlement, but technical representation does not automatically establish legal ownership or investor protection. Cryptocurrencies, stablecoins and CBDCs have different issuers, risk profiles and monetary implications. Financial analytics supports forecasting, credit assessment, market-risk measurement and fraud detection; however, data quality, model assumptions, calibration and out-of-sample validation are essential.

Responsible AI requires purpose limitation, privacy protection, explainability, fairness testing, human oversight, monitoring and clear accountability. Robo-advice can broaden access to investment management but must address suitability, conflicts and limitations of automated profiling. Cybersecurity and operational resilience are central to trust in digital markets. Finally, digital finance must be evaluated through sustainability, inclusion and regulatory perspectives. The future of markets will depend not only on faster technology, but on the quality of governance surrounding it.

Key Terms

Artificial intelligence: Computational methods that perform tasks associated with human intelligence, such as prediction, classification or language processing.

Blockchain: A distributed ledger in which records are linked and maintained through a network-based consensus process.

CBDC: A central bank digital currency; a digital liability of a central bank.

Digital wallet: Software or hardware that stores payment credentials or digital assets and enables transactions.

Embedded finance: Delivery of financial products within a non-financial platform or customer journey.

Electronic trading: Computer-mediated submission, matching, execution and reporting of financial orders.

Expected loss: A risk estimate commonly represented as PD × LGD × EAD.

Fintech: Technology-enabled innovation in financial products, services or infrastructure.

Fraud detection: Processes and analytical methods used to identify potentially deceptive or unauthorised activity.

High-frequency trading: Algorithmic trading characterised by high speed, automation and large order volumes.

Open banking: Controlled sharing of account information or payment access through APIs with customer authorisation.

Operational resilience: The ability to continue important services within acceptable tolerances during disruption.

Robo-advice: Automated or semi-automated provision of investment guidance or portfolio management.

Smart contract: Software that executes programmed actions when specified conditions are met.

Stablecoin: A digital asset designed to maintain a relatively stable value against a reference asset.

Tokenisation: Digital representation of an asset, claim or right through a token.

Value at risk: A model-based estimate of a loss threshold for a specified horizon and confidence level.

Explainability: The extent to which a model’s operation or decision can be meaningfully understood.

Review Questions

Short Answer Questions

1. What is the difference between digitisation, digitalisation and digital transformation?
2. Define open banking and identify two associated risks.
3. What functions do clearing and settlement perform after a trade?
4. Why can accuracy be a misleading measure in fraud detection?
5. Distinguish a cryptocurrency, a stablecoin and a CBDC.

Long Answer Questions

1. Explain how electronic trading changes liquidity, price discovery and operational risk.
2. Evaluate the benefits and limitations of blockchain and tokenisation in securities markets.
3. Discuss the governance requirements for responsible use of AI in credit decisions.
4. Explain how open banking and embedded finance affect the boundaries between banks and technology firms.
5. Analyse the role of cybersecurity and operational resilience in digital payment systems.

Analytical / Application Questions

1. A lender estimates PD at 4%, LGD at 45% and EAD at $15,000. Calculate expected loss and explain the assumptions behind the result.
2. Design a layered fraud-control process for an instant-payment provider. Identify where customer friction, privacy and false positives should be considered.
3. A robo-adviser recommends a high-risk portfolio to a customer with a short investment horizon and limited loss capacity. Analyse the suitability, governance and consumer-protection failures involved.

Multiple Choice Questions with Answers

Question 1

Which feature most directly distinguishes open banking from ordinary digital banking?

A. It uses only physical bank branches.

B. It permits authorised sharing of account data or payment access through APIs.

C. It eliminates the need for customer consent.

D. It guarantees that all fintech firms are banks.

Correct Answer: B. It permits authorised sharing of account data or payment access through APIs.

Question 2

The midpoint price when the best bid is $49.90 and the best ask is $50.10 is:

A. $49.90

B. $49.95

C. $50.00

D. $50.10

Correct Answer: C. $50.00

Question 3

If PD is 3%, LGD is 40% and EAD is $20,000, expected loss is:

A. $24

B. $240

C. $600

D. $8,000

Correct Answer: B. $240

Question 4

Which statement about a stablecoin is most accurate?

A. Its value is guaranteed by the existence of the word stable.

B. It is always a central bank liability.

C. Its stability depends on reserves, redemption, governance and market confidence.

D. It cannot experience liquidity risk.

Correct Answer: C. Its stability depends on reserves, redemption, governance and market confidence.

Question 5

In fraud detection, precision measures:

A. The proportion of flagged cases that are truly fraudulent.

B. The proportion of all fraudulent cases that are detected.

C. The total number of transactions processed.

D. The average transaction value.

Correct Answer: A. The proportion of flagged cases that are truly fraudulent.

Question 6

Which is a principal limitation of value at risk?

A. It cannot use a confidence level.

B. It says little about the size of losses beyond its threshold.

C. It measures only operational risk.

D. It always predicts the exact daily loss.

Correct Answer: B. It says little about the size of losses beyond its threshold.

Question 7

A smart contract is best described as:

A. A paper contract stored in a bank vault.

B. Software that executes programmed actions when specified conditions are met.

C. A mandatory central-bank guarantee.

D. A human investigation of payment fraud.

Correct Answer: B. Software that executes programmed actions when specified conditions are met.

Question 8

Which principle requires collecting and retaining only data necessary for a defined purpose?

A. Data minimisation

B. Price priority

C. Market making

D. Fractional reserve banking

Correct Answer: A. Data minimisation

Question 9

In the portfolio variance formula, the covariance matrix is important because:

A. It eliminates all investment risk.

B. It captures relationships among asset returns.

C. It replaces portfolio weights.

D. It measures only transaction fees.

Correct Answer: B. It captures relationships among asset returns.

Question 10

Operational resilience primarily concerns an institution’s ability to:

A. Avoid all innovation.

B. Continue important services within acceptable tolerances during disruption.

C. Guarantee positive investment returns.

D. Remove the need for cybersecurity.

Correct Answer: B. Continue important services within acceptable tolerances during disruption.