Chapter 38: Further Reading — RegTech ROI: Measuring and Communicating Compliance Efficiency

Essential Reading

Regulatory and Supervisory Publications

FCA Financial Resilience and Compliance Cost Research The FCA periodically publishes research on the cost of compliance at UK financial firms, including data on compliance function size, technology spend, and regulatory outcome correlations. The FCA's Financial Lives Survey and its Perimeter Report contain data on firm-level compliance characteristics that provide useful benchmarking context. FCA Occasional Papers on technology adoption in financial services (particularly those from the TechSprint programme) address the value proposition for RegTech tools. Available at: www.fca.org.uk/publications

FCA Enforcement Actions Data and Statistics The FCA publishes detailed data on all enforcement actions, including fine amounts, the nature of violations, and the remediation requirements imposed. This data is the primary source for calibrating regulatory fine probability and magnitude estimates in risk reduction ROI calculations. The annual FCA Enforcement Annual Performance Account provides a systematic summary. Available at: www.fca.org.uk/enforcement

Bank of England: The Compliance Function in UK Banks The Prudential Regulation Authority and Bank of England have published supervisory statements and discussion papers on compliance function effectiveness, the role of technology in compliance, and the relationship between compliance investment and supervisory risk. The PRA's SS1/23 on model risk management has direct relevance to the governance of compliance technology models. Available at: www.bankofengland.co.uk/prudential-regulation

Basel Committee on Banking Supervision: Compliance and Compliance Function in Banks The Basel Committee's guidance paper on the compliance function (first published 2005, supplemented by subsequent guidance) establishes the international standard for how compliance functions should be structured, resourced, and governed. Section 5 of the guidance, covering compliance risk management, provides the conceptual framework within which ROI analysis sits. Available at: www.bis.org/publ/bcbs113.htm

Practitioner Research and Benchmarking

McKinsey & Company: The Business Value of Compliance Technology McKinsey's financial services practice has published extensively on compliance cost benchmarking, RegTech adoption patterns, and the economic value of compliance technology investment. Particularly relevant are their annual Global Banking Annual Review chapters on compliance, and their practitioner surveys on the cost of AML compliance. Search McKinsey.com for "compliance technology value" and "AML efficiency."

Oliver Wyman: The Cost of Compliance Oliver Wyman has produced landmark research quantifying the compliance cost burden for global financial institutions, providing the industry baseline data needed to contextualize firm-specific ROI analyses. Their report The Business Case for Regulatory Technology (various editions) is a direct reference for the methodology described in this chapter. Available at: www.oliverwyman.com/our-expertise/insights/financial-services-regulation

Deloitte: RegTech Universe and Benchmarking Deloitte's Centre for Regulatory Strategy publishes annual RegTech Universe reports cataloguing the global RegTech vendor landscape and tracking adoption patterns. These reports provide benchmarking data on typical implementation costs, benefit realization timelines, and ROI ranges by technology category. Available at: www2.deloitte.com/uk/en/pages/financial-services/articles/regtech-universe.html

KPMG: RegTech: A Catalyst for Business Change KPMG's RegTech practice has published guidance on the business case for RegTech, including frameworks for categorizing value, approaches to benefit quantification, and case studies from implementation engagements. Their report Regulating for a Digital Future addresses the intersection of regulatory strategy and technology investment. Available at: home.kpmg/xx/en/home/insights/regtech.html

Financial Methodology References

Net Present Value and Discounted Cash Flow

Brealey, Myers, and Allen: Principles of Corporate Finance (McGraw-Hill) The standard graduate-level corporate finance textbook. Chapters 2–5 cover the fundamentals of discounted cash flow analysis, NPV calculation, and the treatment of uncertainty in financial modelling. This is the primary reference for the NPV methodology used in RegTech business case construction. The treatment of "equivalent annual cash flows" in Chapter 6 is particularly relevant for comparing technology investments with different useful lives.

Damodaran, Aswath: Investment Valuation (Wiley Finance) Damodaran's comprehensive treatment of valuation methodology includes detailed coverage of DCF analysis, sensitivity analysis, simulation approaches, and the treatment of risk and uncertainty in cash flow projections. Chapter 5 on estimating discount rates and Chapter 12 on relative valuation provide the conceptual foundation for several methodological choices in RegTech business cases.

Koller, Goedhart, and Wessels: Valuation — Measuring and Managing the Value of Companies (McKinsey / Wiley) The McKinsey valuation reference, widely used in professional financial analysis. Particularly useful for its treatment of how to handle intangible value, non-financial performance metrics, and strategic options in DCF frameworks. Chapter 14 on performance measurement contains directly applicable guidance for compliance function ROI analysis.

Expected Value and Risk Quantification

Hubbard, Douglas W.: How to Measure Anything (Wiley) Hubbard's methodology for quantifying intangible business values is directly applicable to the risk reduction and regulatory relationship value categories in RegTech ROI analysis. His "clarification chain" technique — for defining what a seemingly unmeasurable concept would look like if measured — is particularly useful for quantifying regulatory relationship value. The chapter on Monte Carlo simulation provides a methodological alternative to sensitivity analysis for expressing uncertainty.

Kaplan, Robert S. and David P. Norton: The Balanced Scorecard (Harvard Business Review Press) The Balanced Scorecard framework's treatment of leading versus lagging indicators, and its approach to quantifying the value of process improvement, provides a useful complement to the pure financial analysis approach. The four-category structure of the BSC (financial, customer, internal process, learning and growth) maps roughly to the four value categories in the RegTech ROI framework.

Academic Research

Compliance Cost Literature

London Economics: The Cost of AML Compliance London Economics has produced several academic and policy-oriented studies quantifying the cost of AML compliance for UK financial institutions, including analysis of how technology adoption affects compliance cost levels. Their methodology for FTE-based cost analysis is a primary source for the approach described in Section 38.3. Available through: londoneconomics.co.uk

Financial Stability Board: Artificial Intelligence and Machine Learning in Financial Services The FSB's study on AI and ML in financial services (updated periodically) includes analysis of the compliance applications of these technologies and the value they create. Section 4 of the most recent edition addresses the measurement of compliance technology value and the challenges of demonstrating ROI. Available at: www.fsb.org/publications

Arner, Douglas W., Barberis, Janos, and Ross P. Buckley: "The Evolution of FinTech: A New Post-Crisis Paradigm?" (University of Hong Kong Faculty of Law Research Paper) This foundational academic paper on the RegTech concept (widely cited since its 2016 publication) establishes the conceptual framework for understanding RegTech as a distinct category of technology investment, with implications for how its value should be measured and communicated.

Butler, Tom and Leona O'Brien: "Understanding RegTech for Digital Regulatory Compliance" in Disrupting Finance (Springer, 2019) This chapter provides an academic treatment of the RegTech value proposition, including analysis of how compliance functions should approach the evaluation of technology investments. The treatment of the compliance-technology value chain is directly relevant to the four-category ROI framework.

Digital Transformation ROI Literature

Westerman, George, Bonnet, Didier, and Andrew McAfee: Leading Digital: Turning Technology into Business Transformation (Harvard Business Review Press) The Leading Digital research program's treatment of the economics of digital transformation provides the broader context for understanding RegTech ROI. Their finding that organizations with stronger digital governance realize 26% more profit than their competitors has direct implications for how compliance technology investment should be positioned in executive conversations.

Nolan Norton Institute / KPMG: Value Creation in Digital Transformation Research on how digital transformation investments create financial value, with particular attention to the challenge of quantifying intangible and indirect benefits. The framework for categorizing transformation value into operational efficiency, risk management, and growth enablement maps closely to the RegTech value categories.

Online Resources and Ongoing Reference

CUBE RegTech: Regulatory Intelligence Library CUBE's online library of regulatory obligations and changes provides the regulatory context for understanding which obligations are most amenable to technology-driven efficiency. Their published benchmarking data on the volume of regulatory change across jurisdictions supports the "cost of the status quo" arguments in RegTech business cases. Available at: www.cube.global/resources

Napier AI: RegTech Insights and Benchmarks Napier and other RegTech vendors publish practitioner-oriented content on compliance technology performance benchmarks, including data on false positive rates, FTE efficiency, and SAR filing metrics. While vendor-produced content carries obvious caveats, the benchmark data is often the best available source for calibrating ROI assumptions.

FinTech Global: RegTech Analyst Reports FinTech Global's RegTech-specific market intelligence covers investment data, adoption trends, and performance benchmarks. Their quarterly RegTech100 rankings provide a market map of leading vendors and their value propositions. Available at: fintech.global/regtech

The RegTech Association (Australia/Asia-Pacific) The RegTech Association publishes practitioner guides, case studies, and benchmark reports focused on the value and implementation of RegTech solutions, particularly in Asia-Pacific markets. Their member resources include ROI case studies and implementation guides. Available at: regtechassociation.org

FCA TechSprint Outcomes and Reports The FCA's TechSprint programme (collaborative innovation events between regulators, technology firms, and financial institutions) has produced published outcome reports that document specific use cases, technology solutions, and value creation evidence. The AML TechSprint outcomes in particular provide real-world data points for the ROI analysis of AML technology. Available at: www.fca.org.uk/innovation/regtech/techsprint

A Note on Sources for Probability Estimates

One methodological challenge in risk reduction ROI calculations is finding defensible data for enforcement probability estimates. Several sources are available:

  1. FCA published enforcement statistics: available annually, showing the number and type of enforcement actions by sector. These allow approximate probability calculations for specific firm types.

  2. FCA Supervisory Risk Outlook: published periodically, this document identifies which sectors and risk areas the FCA is prioritising. Higher supervisory priority areas have, historically, higher enforcement rates in subsequent periods.

  3. Specialist compliance consultancies: firms like Bovill, Eversheds Sutherland, or Clifford Chance publish enforcement trend analyses that provide probability context.

  4. Insurance market data: Directors and Officers (D&O) insurance and financial services professional indemnity underwriters have developed proprietary models for estimating regulatory enforcement probability. Conversations with specialist insurance brokers can surface this data informally.

For any analysis that includes material risk reduction estimates, the probability assumptions should be documented explicitly with their sources, and the sensitivity of the total ROI to those assumptions should be tested. See Chapter 38 Exercise 38.3 for a worked example.