Even if, for instance, IT services and servers are outsourced, the bank still needs to bear responsibility, in the form of an audit trail for supervisors, for the security and availability of data.
There are additional and, in some cases, completely new threats, not only in the area of IT security but also in areas such as data protection, manipulation of behaviour by computers or cluster risk caused by algorithms.