So Debs, focusing on third-party AI contracts, what are some of the systemic technology risks that banks should be worried about?

Yeah, so actually, before I come on to that, just an observation, and it's interesting how the sort of regulation that sits more in my world around specifically AI and data protection have similar themes to those that you've just outlined.

So sounds like the regulators and the legislature in all areas are kind of moving in a similar direction, just an observation.

But to your question, this is where the review introduces the concept of ecosystem level risks.

It is the shared reliance on the same models, the same cloud infrastructure, the same handful of providers that gives rise to this sort of higher level, more general risk.

So if a major model provider has an outage or a security breach, multiple banks could be affected simultaneously.

And that is not a firm level resilience problem.

Debs, on the technology infrastructure side, what should banks be preparing for?