Banking and Payments Capability Map: AI-Ready | Capstera

The Banking and Payments Capability Model describes what banks and payments companies do as 8 L1, 48 L2 and 213 L3 capabilities, defined to L3 with 192 KPIs at L2. It covers the work they share, from onboarding and payments to financial crime, credit, the balance sheet and banking operations, and three segments sit inside it: Retail and Business Banking, Corporate and Investment Banking with prime brokerage, and Payments, each tagged in a Segment column so you can filter the model to your own. Every L2 capability carries an AI profile and a place in a prioritization model you weight yourself. Business and enterprise architects load it into the Capstera platform with the import files, or let their AI assistants query it through MCP.

What the Banking and Payments Capability Model Is

The model describes a bank or a payments company by the work it does, not by the systems it runs or the way its organization chart is drawn. Its 8 L1 capabilities are client and account management; payments and transaction processing; financial crime and fraud management; credit and counterparty risk management; balance sheet, liquidity and capital management; financial product and pricing management; banking operations and control; and capital markets and securities services. They break down into 48 L2 and 213 L3 capabilities, each defined to L3, with 192 KPIs at L2 and stable IDs you can cite in a program plan, a business case or a vendor scorecard.

The three segments are part of the same structure, not separate models. Retail and Business Banking adds deposit and savings accounts, branches and cash machines, card issuing, retail lending, loan servicing, and collections and recoveries. Corporate and Investment Banking adds its own L1 for corporate finance advisory, origination and underwriting, sales and trading, market risk and valuation control, securities operations, research, and corporate lending, syndication and trade finance, with prime services for professional investors inside it. Payments adds wallets and stored value, merchant acquiring, payment acceptance and gateway services, card programs run for client institutions, and participation in payment networks. Each segment capability sits under the area it extends and carries its segment in the workbook, so a payments company filters to the shared work plus Payments and sets the rest aside. Finance, people, technology and the other work every large enterprise does stay in the enterprise capability model and are not repeated here.

A plain capability map stops at names and definitions. This edition adds an AI profile for every L2 capability: the opportunities, the work that stays human, KPIs and AI measures, prerequisites, risks and workforce impact. Every L3 is rated for work pattern, target AI mode, AI fit and risk tier, so the whole model can be drawn as one heatmap and ranked by a risk-adjusted score. The payment exceptions and investigations profile in the public sample shows the split this produces: AI may repair a failed payment's format within approved repair rules, never its amount, its payee or the account it is paid from, and the Head of Payments Operations approves those rules and decides whether a payment held for an operational reason is released, returned or recalled.

The Problem It Solves

Banks and payments companies are usually described in the vocabulary of their systems: the core banking system, the payment hub, the screening engine, the trading systems. A group that runs a retail bank, a corporate and investment bank and a payments business has a second problem, because onboarding, credit and financial crime work look different in each, and each business tends to keep its own map. AI proposals then arrive business by business and system by system, judged one at a time, with no shared way to compare them or to see which decisions they touch.

One reference model changes that without flattening the segments. The shared capabilities hold the work every part of the business does, the segment capabilities hold what only one part does, and each capability already states the AI mode it suits, the oversight it needs and the risk it carries. Decisions about automation in onboarding, screening, fraud, credit and payment exceptions, where a wrong call can send money to the wrong place, turn a client away without cause or let suspicious activity through, are then made against criteria agreed in advance instead of case by case.

What's Inside

The Capability Model edition holds the model, its AI layer and the files to work with them:

• 8 L1, 48 L2 and 213 L3 banking and payments capabilities, with definitions to L3 and 192 KPIs at L2
• A full AI profile for every L2 capability: opportunities, what stays human, KPIs, AI measures, prerequisites, risks and workforce impact
• AI ratings for every L3: work pattern, target AI mode, AI fit and risk tier
• A prioritization model with a risk-adjusted score and rank for every L2 capability, using your own ratings and weights
• An AI heatmap of the whole model
• A 40-question weighted AI readiness assessment
• A Welcome document, the capability map deck, standalone capability definitions and KPIs documents, the Excel workbook, the user guide, and import files for the Capstera platform
• Bonus files: a banking and payments glossary, A Practical Guide to Business Architecture, a capability modeling overview, an AI-ready capability profile template and capability relationship mapping templates
• Free corrections, new versions free for 180 days, and MCP access for your AI assistants for the same 180 days

Every file names your organization and carries your license ID. Ratings describe a typical large enterprise and are a starting point for your own.

Use Cases

AI opportunity assessment across businesses. Rate the 48 L2 capabilities with your own scores and weights, for the shared work and for each segment you operate in. The ranked results show which AI investments serve the whole group and which belong to the retail bank, the corporate and investment bank or the payments business.

Setting oversight for credit, screening and fraud decisions. Use the oversight level and risk tier in each profile as the starting point for deciding where AI may act and where a person decides. Client due diligence, screening, transaction monitoring, fraud, disputes and credit decisioning carry the ratings that tell a governance group where to look first.

Rationalizing applications across businesses. Map each business's applications to the L3 capabilities they support to find duplicate systems, gaps and work carried by spreadsheets nobody owns. The capability IDs give one key across a retail bank, a corporate bank and a payments business that bought their systems at different times.

Integrating an acquired bank or payments business. Map the acquired company's operations to the shared capabilities and to its segment before the integration plan is written. The overlap shows what can be combined, and the segment capabilities show what has to be kept because the acquired business serves different clients.

Scoping a software evaluation. Before evaluating onboarding, payments, screening or lending software, mark the capabilities the purchase must support, including segment ones such as merchant acquiring or securities operations. Vendor answers are then scored against named capabilities and their KPIs instead of feature lists.

A capability-based operations plan. Sequence an operations or AI program by capability instead of by system, using the prioritization model and the readiness assessment. Each step names the capabilities it changes, so progress is reported in terms that operations, risk and business heads all recognize.

Who Uses It

Business and enterprise architects. Use the model as the reference structure for banking and payments work, tailor it to the organization's businesses and segments, and link applications, processes and initiatives to its capabilities.

Chief operating officers and heads of banking operations. Use the AI profiles and the heatmap to see which operations are ready for AI support and which decisions stay with named people.

Payments, onboarding and servicing leaders. Check the profiles for their own areas, set oversight levels that match how they run payment exceptions, onboarding cases and account servicing, and adjust the ratings to their operations.

Credit, financial crime, fraud and treasury leaders. Review the risk tiers and the work that stays human in their areas, and confirm who decides credit, screening matches, fraud claims and funding before any AI work starts.

Transformation leaders. Use the ranked capabilities to choose where a program starts and to explain that choice to business and risk leadership.

Build It, Hire It, or Start Here

A bank or a payments company can get a capability model in three ways, and they differ most in how long it takes to reach a first draft that every business line and the risk functions accept.

• Building it from a blank slate. Architects run workshops with each business line, gather what people do, reconcile the vocabularies of retail, corporate, markets and payments teams, and draft definitions and KPIs. The result fits the organization, but the structure takes several review cycles to settle, and the AI layer is still to design.
• Hiring consultants to build it. Consultants bring a method and often a starting structure of their own, and run the elicitation for you. Much of the effort goes into drafting structure that is much the same at every bank, and the result is a document your team did not build and has to learn.
• Starting from this model. Your team starts with a defined, rated model of the shared work and the three segments, sets aside the segments it does not operate in, and spends its workshops on what is different about its own businesses. The first review is about your organization, not about what a capability model is.

Consultants still earn their fee once this model is in hand: tailoring it to your businesses, running the prioritization with your leadership and planning the change. That is a better use of their time than drafting a bank's capability list from nothing.

How to Get Started

These steps take a team from the download to a ranked list of where AI work starts:

1. Read the Welcome document and the user guide to see how the model, the AI profiles and the workbook fit together.
2. Filter the workbook's Segment column to the shared capabilities plus the segments your organization operates in.
3. Review the definitions and KPIs with business, operations and risk leaders and record where your organization differs.
4. Adjust the AI ratings and the weights in the prioritization model to reflect your own businesses and priorities.
5. Run the readiness assessment, then use the ranked results and the heatmap to choose where AI work starts.

Read the Public Sample

The sample follows one thread through the package, payment exceptions and investigations, and is 0.58% of the content. From the Payment Exceptions and Investigations (BK-2.3) AI profile:

• Work patterns: Rules-based decision, Knowledge retrieval, Coordination & orchestration
• Target AI mode: Augment
• Human oversight: Human-in-the-loop
• AI fit / Value / Feasibility / Data readiness: 4 / 4 / 4 / 3 (1–5)
• Risk tier: High
• Roadmap wave: Wave 2
• AI opportunity: Repair a payment's format and missing details within approved repair rules, leaving its amount, payee and debit account untouched
• What stays human: The Head of Payments Operations approves the repair rules the Payment Repair Agent applies, prepared by the Payments Operations Analyst after hearing the Head of Financial Crime

The preview above shows more of the profile, the AI heatmap, an agent card and a value stream stage redesigned for AI. Any MCP client can also query the sample at https://platform.capstera.com/api/mcp/blueprints?package=bk without a key.

Connect Your AI Assistant

Your license includes access to the package through MCP (Model Context Protocol). Connect an MCP-capable AI assistant or your own agents, and they look up your licensed content as they work: one capability, agent or control at a time, scoped to your edition and stamped with your license ID. The key arrives with your order confirmation, and access runs for the 180 days in which new versions are free. Setup and limits: AI-ready license and MCP access.

Upgrade Credit

Start here and move up later: the full price of this edition counts toward the Business Architecture for Banking and Payments: AI Transformation Blueprint if you upgrade within 90 days. Email support@capstera.com with your order number for a one-time checkout code.

Frequently Asked Questions

What is the difference between the two editions?

The AI-Ready Capability Model covers the capability map, an AI profile for every L2 capability, prioritization, the heatmap and the readiness assessment. The AI Transformation Blueprint adds value streams redesigned for AI, the business data model, agent specifications, use cases, responsible AI principles and controls, the operating model and the roadmap, a leadership presentation template, and bonus files on roles, operating model archetypes and transformation.

Can I upgrade from the Capability Model to the Blueprint later?

Yes. The full price you paid for the Capability Model counts toward the Blueprint if you upgrade within 90 days. Email support@capstera.com with your order number for a one-time checkout code.

What happens after 180 days?

Your license to use the files does not end. Corrections are free for as long as you use the files. New versions released within 180 days of purchase are free, and MCP access runs for the same 180 days. There is no renewal after that: you can buy a new version at 25% off its price. Orders placed before October 27, 2026 keep the 12 months they were sold with.

Can I load the content into our own AI tools?

Yes, within the license. The Enterprise license allows internal tools, including your own assistants and agents. Neither license allows training, fine-tuning or prompting AI systems for third parties.

Does the package cover AI laws and regulations?

No, by design. It is business architecture: capabilities, value streams, data and the AI layer describe what a bank or a payments company does and how AI fits, and they hold whichever laws apply where you operate. The risk tiers, principles and controls are durable practices your compliance team maps to your own jurisdictions.

Why not just ask ChatGPT or another AI assistant?

An AI assistant can draft a banking capability list quickly, and for getting oriented in an unfamiliar segment that is often enough. This model is for decisions that have to stand up to review by operations, credit, financial crime and risk leadership. Its capabilities keep stable IDs, the links between capabilities, ratings and the readiness assessment are checked before release, every L2 capability carries a rated AI profile with a risk tier, the segments are tagged instead of mixed in, and the scoring model uses weights you set. A generated list changes each time you ask and checks none of that.