The Situation
A regional building society with 340,000 members received a regulatory notice requiring it to implement enhanced anti-money laundering controls within eighteen months or face significant sanctions. The existing customer onboarding process was entirely paper-based, with identity verification conducted manually by branch staff using a checklist that hadn't been updated in seven years. The compliance team estimated that meeting the new requirements through the existing manual process would require hiring forty additional staff — a cost the organisation couldn't absorb.
The initial brief to the BA team was narrow: document the requirements for an automated identity verification system. Within two weeks of discovery work, however, the lead BA had reframed the opportunity entirely.
The Analysis That Changed Everything
During stakeholder interviews, the BA noticed a consistent pattern. Branch managers, compliance officers, and customer service representatives all described the same underlying problem from different angles: the organisation had no single reliable source of truth for customer information. Customer records existed in six different systems — mortgage platform, savings accounts, current accounts, insurance policies, online banking, and a legacy CRM — none of which communicated with the others. Regulatory compliance was one symptom of a deeper data architecture problem.
The BA constructed a current-state process map that made this fragmentation visible for the first time. When a customer opened a new savings account, staff manually re-entered information already held in three other systems, creating data entry errors, inconsistencies, and the identity verification gaps the regulator had flagged. The same customer might have different addresses recorded across different systems, different names formatted differently, different correspondence preferences that weren't synchronised. The map showed forty-seven manual data re-entry touchpoints across the customer lifecycle.
Presenting this analysis to the executive team, the BA made a case that addressing only the compliance requirement would be expensive, disruptive, and would leave the underlying problem unresolved — the organisation would face the same issues in the next regulatory review. A broader customer data platform programme would cost more upfront but solve the compliance issue, eliminate operational inefficiency, and create a foundation for digital services that members increasingly expected. The executives agreed to fund the expanded scope.
Navigating the Complexity
The programme that followed involved six systems, twelve business areas, four technology vendors, and a regulatory deadline. The BA team's most critical contribution was maintaining requirements traceability throughout eighteen months of development. Every requirement linked back to either a regulatory obligation, a measurable operational improvement, or a documented member experience gap. When scope pressures mounted — as they inevitably did — this traceability matrix gave the programme team a principled basis for prioritisation rather than defaulting to whoever argued most loudly.
A significant challenge emerged eight months in when data migration analysis revealed that the historical customer records contained systematic errors introduced by a data entry system retired in 2011. Approximately 23,000 customer records had address fields stored in non-standard formats that automated migration tools couldn't process reliably. The BA worked with data engineers to design a hybrid approach: automated processing for clean records, a targeted manual remediation programme for problematic records, and clear exception handling for the small percentage that couldn't be resolved before go-live. This pragmatic approach prevented a potential three-month delay.
The Outcomes
The programme delivered regulatory compliance on time and created outcomes the original brief hadn't anticipated. Member onboarding time dropped from an average of forty-seven minutes to eleven minutes. Staff freed from manual data re-entry were redeployed to member-facing roles, improving service quality without additional headcount. The single customer view enabled the society to identify members who would benefit from product recommendations, generating £2.3m in additional revenue in the first twelve months. Customer satisfaction scores for account opening increased from 67% to 84%.
The compliance issue that had triggered the programme was resolved with six weeks to spare. The regulatory follow-up inspection noted the society's approach as an example of proportionate and thoughtful compliance implementation — acknowledging not just that they'd met the letter of the requirement, but that they'd addressed the underlying risk properly.