Aug 21 2026
Cloud

On-Premises or Cloud: How Banks Can Optimize Their Hybrid Infrastructure

Optimizing a hybrid infrastructure involves placing workloads where they can best meet business goals, regulatory requirements and operational outcomes.

Most banks already have a hybrid infrastructure due to the combination of existing legacy systems and years of cloud migration. However, artificial intelligence is putting more demand on infrastructure, and that’s leading to higher cloud costs

It’s important for banks and financial services institutions to optimize their hybrid infrastructure to create operational efficiency, balance flexibility and scalability with security and regulatory requirements, and accelerate AI and analytics initiatives. 

BizTech spoke with Chris Greenwood, vice president of worldwide storage and data services at HPE, about how banks can determine which workloads belong on-premises versus in the public cloud, and best practices for hybrid infrastructure optimization.

Click the banner below to find out how financial institutions can better secure their infrastructure. 

 

BIZTECH: What unique infrastructure challenges do banks face compared with organizations in other industries? 

GREENWOOD: Financial services institutions operate in an environment where infrastructure decisions have direct consequences for regulatory compliance, operational resilience, customer confidence and financial stability. In this sector, technology cannot be evaluated solely on cost, performance or speed to market; it must also meet strict requirements around data protection, sovereignty, security, auditability and business continuity. 

Unlike many other industries, banks must balance continuous innovation while maintaining uninterrupted access to services that customers and economies depend on. Customers expect secure, real-time banking across digital and physical channels, with immediate responsiveness and minimal tolerance for disruption. As switching providers becomes easier, availability, performance and digital experience are increasingly critical to customer retention and competitive differentiation. 

READ MORE: How can you optimize your hybrid cloud environment?

At the same time, many established banks continue to rely on complex core systems that are essential to day-to-day operations but expensive to run, difficult to integrate and not always designed for cloud-native models. Those same systems often hold the data required to power AI, analytics, fraud detection and next-generation customer experiences. 

The central infrastructure challenge for banks is, therefore, not simply modernization, but controlled modernization. They need the flexibility to adopt new technologies, including AI, while ensuring compliance, security and resilience across increasingly complex hybrid and multicloud environments. 

BIZTECH: What should a modern hybrid infrastructure strategy look like for a bank in 2026? 

GREENWOOD: A modern hybrid infrastructure strategy for a bank in 2026 should be designed around workload choice, data control and operational resilience. Most banks will continue to operate across a mix of public cloud, private cloud, on-premises infrastructure and edge environments. The priority is not to standardize on a single location, but to place each workload where it delivers the right balance of performance, risk, cost and compliance. 

Data architecture is equally important. AI and analytics are becoming central to fraud detection, risk management, customer personalization and operational decision-making. That makes data strategy inseparable from infrastructure strategy. Banks need secure, high-performance, well-governed data platforms that can support AI at scale without compromising control over sensitive information. 

Automation will also be essential. Deployment, security policy enforcement, monitoring and day-to-day management must become more consistent across environments to reduce operational complexity and improve speed. 

At the same time, banks need to plan for emerging risks, including the security implications of quantum computing. Post-quantum readiness should become part of long-term cyber resilience planning, alongside identity and access management, segmentation, continuous monitoring, encryption and robust recovery capabilities. 

Ultimately, the right strategy is one that allows banks to innovate confidently, knowing their infrastructure is secure, resilient, compliant and adaptable. 

BIZTECH: What are the benefits of an optimized hybrid infrastructure? 

GREENWOOD: An optimized hybrid infrastructure allows banks to modernize and innovate without compromising the control, security and resilience the sector requires. The benefit is not simply greater technical flexibility; it is the ability to deliver better business outcomes with greater confidence. 

GET THE DETAILS: Build a data infrastructure that supports AI initiatives.

One of the most important benefits is greater agility. Banks can respond more quickly to market changes, regulatory requirements and customer expectations by adapting capacity and services without large-scale infrastructure rebuilds. 

A hybrid infrastructure also supports better cost discipline. Workloads can be placed in the most appropriate environment based on performance, compliance and economics, helping banks improve utilization and manage variable demand, particularly as AI and data-intensive workloads grow. 

Hybrid infrastructure also strengthens governance. Sensitive or residency-restricted data can remain in controlled environments, while less sensitive or more elastic workloads can take advantage of cloud scalability. With consistent policy enforcement and auditability, banks can maintain control across the full estate. 

Resilience is another critical advantage. Stronger failover, disaster recovery and multisite redundancy reduce the risk that a single platform issue will become a broader service disruption. 

Hybrid infrastructure can accelerate innovation. Banks can build and scale new applications, digital services and AI capabilities on secure, well-managed data foundations, allowing experimentation to happen within clear governance guardrails. 

BIZTECH: How can banks determine which workloads belong on-premises versus in the public cloud? 

GREENWOOD: Workload placement should be viewed as a risk, cost and outcome decision rather than a purely technical one. The question is not simply whether a workload can run in the cloud, but whether the bank can consistently meet — and demonstrate that it meets — its obligations for control, security, performance, resilience and compliance in that environment. 

Workloads that require a high degree of determinism and direct control may be better suited to on-premises infrastructure or private cloud, because this can reduce complexity, simplify assurance and support stronger operational control. Such workloads may include core transaction systems with deep dependency chains, tight integration with legacy platforms, stringent latency requirements or recovery commitments where predictability is more important than elasticity. 

The public cloud may be more appropriate for modular, cloud-native or highly variable workloads that benefit from rapid scalability, faster development cycles and access to specialized services. When applications are engineered for portability, supported by mature automation and governed by strong policy controls, public cloud can accelerate delivery and provide flexible capacity. Examples include development and testing environments, customer-facing digital applications, and analytics platforms — provided that appropriate security, governance and data controls are in place. 

In practice, most banks will continue to operate a hybrid model. The most mature institutions will not treat hybrid as a compromise but as a deliberate strategy that places workloads where they can best meet business goals, regulatory requirements and operational outcomes.

Chris Greenwood at HPE
In this sector, technology cannot be evaluated solely on cost, performance or speed to market; it must also meet strict requirements around data protection, sovereignty, security, auditability and business continuity.”

Chris Greenwood Vice President of Worldwide Storage and Data Services, HPE

BIZTECH: How can banks optimize costs across hybrid environments? 

GREENWOOD: Cost optimization in hybrid environments starts with end-to-end visibility. Banks need a clear view of expenditure, utilization and workload demand across on-premises, private cloud and public cloud environments. Without that visibility, it becomes difficult to identify inefficiency, control consumption or determine whether workloads are running in the most economically appropriate environment. 

From there, banks can continuously rightsize workloads, consolidate underutilized resources and match consumption models to demand. Variable workloads may benefit from pay-as-you-go models, while predictable workloads may be better suited to reserved capacity or as-a-service models such as HPE GreenLake. The goal is to align cost structure with business need rather than overprovisioning for uncertainty. 

Automation is also critical. Automated provisioning, scaling and decommissioning help prevent cost inefficiencies from reappearing over time. Strong vendor management, volume commitments, service-level agreements and regular financial reviews can further improve unit economics. 

However, cost optimization should not be treated in isolation. In banking, the lowest-cost environment is not always the right environment. The better measure is business value: whether each workload is running in the place that delivers the right combination of cost, performance, resilience, compliance and control.

BIZTECH: Are there additional best practices for optimizing financial institutions’ hybrid infrastructure? 

GREENWOOD: Beyond cost management, financial institutions should focus on the operating disciplines that make hybrid infrastructure secure, resilient and repeatable at scale. 

Automation and orchestration are foundational. Banks need consistent deployment, configuration and management practices across environments to reduce manual effort, limit operational risk and improve speed. Security governance must also be consistent. Policies, monitoring, threat detection, identity controls and encryption should apply across the hybrid infrastructure so that security does not fragment as workloads move. 

UP NEXT: Learn why it’s so difficult to measure the return on your artificial intelligence investments.

Data governance is equally important. Clear policies for data classification, access, retention, residency and lifecycle management make workload placement decisions more repeatable and auditable. 

Open standards and application programming interfaces can help preserve flexibility, reduce lock-in and support interoperability across platforms. That flexibility is important because banks need to make workload decisions based on risk, performance and economics, not platform constraints. 

Resilience must be tested continuously. Disaster recovery drills, security assessments and operational resilience exercises help validate that the environment performs as expected under real-world conditions. For banks, resilience must be proved, not theoretical. 

BIZTECH: What metrics should IT leaders track to ensure their hybrid infrastructure investments are delivering value? 

GREENWOOD: IT leaders should track metrics that connect infrastructure performance directly to business value, risk management and customer experience. Hybrid infrastructure should not only run efficiently but also improve the bank’s ability to deliver secure, resilient and differentiated services. 

Key metrics include availability, latency, transaction success rates and throughput, particularly for customer-facing and payment-related services. These indicators show whether the infrastructure is supporting the performance expectations of modern digital banking. 

Cost metrics are also important, including actual versus budgeted spending, cost per transaction, utilization rates and total cost of ownership. These metrics help determine whether workload placement and consumption models are delivering the expected economic benefit. 

DISCOVER: Turn data into insights and accelerate artificial intelligence initiatives.

Security and compliance metrics should include incident volumes, vulnerability remediation times, audit results, policy compliance and control coverage across environments. 

Resilience metrics are essential in financial services. Banks should monitor recovery time objectives, recovery point objectives, failover success rates and disaster recovery test outcomes. 

Finally, IT leaders should measure business impact: time-to-market for new services, speed of regulatory change implementation, customer satisfaction, developer productivity and operational efficiency. The strongest hybrid strategies are those that improve not only infrastructure performance but also the bank’s ability to compete, innovate and earn customer trust.

Fly View Productions/Getty Images
Close

New Research from CDW Explores AI and Cybersecurity

Learn how AI is helping IT teams manage risk and improve resilience.