After the passing of Dodd-Frank, vendor management, as applied to financial institutions became much more complex. Each regulatory body (OCC, FDIC, NCUA, OCC and the Federal Reserve) has issued their own rules and guidelines for achieving and maintaining compliance with the new regulations. The monitoring aspect of these guidelines require financial institutions and their vendors to communicate and exchange critical information more frequently and on a much deeper level. CUSO's (Credit Union Service Organizations for the uninitiated) and some financial "super vendors," have a particularly challenging problem due to the multiple layers of one-to-many relationships.
The monitoring requirement increases the number of minimum interactions between a vendor and credit union exponentially. The frequency and depth of these interactions depend upon the risk posed by each service provided. High risk vendors (payments, clearing, settlement) must be monitored at a higher frequency than low risk vendors (non-core, staffing, facilities etc.). For example, a high risk vendor might require the review of monthly SLA's, quarterly performance and qualifications, whereas a low risk vendor might only require the review of insurance and qualifications annually.
Adding to this complexity for CUSOs is the fact that many of them provide more than one service and may utilize downstream vendors as well. Each of these services has an independent risk profile and associated monitoring frequency. Just delivering these documents to their Credit Union clients can quickly become an unmanageable problem: a seemingly infinite number of interactions. This is an exponential problem and unfortunately, the existing tools (email, spreadsheets, people) are linear solutions and won't solve it without increasing costs.
Fortunately, the latest influx of solutions from the Internet has provided us with several models that give us hints on how to untie this knot. For instance, the sharing or collaborative economy model illustrates a clear path to getting to scale without breaking the bank by opening up the data and enabling each participant to create valuable data.
At TrustExchange, we've studied this problem from several industry points of view: finance, logistics, shipping and healthcare and have built a product that leverages a few of these key innovations to solve the compliance problem. CUSO's have a unique challenge because of their position as a "super vendor" and sitting in the middle of a large compliance interchange. By creating a solution that leverages lessons from the collaborative economy, we've built a scalable platform that solves this problem for CUSO's and Credit Unions simultaneously.
Contact us to learn more about how we can solve this problem for you!