Brief 03 · Technology evaluation and adoption
Possible changes in how institutions evaluate technology providers
What changed
The Federal Reserve's OP-1881 page lists proposed interagency third party risk management guidance from the OCC, Federal Reserve, FDIC and NCUA, describing practices tailored to risk. It is a proposal, not final. Comments are listed as due November 16, 2026.
A separate Federal Reserve proposed guide for traditional community banking organizations, OP-1880, also lists November 16, 2026.
Federal decision path
Third party / vendor management
What changed
The Federal Reserve's OP-1881 page lists proposed interagency third party risk management guidance from the OCC, Federal Reserve, FDIC and NCUA, describing practices tailored to risk. It is a proposal, not final. Comments are listed as due November 16, 2026.
Both documents are proposed, not final. Named officials provide audited authority context, not a claim that one person controls either docket or an institution's purchase.
OP-1881 · Interagency
Proposed, not final. OCC, Federal Reserve, FDIC and NCUA. Listed comment deadline: November 16, 2026. Checked November 5, 2026.
OP-1880 · Federal Reserve
Proposed, not final. Traditional community banking organizations. Listed comment deadline: November 16, 2026. Checked November 5, 2026.
How the decision chain works
PolicySight view
- 1
Agencies publish separate proposals
OP-1881: OCC, Federal Reserve, FDIC and NCUA. OP-1880: Federal Reserve only, for traditional community banking organizations.
- 2
Comment process
Each docket has its own formal comment process. Recheck its listed deadline before considering engagement.
- 3
Potential agency action
Agencies may revise, finalize or withdraw proposals. No outcome or finalization date is predicted.
- 4
Supervisory implementation
Any implementation depends on subsequent agency action and applicable scope. The proposals do not themselves create enforceable standards.
- 5
Institution vendor evaluation
Vendor risk, procurement, IT / security and analytical governance evaluate evidence under the institution's controls.
Who controls this
OP-1881 is a shared interagency process involving OCC, Federal Reserve, FDIC and NCUA. OP-1880 is a separate Federal Reserve process. Institutions retain responsibility for their own vendor evaluation and governance.
Loading audited authority context…
What happens next
Recheck each official docket for a deadline change, revised text, withdrawal or final action. Establish a real customer obstacle before deciding whether a factual comment is useful.
Decision affected
Define the evidence and review process needed to evaluate a new analytical provider proportionately and responsibly.
If vendor evaluation expectations rise, institutions may ask analytical providers for clearer evidence on traceability, model governance and data handling during procurement. Being ready with that evidence shapes sales conversations.
Decision affected
Define the evidence and review process needed to evaluate a new analytical provider proportionately and responsibly.
Why it matters
PolicySight view
The proposals are useful context for understanding onboarding friction. Actual customer experience is needed before claiming that they address a material obstacle for Hedgehog.
Business implications
If vendor evaluation expectations rise, institutions may ask analytical providers for clearer evidence on traceability, model governance and data handling during procurement. Being ready with that evidence shapes sales conversations.
What to watch
- Specific recurring obstacles
- Which institutions are affected
- Existing evidence documentation
- Whether a policy comment would add value
Recommended focus
- Watch for friction in due diligence, contracting, model review and data access requirements when institutions evaluate a provider.
- Watch what evidence would make an institution's evaluation clearer without weakening its controls.
What to watch next
If friction comes from product readiness, an unrelated contract issue or a requirement outside the proposal's scope, address that issue rather than treating it as an advocacy opportunity.