Case Study: Leading Financial Services Company achieves OCC compliance and streamlined vendor risk management with MetricStream

Leading Financial Services Company Strengthens Compliance with OCC’s Vendor Risk Management Guidelines

A publicly traded financial services firm serving retail investors across North America needed to strengthen vendor governance to meet the OCC’s third‑party risk management guidelines. With more than 200 diverse vendors (from outside counsel to outsourced partners) exposing the bank to business continuity, credit, information security and country risks, the client relied on manual, legacy processes that were inefficient and didn’t scale for regular assessment, monitoring, and reporting.

The client implemented MetricStream’s cloud‑based Vendor Risk Management solution, built on a centralized “3‑pillar” assessment framework aligned to OCC guidance. The platform created a single vendor repository, automated due diligence and risk scoring, prioritized ongoing assessments, closed the loop on issue remediation, and delivered enterprise reporting and dashboards. As a result, ~300 users now manage risk across 200+ vendors with standardized data, faster workflows, improved oversight in line with OCC expectations, and lower time‑to‑value and total cost of ownership.