What Is Operational Due Diligence?
Operational due diligence (ODD) is the process of evaluating a third party's operational infrastructure, processes, and controls to assess the operational risk of a business relationship. While financial due diligence focuses on financial stability, ODD focuses on whether the third party can deliver services reliably, securely, and in compliance with applicable standards.
What Operational Due Diligence Covers
ODD evaluates the operational aspects of a third party: service delivery capability, business continuity and disaster recovery, IT infrastructure and security, key person dependencies, process maturity, quality controls, and regulatory compliance. For investment managers and financial service providers, ODD also covers trade execution, custody, valuation, and risk management processes.
ODD vs. Financial Due Diligence
Financial due diligence asks 'Is this organization financially stable?' Operational due diligence asks 'Can this organization deliver services reliably and securely?' Both are essential — a financially stable vendor with poor operational controls can still cause significant disruption. ODD is particularly critical for outsourced critical functions, investment managers, and service providers handling client assets or data.
The ODD Process
ODD typically follows a structured process: send an operational DDQ covering service delivery, continuity, security, and compliance; review responses against benchmarks; conduct site visits or virtual tours for critical vendors; interview key personnel; evaluate process documentation; assess control evidence; and produce an operational risk assessment with risk ratings and recommendations.
How MPG Supports Operational Due Diligence
MPG's questionnaires and assessments module provides configurable ODD templates, automated scoring, red flag detection, and evidence collection. ODD findings feed into the risk register and third-party risk profile, and remediation is tracked through to completion with full audit trails.
Key Takeaways
- Operational due diligence evaluates whether a third party can deliver services reliably and securely
- ODD complements financial due diligence — both are essential
- ODD is particularly critical for outsourced critical functions and investment managers
- ODD findings should feed into the risk register and remediation workflows
Frequently Asked Questions
What is the difference between ODD and vendor due diligence?
Vendor due diligence is a broad term covering all risk dimensions of a vendor relationship. ODD is a specific subset focused on operational risk — service delivery, continuity, security, and process maturity. ODD is commonly used in the financial services and investment management context.
When is ODD required?
ODD is required before onboarding critical vendors, investment managers, or service providers handling client assets. It's also conducted periodically for ongoing relationships and when material operational changes occur. Regulatory expectations for ODD are particularly high in financial services.