Concerns Mount over Core Provider Issues

Why It Matters

Tighter OCC oversight could reduce compliance failures and level the playing field for smaller banks, mitigating systemic risk in the U.S. financial sector.

Key Takeaways

• OCC seeks tighter oversight of core banking providers
• Fiserv, FIS, Jack Henry dominate U.S. core market
• Delayed system updates cause regulatory compliance risks
• Small banks face uneven negotiating power with vendors
• Legacy COBOL systems hinder swift migration and remediation

Pulse Analysis

The core banking ecosystem is increasingly under scrutiny as regulators confront the concentration of power among a handful of legacy vendors. Fiserv, Fidelity National Information Services, and Jack Henry & Associates control the majority of back‑office processing for community banks, creating a de‑facto oligopoly. When these providers lag on software patches or regulatory updates, banks—especially smaller institutions with limited IT resources—risk non‑compliance during examinations, potentially attracting penalties or heightened supervisory attention.

Banks’ reliance on mainframe‑based platforms written in languages like COBOL compounds the problem. Updating core systems often requires specialized knowledge that is dwindling as veteran programmers retire. Consequently, many institutions resort to layering custom code atop the vendor’s core, a practice that spirals into complexity and makes defect resolution slower. The OCC’s recent request for information revealed that banks frequently encounter costly, time‑consuming remediation efforts, and that the power imbalance in vendor negotiations leaves them with few alternatives.

Looking ahead, market dynamics could shift if new entrants break the high barriers to entry that protect incumbent providers. More nimble competitors capable of rapid, compliant updates would pressure the incumbents to improve service levels. Meanwhile, regulators may consider extending supervisory authority directly to core providers, compelling faster compliance fixes and greater transparency. For banks, investing in legacy skill sets or transitioning to modern, cloud‑native core solutions may become essential strategies to mitigate risk and reduce operational overhead.