Outsourcing Operational Due Diligence does not mean outsourcing responsibility. That distinction sounds obvious, but it is the point around which a good outsourcing model is built.
An external provider can perform much of the investigative work. It can review documents, interview management, challenge evidence, compare operating models and form an independent professional judgement. But the institutional investor still owns the capital. It still owns the risk appetite. And it still has to decide whether the organisation being reviewed is one to which capital should be delegated.
The strongest outsourcing arrangements therefore do not try to move ODD entirely outside the institution. They are much more deliberate about which work benefits from external specialisation and which judgement genuinely needs to remain internal.
The delegation decision cannot be outsourced
Operational Due Diligence exists because institutional investors delegate capital to organisations they do not control. The purpose of the work is to help determine whether those organisations remain sufficiently governable for that delegation and whether the resulting decision can be defended within the investor's own governance framework.
An external provider can contribute substantially to that judgement. It cannot make the institutional decision.
“An external provider can contribute substantially to that judgement. It cannot make the institutional decision”
This matters because the same ODD conclusion can reasonably have different implications for different investors. A pension fund, insurer, sovereign investor and family office may all review the same manager and place different weight on the same operational weakness. Their liability structures, governance expectations, investment objectives and risk tolerances are not identical.
The external reviewer can explain the issue. It can assess its significance. It can explain how strongly the evidence supports the conclusion. But only the investor can decide whether the resulting risk is acceptable in the context of its own portfolio and governance framework.
That boundary should remain very clear.
Risk appetite should stay inside the institution
Good ODD is not simply a search for unacceptable managers. Most organisations contain weaknesses, dependencies and compromises. The relevant question is usually whether the residual operational risk remains acceptable once those realities are understood.
That is partly an ODD judgement. It is also an institutional judgement.
Consider a manager where a material process remains dependent on a small number of experienced individuals. The external reviewer may conclude that the dependency is real, well understood and only partly mitigated. What happens next depends on the investor. One institution may be comfortable because the strategy is relatively small and highly differentiated. Another may consider the dependency inconsistent with its governance standards. A third may invest subject to monitoring or remediation.
The underlying ODD evidence has not changed. The institutional response has.
This is why risk appetite should not quietly migrate to the service provider merely because the provider performs the review.
Internal teams still need to understand the conclusion
There is a less obvious risk in highly outsourced models. A report can become a substitute for understanding.
The provider completes the review. The document arrives. A rating or conclusion is recorded. The internal process moves forward. That can look efficient. But if nobody inside the institution can explain why the conclusion was reached, the ODD function has become operationally distant from the delegation decision it is supposed to support.
“A report can become a substitute for understanding.”
An institution does not need to recreate every piece of work performed by its provider. That would defeat much of the purpose of outsourcing. It should, however, understand the material issues. If an investment committee asks why a manager was considered acceptable despite a particular weakness, someone inside the institution should be able to explain the answer without simply reading the provider's conclusion aloud.
The same applies where a provider reaches an uncomfortable view. Internal ownership means being capable of challenging that view, not merely receiving it.
Escalation belongs with the investor
This is one of the areas I would be particularly reluctant to outsource completely.
An external provider should identify concerns and make clear when something deserves escalation. But escalation itself sits inside the institution's governance architecture. Who needs to know? Does the issue require discussion with the investment team? Should it reach the investment committee? Does an existing allocation need reconsideration? Is remediation sufficient? Should additional conditions be attached to an investment?
Those are institutional decisions. They often depend on information the external ODD provider does not possess: the size and importance of the investment, the availability of alternatives, the broader manager relationship, portfolio concentration and previous governance decisions.
An outsourced model works much better when the provider has a clear route into the investor's escalation process but does not become the escalation process.
What can sensibly move outside?
Quite a lot.
The work that benefits from specialisation, repeated exposure and independent challenge is well suited to external delivery. That can include document review, manager interviews, evidence testing, analysis of governance and control arrangements, identification of contradictions, drafting of conclusions and the formation of an independent ODD assessment.
There is a good economic reason for this. A specialist ODD provider develops a reference set across many organisations. Its professionals repeatedly encounter different governance arrangements, service-provider models, control structures and organisational changes. That wider exposure can be particularly valuable when the investor's internal team sees certain structures only occasionally.
The provider can also create consistency across reviews through a stable evidence and judgement framework. Lestrade's own methodology is designed around structured evidence, contradiction as signal and consistent escalation, with the aim of improving confidence rather than simply increasing information volume.
Those are areas where external scale can genuinely help.
Internal ownership does not require internal duplication
This is where some outsourcing models become inefficient. An investor hires an external provider but then re-performs substantial parts of the review internally. The internal team re-reads the documents. It repeats questions already asked. It reconstructs the analysis.
At that point, the institution has paid to outsource the work without actually releasing much capacity.
Some internal challenge is healthy. Duplication is different.
The better model is usually to make the division of labour explicit. The external provider should produce work that is transparent enough for the internal team to understand and challenge without having to recreate it. That means the investor should be able to see the relationship between evidence, judgement and uncertainty. Lestrade's methodology deliberately separates residual risk from confidence in the evidence supporting that assessment.
That sort of transparency matters in an outsourced model because it gives internal stakeholders something substantive to interrogate. They do not have to trust a conclusion simply because it came from a specialist. They can understand how strongly it is supported.
The investor should retain the institutional memory
There is another function that can easily become overly dependent on the provider. History.
Managers are often reviewed over many years. An issue that looks minor in isolation may be more interesting when it is the third variation of the same problem. A remediation programme may appear convincing until someone remembers that a similar commitment was made two reviews ago. A leadership change may matter more because it follows several years of turnover.
The external provider can contribute substantially to this history, particularly in a long-term relationship. But the institution should not lose its own memory of why earlier decisions were made.
That history belongs to the investor. It is part of the governance record around the delegation of capital. The practical implication is that outsourced reports and monitoring should integrate into the investor's own systems and decision processes rather than remain an external archive that only the provider really understands.
The relationship with the investment team should remain internal
ODD should be independent of investment enthusiasm. It should not be isolated from the investment process. The internal ODD or risk function often has an important role in translating an operational conclusion into the context of the wider investment case.
Perhaps the manager has an operational weakness that is manageable but should influence position size. Perhaps remediation is required before funding. Perhaps the risk is acceptable but deserves more frequent monitoring. Perhaps the operational issue is sufficiently material that investment conviction cannot compensate for it.
An external reviewer can provide an independent view. But the conversation between operational risk and investment judgement is ultimately an internal one. Keeping that dialogue inside the institution also protects something important: ODD remains part of the delegation process rather than becoming an outsourced compliance exercise.
A good provider should make internal ownership easier
This may be the best test of the outsourcing model. Does the provider make it easier for the institution to retain the responsibilities that should remain internal? Or does it gradually create dependency?
A strong provider should reduce administrative burden while increasing clarity. It should give internal stakeholders a clearer understanding of material risks rather than burying them in work product. It should make escalation easier by distinguishing what genuinely matters. It should be willing to explain and defend its judgement. And it should fit into the investor's existing governance arrangements rather than forcing the institution to reorganise itself around the provider.
This is part of what Lestrade means by low-friction execution: responsive delivery, practical collaboration, predictable processes and work that remains usable within institutional decision-making.
The best outsourcing relationship should create more room for internal judgement, not less.
“The best outsourcing relationship should create more room for internal judgement, not less.”
So what should remain internal?
The list is actually fairly short.
The institution should retain its risk appetite. It should own the delegation decision. It should retain escalation authority. It should understand and be able to challenge material ODD conclusions. It should preserve the institutional history around its managers. And it should own the relationship between operational risk and the wider investment decision.
Much of the investigative and analytical work can sit outside that boundary. That is where outsourcing can create real leverage.
The mistake is to think of outsourcing as transferring ODD responsibility from one organisation to another. A better model is to use external specialisation to strengthen the parts of ODD that benefit from scale, experience and independence, while keeping institutional judgement exactly where it belongs.
With the investor.
