-
Auditing Agentic AI: When the System Acts, Not Just Answers
A chatbot that gives a wrong answer embarrasses the company; an agent that takes a wrong action refunds a customer, deletes a database, grants an administrator role or…
Updated
·
25–37 minutes -
Auditing Enterprise AI Governance: A Program for the NIST AI RMF and EU AI Act Era
Enterprise AI governance is the set of structures through which an organization decides which AI systems it builds or buys, how much risk each may carry, who is…
Updated
·
20–30 minutes -
SR 11-7 and SR 26-2 Explained: The Model Risk Guidance, From 2011 to 2026
For fifteen years SR 11-7, the 2011 interagency Supervisory Guidance on Model Risk Management, defined how US banks govern their models, and its vocabulary (effective challenge, conceptual soundness,…
Updated
·
18–27 minutes -
PD, LGD and EAD Explained: The Building Blocks of Credit Risk Measurement
Every quantitative statement about credit risk rests on three parameters: the probability that a borrower defaults (PD), the share of the exposure lost when it does (LGD) and…
Updated
·
20–30 minutes -
How to Audit Model Risk Management End to End: Inventory, Validation, Remediation
Model risk management has a framework audit of its own, and the 2026 interagency guidance that replaced SR 11-7 changed what the auditor measures against. This guide gives…
Updated
·
18–28 minutes -
Deposit Beta Modeling: How Banks Estimate Betas and How to Audit Them
How banks model deposit betas and how internal auditors test them: what a deposit beta is and the ways it is measured, why betas decide net interest income,…
Updated
·
19–28 minutes -
Vendor and Third-Party Models: Validating What You Cannot See Inside
Vendor does not mean exempt: the types of vendor model and what is visible in each, six due-diligence substitutes for transparency, the customisation boundary where your configuration becomes…
Updated
·
19–28 minutes -
How to Audit End-User Computing: Spreadsheet Risk and the EUC Inventory
The end-user computing audit program: why spreadsheets and other user-built tools keep producing wrong numbers, what counts as an EUC, discovery and inventory from six sources when asking…
Updated
·
19–29 minutes -
Value at Risk (VaR) Explained: Definition, the Three Methods, Backtesting and Limits
Value at Risk is a single number that answers a precise question: over a given horizon, at a given confidence level, what is the most this portfolio should…
Updated
·
18–27 minutes