Large Bank Examination Workshop February 2026

Exercise #4: Review Sample MRM Policy

Evaluate Sample Bank’s Model Risk Governance Policy

Cite pages within the Policy that address the four major governance requirements from regulatory guidance on Model Risk Management, or note if any requirements are missing: 1. Roles and responsibilities: Defines clear lines of accountability for all stages of the model lifecycle, from development to retirement. This includes roles for model developers, business unit owners, independent validators, and senior management oversight.

2. Board and senior management oversight: Assigns ultimate responsibility to the board of directors and senior management for setting the bank's risk tolerance for models. They must ensure that the MRM framework is effective.

3. Independent validation: Requires an independent function to review and challenge model development, implementation, and performance.

4. Internal audit: Mandates that the internal audit function periodically assesses the overall effectiveness of the MRM framework.

© Global Financial Markets Institute, Inc.

Page 26 of 39