
Risk register
Each risk scored by impact and likelihood, with an owner and status — mapped to the categories that drive your compliance score.
Open risks
7
8 on the register
High exposure
2
Impact × likelihood ≥ 15
Being mitigated
3
Work under way
Closed
1
Resolved or accepted off
Exposure matrix
Open risks plotted by impact and likelihood.
By score category
Data Lineage
1 open risk · category score 86
Explainability
1 open risk · category score 100
Fairness
1 open risk · category score 21
Model Risk
1 open risk · category score 65
Resilience
1 open risk · category score 86
Security
1 open risk · category score 60
Third Party
1 open risk · category score 50
Register
Credit model approves unfairly across protected classes
Fairness · owned by Priya N. · raised 2026-09-13
Fair-lending exposure if the credit scoring model shows disparate impact under ECOA/Reg B.
Prompt injection on customer-facing agent
Security · owned by L. Dubois · raised 2026-09-13
Guardrails may not block injection attacks against the service copilot.
Model inventory out of date
Model Risk · owned by D. Osei · raised 2026-09-13
New AI systems deployed without being registered under SR 11-7 model risk management.
Training data lineage incomplete
Data Lineage · owned by R. Alvarez · raised 2026-09-13
Cannot evidence data sources for the fraud detection model during BCBS 239 review.
Kill-switch runbooks untested
Resilience · owned by M. Chen · raised 2026-09-13
Incident response for high-criticality models depends on untested failover procedures.
Vendor model terms changed without review
Third Party · owned by A. Novak · raised 2026-09-13
Third-party foundation model updated its terms; OCC 2013-29 review not yet refreshed.
Explanations not understandable by reviewers
Explainability · owned by S. Kapoor · raised 2026-09-13
Adverse-action reasons generated by the model fail internal explainability standards.
Bias drift in collections model
Fairness · owned by Priya N. · raised 2026-09-13
Recent monitoring shows accuracy diverging across customer segments.