A-P07 · PROCESS · readinessGRA dossier · service level R0
GRAAI and Financial Model RiskIn development
Readiness

Resilience and finance readiness

What readiness means in AI and Financial Model Risk: the evidence, governance and documentation a programme needs before a competent institution can review it independently.

Publisher
The Global Risks Alliance
Field
Artificial intelligence, Financial stability
01In brief

The short answer.

Readiness in AI and Financial Model Risk is the state in which a programme's evidence, governance and documentation let a competent institution review it independently, against frameworks such as Supervisory Guidance on Model Risk Management (SR 11-7) and Model risk management principles for banks (SS1/23). A readiness file is released only at the owner's written direction, and GRA does not approve, rate, underwrite, lend or invest.

02Canvas

Scoping to review.

Canvas · scoping to reviewDesign, not a record
Resilience and finance readiness: model risk lifecycleEvery model is inventoried and tiered; development is documented; independent validation tests conceptual soundness, outcomes and benchmarks; approval sets limits of use; monitoring and periodic review keep it current until it is retired. Design of the process, not a record of a run.

Fig.A programme from scoping to the owner's decision. Design, not a record.

03Spatial finance

From a satellite tile to an exposure update.

How satellite radar turns a flood into an exposure update. Synthetic scene; no real event or place.

How satellite radar maps a flood and updates the count of affected buildings.Synthetic scene and schematic model; no real event or place.
04Readiness

Readiness is not approval.

A readiness file describes a programme's evidence, risks and governance so that an institution can carry out its own review. GRA does not approve, rate, underwrite, lend or invest, and it recommends no counterparty.

05Regimes

Model and AI rules side by side.

RegimeScopeKey expectation
SR 26-2 (US, April 2026)Models at banking organisations; generative and agentic AI stated to be outside scopeRisk-based, tailored model risk management commensurate with model use
PRA SS1/23 (UK)Banks with internal model approvalFive principles: identification, governance, development, validation, mitigants
EU AI Act with AI OmnibusHigh-risk AI including creditworthiness and life and health insurance pricingObligations apply from 2 December 2027
NIST AI RMFVoluntary, all sectorsGovern, map, measure, manage
06Gap

Generative AI sits between regimes.

With SR 26-2 placing generative and agentic AI outside its scope, US banks govern those systems through broader risk management and third-party expectations while supervisors develop specific guidance. GRA reports this as a gap in the record, not as a rule. Topic depth at generative AI in finance; oversight at GRF AI oversight and accountability.

07Release

Who sees a readiness file.

A file is released only at the programme owner's written direction, to a party the owner chooses, with no fee tied to any transaction.

08Key terms

Terms used on this page.

Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.

TermDefinition
Readiness fileA document set describing a programme's evidence, risks, governance and data so that a competent institution can carry out its own independent review; it is not an approval, rating or offer of finance.
Due diligenceThe independent investigation a lender or investor carries out before committing finance.
Environmental and social safeguardsRequirements lenders set so financed projects avoid, minimise and offset harm to people and the environment.
Model validationIndependent testing that a model performs as intended and is fit for a stated use.
10Pages

Pages in Resilience and finance readiness.

11Questions

Questions and answers.

Does a readiness file mean finance is available?
No. It supports an independent review by the competent institution, which decides under its own rules.
AI and Financial Model Risk

Bring your expertise to this field.

The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.

Skip to toolbar