SR 11-7
Implement SR 11-7 compliance using ValidMind.
Follow this detailed, step-by-step guide which will:
Walk you through the practical steps required to implement end-to-end compliance using ValidMind.
Link to supporting documentation and training for specific product features.
Focus on actionable implementation rather than just explaining requirements.
Overview
SR 11-7 (Supervisory Guidance on Model Risk Management)1 provides comprehensive guidance to financial institutions on developing and maintaining a robust model risk management framework. By emphasizing the three lines of defense model and the concept of “effective challenge” — SR 11-7 ensures that models are rigorously questioned and tested.
1 Board of Governors of the Federal Reserve System:
SR 11-7: Guidance on Model Risk Management
This guide is organized around the expectations for the three main areas outlined in SR 11-7:
Model development, implementation, and use
Model validation
Governance, policies, and controls
1. Model inventory setup
Purpose
Establish a comprehensive model inventory aligned to SR 11-7 requirements.
Steps
Establish model definition criteria:
- Define what constitutes a model in your organization.
- Document inclusion and exclusion criteria.
- Classify models by type and purpose.
Configure inventory fields:2
- Set up materiality and tiering fields.
- Add fields for model purpose and business use.
- Configure risk rating classifications.
Populate the inventory:3
- Register existing models.
- Document model ownership and stakeholders.
- Track model lifecycle status.
2. Model development documentation
Purpose
Document models according to SR 11-7 development standards.
Steps
Configure documentation templates:4
- Select or create templates aligned to SR 11-7.
- Include sections for purpose, design, theory, and logic.
Document purpose, design, theory, and logic:5
- Clearly state the model’s intended use.
- Document the theoretical basis.
- Explain design choices and methodology.
Document data quality and relevance:
- Assess and document data sources.
- Evaluate data quality and limitations.
- Document data transformations.
Track assumptions and limitations:
- Document all model assumptions.
- Identify known limitations.
- Establish conditions under which the model should not be used.
3. Testing and outcomes analysis
Purpose
Test models for accuracy, robustness, and stability per SR 11-7 requirements.
Steps
Run automated testing using the ValidMind Library:6
- Execute accuracy tests.
- Run robustness and stability tests.
- Document test results.
Perform sensitivity analysis and benchmarking:
- Test model sensitivity to input changes.
- Compare against benchmarks or challenger models.
- Document performance boundaries.
Evaluate limitations and assumptions:
- Test assumption validity.
- Identify conditions where performance degrades.
- Document testing coverage.
4. Independent validation (effective challenge)
Purpose
Implement independent validation aligned to SR 11-7’s “effective challenge” concept.
Steps
Configure validation workflows:
- Set up validation initiation triggers.
- Define validation scope and requirements.
- Establish independence requirements.
Prepare validation reports:7
- Use validation report templates.
- Document validation activities.
- Summarize findings and conclusions.
Track findings and remediation:8
- Document validation findings.
- Assign remediation owners.
- Track remediation progress.
5. Ongoing monitoring and periodic review
Purpose
Implement ongoing monitoring per SR 11-7 requirements.
Steps
Set up monitoring workflows:9
- Configure monitoring frequency.
- Define monitoring metrics.
- Establish escalation procedures.
Configure performance tracking and alerts:
- Set up performance dashboards.
- Configure threshold-based alerts.
- Document alert response procedures.
Schedule periodic reviews:10
- Establish review frequency by model tier.
- Configure review reminders.
- Document review requirements.
6. Governance, policies, and controls
Purpose
Establish governance framework aligned to SR 11-7.
Steps
Configure role-based access:11
- Set up roles for three lines of defense.
- Configure permissions by role.
- Ensure appropriate segregation of duties.
Configure approval workflows:12
- Set up model approval processes.
- Define approval authorities.
- Configure escalation paths.
Enable audit trail and compliance reporting:13
- Configure activity logging.
- Set up compliance dashboards.
- Generate audit reports.