Model Risk & Compliance System Oversight

Who this helps—and when to engage

For compliance owners, model risk teams and system governance leaders responsible for financial crime systems.

Engage ICRM when introducing or materially changing a system, preparing for validation, investigating performance concerns or responding to oversight findings.

What the work involves

Review intended use, inputs, assumptions, configuration and governance. Define proportionate testing and effective challenge, examine evidence and identify monitoring needs. Agree implementation advisory and independent assurance roles separately.

A system’s operational importance extends beyond its label. ICRM helps teams consider how data inputs, assumptions, configuration and changes affect performance, and how review and testing can remain proportionate to the consequences of failure.

Work begins with your objectives, current processes and the issues that matter most. Together, we define an appropriate scope, examine the available evidence and identify recommendations your team can implement.

PA/CE and the control environment

Practical Advice connects objectives, regulatory requirements and risk to the intended outcomes. Capabilities that Endure puts those outcomes into operation through clear ownership, controls, reliable information and ongoing monitoring. This integrated perspective aligns with COSO’s Internal Control—Integrated Framework and supports continued adaptation.

How to start

Book a 30-minute conversation with Steve or use the contact form to describe your challenge, current process and desired outcome. Together, we agree the scope, deliverables, responsibilities and commercial terms before work begins.

Experience behind the advice

Led by Stephen D. Marshall, ICRM brings four decades of compliance and internal audit experience to advisory work. Engagements are tailored to the organization and scoped with appropriate independence across the lines of defense.