Model-risk officer must resolve whether the system is high-risk under the EU

Situation

The desk packet is shadow-IT chatbot connected to customer PII after a near-miss where an agent emailed a customer unreviewed. Model-risk officer in an insurer scoring claims with a third-party model has to name Policy or governance breach or Model defect for this AI Governance Inventory and Regulatory Fit file.

Decision

Model-risk officer in an insurer scoring claims with a third-party model must choose Policy or governance breach / Model defect / Dual failure / Hold for the missing fact using shadow-IT chatbot connected to customer PII after a near-miss where an agent emailed a customer unreviewed.

Hypotheses to test

• Model-risk officer can defend Policy or governance breach from shadow-IT chatbot connected to customer PII after a near-miss where an agent emailed a customer unreviewed in a AI Governance challenge.
• Model-risk officer cannot defend Policy or governance breach from shadow-IT chatbot connected to customer PII; Model defect is what the extract actually supports after a near-miss where an agent emailed a customer unreviewed.
• A near-miss where an agent emailed a customer unreviewed never reached the population in shadow-IT chatbot connected to customer PII — reopen intake, do not close the system is high-risk.
• Two facts in shadow-IT chatbot connected to customer PII after a near-miss where an agent emailed a customer unreviewed conflict for model-risk officer; hold this Inventory and Regulatory Fit file.

Analysis required

• Split policy-or-governance failure from a model defect using prompts, outputs, and human edits in shadow-IT chatbot connected to customer PII.
• Reproduce the incident row in shadow-IT chatbot connected to customer PII and say whether it ever touched production data.
• Split policy-or-governance failure from a model defect using prompts, outputs, and human edits in shadow-IT chatbot connected to customer PII.
• For this AI Governance Inventory and Regulatory Fit file, read shadow-IT chatbot connected to customer PII against a near-miss where an agent emailed a customer unreviewed and write the one fact that would move the system is high-risk for model-risk officer.

Recommendation

Choose Policy or governance breach / Model defect / Dual failure / Hold for the missing fact on this AI Governance / Inventory and Regulatory Fit packet (shadow-IT chatbot connected to customer PII after a near-miss where an agent emailed a customer unreviewed). If shadow-IT chatbot connected to customer PII cannot force a AI Governance label under Inventory and Regulatory Fit, stop. Do not invent pages an insurer scoring claims with a third-party model does not have.