
Model risk teams do not need a lecture on SHAP values. They need reason codes, stable documentation and monitoring that proves the model still behaves as validated.
Every bank we work with wants to use machine learning for credit, fraud and AML. Every one of them also has a model risk management (MRM) function whose job is to say no until three questions are answered: what does the model do, why did it decide this, and how do we know it still works?
1. What does the model do
This is documentation, not mathematics. A model card that states the population, the features, the training window, the exclusions and the known limitations goes further with a validator than any accuracy chart. Write it before training, update it with every release.
2. Why did it decide this
Reason codes are the currency of explainability in banking. For each decision, the top contributing features expressed in business language: “high ratio of new accounts in the last 30 days”, not “feature_47”. SHAP or similar attribution methods are the mechanism; the mapping to language is the product.
3. How do we know it still works
Validation is a point in time. Monitoring is what keeps a model approved. Population stability, feature drift, performance by segment and fairness metrics should be dashboards the MRM team can open, with alerts routed to the model owner.
When these three pieces exist, approval cycles shrink from months to weeks, and the conversation with the regulator becomes a walkthrough instead of a negotiation.
- #AI
- #Banking
- #Model risk