Board risk committee
The bank whose biggest AI risks had no owner
Meridian Bank (fictional), a mid-sized private bank with ten AI initiatives across credit, compliance, service, and wealth.
Open this portfolio in the demoThe situation
The board risk committee received a list of AI projects from each department, but no way to compare them. Every department reported its initiatives as “on track”. Directors could not tell which ones carried the bank’s real exposure.
What the matrix showed
- Nearly half of the portfolio by size (45%) sat in Authorize, where contracts, data, and regulation decide what AI may do.
- Two of the four Authorize initiatives, retail loan pre-approval scoring and CV screening, had no accountable owner.
- Anti-money-laundering alert ranking was flagged as volume outrunning review: it depends on expert judgment, but analysts now only spot-check thousands of alerts a day.
- External pressure pointed toward risk carried; the bank’s portfolio was only partly aligned with it.
Decisions taken
- Named accountable owners for loan pre-approval scoring and CV screening within 30 days.
- Asked legal to check exposure against vendor liability caps for the three Authorize initiatives without that check, starting with the website chatbot.
- Commissioned a seeded-error test of AML and credit memo reviewers, to show whether review catches mistakes or has become a formality.
- Added the portfolio map and compass to the committee’s quarterly pack.