Skip to content
○ point of view

frameworks,
benchmarks, case studies.

The working papers, industry benchmarks, and regulatory briefings we write for risk committees, boards, and supervisory functions.

benchmark · pdf

The Enterprise AI Governance Benchmark

How Fortune 500 organizations are operationalizing NIST AI RMF, SR 11-7, and the EU AI Act — across financial services, insurance, and healthcare.

working paper · 18 min

Independent assurance for agentic systems

A practical model for third-line oversight of agentic AI — scope, evidence requirements, and attestation patterns.

regulatory briefing · 12 min

What your regulator is actually reading

A plain-language guide to the supervisory AI guidance shaping conversations in financial services, insurance, and healthcare.

working paper · 22 min

Model risk for large language systems

Applying SR 11-7 to models that cannot be fully specified — a practitioner view for model risk officers and internal audit.

case study · 15 min

Global bank: agentic AML through independent assurance

How a global financial institution moved an agentic transaction surveillance system into production with a clean internal audit opinion.

regulatory briefing · 10 min

AI supervision in the Caribbean

How CARICOM data protection regimes, CBTT expectations, and North American supervisory standards intersect for regional financial institutions.