PRA SS1/23 — Model Risk Management Principles for Banks

PRA SS1/23 — Model Risk Management Principles for Banks — 100% of in-scope requirements covered.

6 requirements · 5 in scope (5 enforced) · 1 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.

PRA SS1/23: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. principle1-model-inventory-resolution · enforced

    Principle 1 — every consequential model use resolves against a complete model inventory entry (identification…

    Audit events: kye.evidence.tool_call.v1, kye.replay.context_seal.v1, kye.evidence.pack.v1 · Rule packs: kye:rule-pack:model-risk-data-governance · Constitution: 13 resilience loop

  2. principle2-governance-named-authority · enforced

    Principle 2 — governance: model decisions proceed under recorded, named (SMF-accountable) authority

    Audit events: kye.purpose.request.v1, kye.purpose.admissibility.v1, kye.evidence.decision_map.v1 · Rule packs: kye:rule-pack:model-risk-data-governance · Constitution: 12 purpose permission

  3. principle3-development-implementation-use · enforced

    Principle 3 — model development, implementation and use (incl. explicit AI/ML scope): use stays within…

    Audit events: kye.purpose.request.v1, kye.purpose.admissibility.v1, kye.evidence.decision_map.v1, kye.evidence.pack.v1 · Rule packs: kye:rule-pack:model-risk-data-governance · Constitution: 12…

  4. principle4-validation-status-binding · enforced

    Principle 4 — independent validation: the validation outcome and revalidation status are bound to every use…

    Audit events: kye.evidence.decision_map.v1, kye.evidence.pack.v1, kye.replay.context_seal.v1 · Rule packs: kye:rule-pack:model-risk-data-governance · Constitution: 13 resilience loop, 21 delegated…

  5. principle5-mitigants-restrictions · enforced

    Principle 5 — model risk mitigants: declared restrictions on use and exception handling enforced at the…

    Audit events: kye.purpose.request.v1, kye.purpose.admissibility.v1, kye.evidence.decision_map.v1 · Rule packs: kye:rule-pack:model-risk-data-governance · Constitution: 12 purpose permission, 25 edge…

  6. independent-validation-judgment · out-of-scope

    Independent validation judgment, model quality assessment, and the quantitative work on the merits

    (no enforcement cited)

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: Bank of England Prudential Regulation Authority Supervisory Statement SS1/23 sets five model risk management principles for banks: Principle 1 — model identification and model risk classification (a complete model inventory); Principle 2 — governance (board responsibility and a named SMF accountable for the MRM framework); Principle 3 — model development, implementation and use; Principle 4 — independent model validation; Principle 5 — model risk mitigants (restrictions on use, post-model adjustments, exception handling). SS1/23 explicitly brings AI/ML models — including dynamically recalibrating models — within scope. KYE Protocol™ governs whether a model-driven output may PROCEED to a consequential decision — register-resolved, validated, in approved scope, under a recorded named authority, with model changes as named-authority decisions with evidence and declared use-restrictions enforced at the action boundary. KYE™ does not develop or validate models, judge model quality, or perform the quantitative work. · License: SS1/23 is published by the Bank of England PRA and is publicly available; the KYE™ registry paraphrases each principle's intent and cites the official principle identifier for mapping purposes only.

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
Model identification & inventory resolution (Principle 1)11000100%
Governance & named SMF accountability (Principle 2)11000100%
Model development, implementation & use incl. AI/ML (Principle 3)11000100%
Validation-status binding at the moment of use (Principle 4)11000100%
Model risk mitigants & restrictions on use (Principle 5)11000100%
Independent validation judgment & quantitative work on the merits100000%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
pra-ss1-23.principle1-model-inventory-resolutionPrinciple 1 — every consequential model use resolves against a complete model inventory entry (identification & risk classification)enforcedaudit_events: kye.evidence.tool_call.v1, kye.replay.context_seal.v1, kye.evidence.pack.v1
engines: internal, internal
rule_packs: kye:rule-pack:model-risk-data-governance
dictionaries: internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md
pra-ss1-23.principle2-governance-named-authorityPrinciple 2 — governance: model decisions proceed under recorded, named (SMF-accountable) authorityenforcedaudit_events: kye.purpose.request.v1, kye.purpose.admissibility.v1, kye.evidence.decision_map.v1
engines: internal, internal
rule_packs: kye:rule-pack:model-risk-data-governance
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
pra-ss1-23.principle3-development-implementation-usePrinciple 3 — model development, implementation and use (incl. explicit AI/ML scope): use stays within approved scope at the action boundaryenforcedaudit_events: kye.purpose.request.v1, kye.purpose.admissibility.v1, kye.evidence.decision_map.v1, kye.evidence.pack.v1
engines: internal, internal, internal
rule_packs: kye:rule-pack:model-risk-data-governance
constitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/25-EDGE-GOVERNANCE.md
pra-ss1-23.principle4-validation-status-bindingPrinciple 4 — independent validation: the validation outcome and revalidation status are bound to every use at the moment of useenforcedaudit_events: kye.evidence.decision_map.v1, kye.evidence.pack.v1, kye.replay.context_seal.v1
engines: internal, internal
rule_packs: kye:rule-pack:model-risk-data-governance
constitution_refs: constitution/13-RESILIENCE-LOOP.md, constitution/21-DELEGATED-AUDITABILITY.md
pra-ss1-23.principle5-mitigants-restrictionsPrinciple 5 — model risk mitigants: declared restrictions on use and exception handling enforced at the action boundaryenforcedaudit_events: kye.purpose.request.v1, kye.purpose.admissibility.v1, kye.evidence.decision_map.v1
engines: internal, internal
rule_packs: kye:rule-pack:model-risk-data-governance
constitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/25-EDGE-GOVERNANCE.md
pra-ss1-23.independent-validation-judgmentIndependent validation judgment, model quality assessment, and the quantitative work on the meritsout-of-scope(no enforcement cited)

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.