FRM Part II · FRM Exam Part II · Case Study: Model Risk and Model Validation
A bank uses a vendor-supplied option pricing model as a black box. The vendor refuses to disclose the code and documentation is minimal. Which statement best reflects how model risk should be handled?
The bank remains responsible for vendor models and should validate them as far as possible through benchmarking, outcomes analysis, and sensitivity testing, plus compensating controls and monitoring. Lack of code access does not remove the model from the inventory or shift model risk to the vendor.
- AThe bank should still validate the model, using benchmarking, outcomes analysis and sensitivity testing, and set controls around its useCorrect
- BValidation is unnecessary because the vendor bears the model risk
- CValidation is impossible, so the model should be exempt from the inventory
- DOnly the vendor's own audit report needs to be filed
Explanation
Vendor models remain the bank's responsibility. Even without code access, the bank can run benchmarking against alternatives, back-test outcomes, test sensitivities, and put limits and monitoring in place. Exempting it or relying solely on the vendor leaves model risk unmanaged.
Did you get it right without looking?
One question tells you little. A timed set on Case Study: Model Risk and Model Validation shows your real accuracy, how long you take and where you lose marks.
More Case Study: Model Risk and Model Validation questions
- Which statement best describes the role of ongoing monitoring within the model validation framework?
- A bank's VaR model is validated by comparing its output with a simpler benchmark model built independently on the same portfolio. The two pr…
- Which of the following is the best example of a control that mitigates model risk through limiting how a validated model is used?
- A bank's model inventory lists 120 models. Internal audit finds that 18 models are used in production but absent from the inventory, and 12 …
- A bank's board is reviewing model risk governance. Management proposes: (1) the board approves the model risk policy and receives periodic r…
- A bank's VaR model has been backtested over 250 days at 99% confidence and produced 9 exceptions. Validators conclude the model is likely un…