What Is Model Risk?
Executive Summary
Key Takeaways
- ✓ Model risk is the risk that a model, not the underlying business case, is the source of an incorrect decision.
- ✓ This page addresses model risk specifically in Excel based financial models, a distinct focus from the statistical and regulatory capital model risk literature most search results surface.
- ✓ Model risk and forecast risk are frequently conflated but require different mitigations.
- ✓ A model risk score should reflect structural reliability, not the merits of the underlying investment or business case.
- ✓ Model risk assessment, model governance, and model audit are related but distinct disciplines, each with its own dedicated pillar page.
Institutional Definition¶
Model risk is the risk that a financial model produces an incorrect or misleading result due to errors in its construction, logic, or structure, leading to a decision that would not have been made, or would have been made differently, had the model been correct.
This page's definition is deliberately scoped to Excel based financial models. A parallel, larger body of literature addresses model risk in statistical and regulatory capital models (credit scoring models, trading models, and similar), governed by frameworks such as the Federal Reserve's supervisory guidance on model risk management (which superseded the long-standing SR 11-7 in April 2026). That literature is relevant background but addresses a different class of model than the one this page, and FMAE, is concerned with.
Why It Matters¶
Every material financial decision, an investment, a loan, an acquisition, ultimately rests on a set of numbers, and those numbers usually come from a model. If the model is structurally wrong, unrelated to whether the underlying opportunity is good or bad, the decision built on top of it inherits that error.
This is a genuinely distinct risk category from getting the commercial judgement wrong. An investment committee can correctly judge that a business opportunity is attractive and still approve the wrong amount of capital, or the wrong terms, because the model calculating the return contained a structural error nobody caught. Model risk is the exposure that exists purely because a spreadsheet, not the underlying business case, was the point of failure.
Core Concepts¶
Model risk score. A quantified assessment of how much risk a specific model carries, based on its structural characteristics, error findings, and complexity, described further on the Model Risk Score glossary entry.
Structural risk. Risk arising from how a model is built, its architecture, its formula consistency, its handling of circularity, distinct from risk arising from the commercial assumptions fed into it. See Structural Risk.
Model materiality. The degree to which a model's output actually drives a real decision. A highly material model, one directly determining a large capital allocation, warrants far more scrutiny than a low materiality model used for internal reference only. See Model Materiality.
Model validation. The process of confirming a model's chosen methodology and assumptions are appropriate for its intended purpose, distinct from a full financial model audit, which tests mechanical correctness rather than methodological appropriateness. See Model Validation and the Audit vs Validation comparison.
Financial covenant risk. Where model outputs directly determine covenant compliance (a debt service coverage ratio, for example), model risk translates directly into covenant risk for a lender. See Financial Covenant.
Technical Explanation¶
Model risk in an Excel based financial model typically originates from one of a small number of structural sources, each covered by a dedicated technical guide:
- Formula and logic errors — a formula that does not calculate what its label claims.
- Hardcoded values — a typed number silently overriding a live formula.
- Circular references — a calculation dependent on its own output, common in debt sculpting structures.
- Broken or inconsistent links — references to deleted ranges or external files that silently return stale data.
- Documentation and governance gaps — a model that cannot be independently understood or verified without its original author present.
A model risk assessment typically scores a model against these categories, weighted by materiality, to produce a single, defensible risk score. This differs from a full audit in that a risk assessment can be a lighter touch, targeted exercise, while a full audit systematically tests every formula. The relationship between the two is addressed on the Financial Model Auditing pillar page. The exact weighted-scoring formula FMAE applies, including the rules whose triggering can cap a model's grade regardless of its numeric score, is documented in full on the FMAE Scoring Engine — SM-2.0 Methodology page.
Industry Applications¶
Banking and lending. Credit decisions built on a borrower's or counterparty's model carry direct model risk exposure; a miscalculated coverage ratio can misprice an entire facility. See FMAE for Banks.
Portfolio management. Firms holding multiple positions, each with its own underlying model, carry aggregate model risk across the portfolio, not just at the level of any individual investment. See the Portfolio Management content cluster.
Investment committees. Every model presented to a committee carries model risk that the committee is implicitly accepting, whether or not that risk has been explicitly assessed. See FMAE for Investment Committees.
Family offices. Often relying on external advisers' models with limited internal capacity to independently assess model risk, family offices carry a specific form of concentrated exposure to this category of risk. See FMAE for Family Offices.
Common Misconceptions¶
"Model risk only applies to statistical or quantitative models inside banks." That is one branch of a broader field. Model risk applies equally to Excel based financial models used for everyday investment, lending, and transaction decisions, which is this page's specific focus.
"A model that has worked before carries low model risk." A model can operate without visible incident for years while carrying a dormant structural error that has simply never been triggered by the specific inputs used so far.
"Model risk and forecast risk are the same thing." Forecast risk is the risk that an assumption turns out to be wrong. Model risk is the risk that the model itself, independent of any assumption, calculates incorrectly. The two are frequently conflated and require different mitigations.
"A high model risk score means the underlying investment is bad." A model risk score assesses the model's structural reliability, not the merits of the underlying opportunity. A structurally weak model can support a genuinely good investment case, and the appropriate response is to fix or independently verify the model, not necessarily to reject the opportunity.
References & Further Reading¶
The following sources have been verified against their primary publisher and are listed in full, with links, in the References section below. - Federal Reserve, OCC & FDIC — Supervisory Guidance on Model Risk Management (2026, supersedes SR 11-7) - Bank of England PRA — SS1/23: Model Risk Management Principles for Banks - GARP — Model Risk Management (GARP Risk Institute)
The following were named in the original brief but could not be resolved to one specific, citable document during this pass, and still require sourcing before they can be cited: - Basel Committee on Banking Supervision guidance — no single canonical model-risk document confirmed; several BCBS publications touch model risk indirectly. Needs a specific document identified before citing. - Deloitte and EY model risk management industry surveys — needs a specific publication and year.
Continue Reading¶
Related Pillars¶
Related Technical Guides¶
Related Glossary¶
Related Comparisons¶
Related Case Studies¶
Related Resources¶
Related Research¶
- RP-002: Structural Model Risk — A Working Definition — the fuller, academic-register formalization of the definition on this page.
Related Products¶
- Financial Model Audit Engine (FMAE) — deterministic structural auditing referenced throughout this guide
How OXXON tests thisRun a free structural check with FMAE
Frequently Asked Questions
What is model risk?
The risk that a financial model produces an incorrect or misleading result due to errors in its construction, logic, or structure, leading to a decision that would have been different had the model been correct.
How is model risk different from market risk or credit risk?
Market and credit risk concern the underlying economic exposure of a decision. Model risk concerns whether the tool used to evaluate that decision, the model itself, is structurally reliable, independent of the underlying economics.
What is a model risk score?
A quantified assessment of how much structural and materiality driven risk a specific model carries, used to prioritise which models warrant independent audit or closer scrutiny.
Is model risk only relevant to banks?
No. While the most developed regulatory literature on model risk addresses banks and statistical models, any organisation relying on an Excel model for a material decision carries model risk in the same underlying sense.
What is the difference between model risk and forecast risk?
Forecast risk is the risk an assumption proves wrong. Model risk is the risk the model itself calculates incorrectly, regardless of whether the assumptions fed into it are reasonable.
How is model risk measured?
Typically through a structured assessment of a model's structural characteristics (formula consistency, circularity, hardcoded values, documentation quality) weighted by the model's materiality to the decision it supports.
What is model materiality?
The degree to which a model's output actually drives a real decision. High materiality models warrant more scrutiny than low materiality ones, all else being equal.
Can model risk be eliminated entirely?
No, but it can be substantially reduced through structural best practice during model construction and independent verification before the model is relied upon for a material decision.
What is the relationship between model risk and model governance?
Model risk is the underlying exposure. Model governance, described on the Financial Model Governance pillar page, is the organisational system built to identify, tier, and manage that exposure.
What is the relationship between model risk and model audit?
A financial model audit is one of the primary tools used to identify and quantify model risk in a specific model. Not every model requires a full audit; model risk assessment can help determine which models do.
Does model validation address model risk?
Partially. Model validation confirms the model's chosen approach and assumptions are appropriate for its purpose, which addresses one dimension of model risk, but does not test mechanical correctness the way a full audit does.
What is a financial covenant, and how does it relate to model risk?
A financial covenant is a lending condition tied to a specific model output, such as a debt service coverage ratio. Where covenants are model-derived, model risk translates directly into covenant compliance risk for the lender.
What causes most model risk in practice?
Structural issues: formula inconsistency, hardcoded values, circular references, and documentation gaps that make independent verification difficult. These are addressed individually in the FMAE technical guide library.
How does model complexity relate to model risk?
Generally, more complex models (more tabs, more interdependencies, more scenario structures) carry higher structural risk, simply because there is more surface area for an error to hide undetected.
Should every model in an organisation be assessed for model risk?
In principle, yes, though the depth of assessment should scale with materiality. A model tiering framework, described on the Financial Model Governance page, is the usual mechanism for deciding how much scrutiny each model warrants.
What is structural risk specifically?
Risk arising from how a model is architected and built, as distinct from risk arising from the commercial or economic assumptions entered into it. See Structural Risk.
Can a well-built model still carry model risk?
Yes, if its assumptions are unreasonable, though that specific failure mode is better described as forecast or assumption risk. Model risk in the structural sense used on this page is specifically about mechanical correctness.
How do lenders typically respond to elevated model risk?
Often by requiring independent verification, such as a financial model audit, as a condition of proceeding, particularly in project finance and infrastructure lending. See the Project Finance Model Audit page.
Is model risk assessment a one-time exercise?
No. Models change over time as they are updated for new periods, scenarios, or deal terms, and model risk should be reassessed when a model changes materially, not only at its original creation.
What is the single most effective control against model risk?
Independent verification before a model is relied upon for a material decision, combined with a governance framework that ensures this verification actually happens consistently rather than ad hoc.
References
Related Articles
What Is a Financial Model Audit?
A financial model audit is an independent, structured examination of an Excel based financial model to confirm that its mechanics, logic, and outputs are reliable enough to support a decision. It is not a check of whether the assumptions are optimistic or conservative. It is a check of whether the model actually calculates what its author believes it calculates. Every year, lenders extend debt, investment committees approve capital, and boards sign off on transactions using numbers that came out of a spreadsheet nobody outside the immediate deal team has independently verified. A financial model audit exists to close that gap before it becomes expensive.
What Is Financial Model Governance?
Financial model governance is the set of policies, roles, and controls an organisation puts in place to manage the risk that comes from relying on financial models for material decisions. It is the organisational layer that sits above any individual financial model audit: governance determines when a model gets audited, who owns that decision, how versions are tracked, and what happens to findings once they exist. Most published governance content online is written for large, tier one banks operating under formal regulatory regimes. A private equity firm, a family office, or a mid market corporate finance team rarely has that scale of infrastructure, and does not need it, but still carries real exposure if no governance exists at all. This page defines governance at the level that actually applies to most organisations relying on Excel models, not just the largest ones.
Audit vs Validation — What's the Difference?
Financial model audit and model validation are frequently used as interchangeable terms, and specifying the wrong one in a lender requirement or an internal policy leads to real confusion about what has actually been checked. They test different things. An audit tests whether a model's mechanics are correct. Validation tests whether the model's methodology and assumptions are appropriate for its intended purpose. Both are legitimate, useful exercises. They are not substitutes for each other.