**Model risk**: Potential adverse consequences from decisions based on incorrect or misused models - **Model inventory**: Required for all models; must include model purpose, use, owner, validation status - **Ongoing monitoring**: Not just at deployment; performance must be monitored in production -