AI Governance Lead on a high-risk credit AI review
Led a governance review of a high-risk credit AI system across the EU AI Act, NIST AI RMF and ISO/IEC 42001, and defended a Conditional Go decision with evidence.
The question: should Meridian Financial Services approve production deployment of a loan underwriting system that decides 94% of applications automatically?
The system: a third-party credit model (CrediSure Credit Decision Engine v2.3) that auto-approves, auto-denies or routes small-business loan applications to manual review. Derick classified it as a high-risk AI use case because it affects access to credit.
Derick's role: AI Governance Lead.
The decision Derick defended: Conditional Go. In Derick's words: “Proceed with conditions. Meridian should not approve unrestricted production deployment until fairness testing, proxy-bias review, reason code validation, human oversight triggers, appeal procedures, vendor evidence review, monitoring thresholds, and governance committee approval are completed.”
EU AI Act: high-risk classification, fundamental rights impact assessment, human oversight, logging, explanation to affected people, appeal and contestability, deployment conditions.
NIST AI RMF: governance roles, system context, risk measurement and testing evidence, risk treatment, human-AI oversight.
ISO/IEC 42001: management system scope, roles, AI risk assessment and treatment, management review, lifecycle and third-party AI risk.
Tool: VerifyWise (governance dashboard, use case registration, model inventory, dataset record, risk register, vendor record, framework assessments, FRIA).
Certificate of Completion: Becoming an AI Governance, Risk & Compliance Practitioner, an 8-week practitioner program. Issued May 28, 2026 · 20 CPE.
The capstone is a simulated enterprise case built for training, not a review of a real company's system.
Introductions are free. We check with the graduate first, then connect you both by email.
