Mata Amessan

The capstone

The question: should Meridian Financial Services approve production deployment of a loan underwriting system that decides 94% of applications automatically?

The system: a third-party credit model (CrediSure Credit Decision Engine v2.3) that auto-approves, auto-denies or routes small-business loan applications to manual review. Mata classified it as a high-risk AI use case because it affects access to credit.

Mata's role: AI Governance Lead.

The decision Mata defended: Conditional Go. In Mata's words: “Proceed with conditions. Meridian should not approve unrestricted production deployment until fairness testing, proxy-bias review, reason code validation, human oversight triggers, appeal procedures, vendor evidence review, monitoring thresholds, and governance committee approval are completed.”

What Mata produced

• AI system profile and intake record
• AI risk register and mitigation summary
• Human oversight and appeal procedure
• Third-party vendor and model review
• Production-readiness decision memo
• Consolidated portfolio report from VerifyWise

Skills demonstrated

• Leading an AI governance review of a high-risk use case, from intake to decision
• Documenting an AI system profile and governance intake record
• Assessing fairness, explainability, automation, vendor and human-oversight risk
• Applying the EU AI Act, NIST AI RMF and ISO/IEC 42001 in practice
• Reviewing a third-party AI model and its vendor
• Designing human oversight, exception review and appeal procedures
• Writing an executive-ready production-readiness recommendation
• Organizing evidence, risks, policies and framework assessments in a governance platform

How each framework was applied

EU AI Act: high-risk classification, fundamental rights impact assessment, human oversight, logging, explanation to affected people, appeal and contestability, deployment conditions.

NIST AI RMF: governance roles, system context, risk measurement and testing evidence, risk treatment, human-AI oversight.

ISO/IEC 42001: management system scope, roles, AI risk assessment and treatment, management review, lifecycle and third-party AI risk.

Tool: VerifyWise (use case registration, model inventory, dataset record, risk register, vendor management, framework assessments, FRIA).

Verified credential

Certificate of Completion: Becoming an AI Governance, Risk & Compliance Practitioner, an 8-week practitioner program. Issued May 28, 2026 · 20 CPE.

The capstone is a simulated enterprise case built for training, not a review of a real company's system.