Credit Risk IRB Inspection & Remediation
Managed a 9-month ECB on-site inspection of IRB models for a major European G-SIB, delivering zero critical findings through real-time ECB engagement and targeted remediation.
The Context
The ECB announced a comprehensive on-site inspection (OSI) of the client's Credit Risk IRB portfolios — covering RWA calculation methodologies, control and frameworks, governance, and data quality across all IRB portfolios spanning corporate, retail, retail mortgage, SME, sovereigns, and institutions segments. This was a high-stakes examination: the inspection team comprised 10 ECB specialists with direct risk expertise, and the bank knew that findings could trigger supervisory capital adjustments or temporary RWA restrictions. The client had 6 weeks to achieve inspection readiness.
Our Role
We stepped in as the bridge between the bank's internal teams and the ECB inspection team. We deployed the Ezelman FORTRESS™ framework — eight defensive positions an OSI must hold from D-120 through the ITR response.
FOUNDATIONS
Governance, model inventory, data lineage across all IRB portfolios — mapped before kickoff.
OPEN DIALOGUE
JST pre-alignment in week 2 surfaced the 3 most sensitive portfolios early.
READINESS DRILL
Mock inspection 5 weeks before kickoff — 60+ information packages stress-tested.
TAXONOMY
Single evidence taxonomy across credit, model, data, IT. Inspector requests fulfilled in hours.
RESPONSE LINE
Daily cadence — liaison, 2LoD, business, IT. One voice at every ECB meeting.
EVIDENCE VAULT
Versioned, access-controlled data room; every document pre-cleared.
SUPERVISORY NARRATIVE
The minor findings were reframed as remediation commitments, not methodology errors.
SUSTAIN
ITR remediation delivered in full. Capability institutionalised — zero repeat findings in 2026 follow-up.
“Their on-site inspection expertise is practical, senior, and effective. They don't advise from the sidelines — they sit with you in the room, negotiate with the inspector, and own the findings line by line.”
The FORTRESS positions manifested in three day-to-day mechanics:
Pre-Inspection Readiness
Conducted a 4-week rapid assessment of all IRB portfolios, identifying gaps vs. ECB expectations (based on recent inspection findings across SSM-supervised banks). We prepared 60+ information packages (model documentation, validation reports, governance records) organised to ECB's request structure.
Real-Time ECB Engagement
We attended 30+ on-site inspection meetings, managing technical Q&A sessions with ECB specialists. When inspectors challenged a methodology or data assumption, we fielded the response in real time, often drafting written clarifications within 24 hours.
Evidence Building
For each portfolio, we assembled a “compliance package” documenting methodology, validation, governance, and historical performance. This evidence was pre-packaged to address the five core ECB inspection modules: Model Documentation, Validation, Data Quality, Governance, and RWA Tracking.
Findings Remediation
When the inspection team raised preliminary findings, we coordinated remediation with the bank's internal teams, drafted corrective action plans, and validated fixes before submission to the ECB.
Inspection Phases
Three phases, named owners on each, single tempo across the 30-week mission.
Readiness
Rapid gap assessment and information package preparation. We reviewed each IRB portfolio against ECB's IRB inspection manual and recent findings from peer inspections.
Key outputs. A data room filled with all pre-cleared answers to expected requests, pre-inspection briefing document, inventories, portfolio risk rankings (to focus ECB time on material areas), and a remediation backlog for quick wins before the inspection started.
On-Site Inspection
14 weeks of intensive on-site work. The ECB team worked on-site at the bank, with daily standups chaired by our senior advisor. We managed the “rhythm” of inspection: morning ECB team coordination, afternoon substantive technical discussions, evening evidence package preparation.
We tracked 800+ data requests from inspectors and resolved 95% within 48 hours. When ECB found methodology gaps, we provided interpretation, proposed solutions, and documented the supervisor's acceptance in real time.
Remediation & Close
ECB issued a preliminary findings letter with < 20 observations (none critical). We coordinated remediation workstreams, drafted corrective action plans with timeline commitments, and validated fixes with the bank's validation team before re-submitting to the ECB.
All issues were resolved within 6 weeks.
Illustration of two findings (for discussion under NDA)
Key Deliverables
Pre-Inspection Assessment
Readiness report covering all portfolios, gap analysis vs. ECB expectations, and a remediation prioritisation framework.
Information Packages
60+ compliance documents (model documentation, validation reports, governance records) pre-organised to ECB inspection request structure.
Data Room Management
Real-time request tracking, 48-hour evidence delivery, daily index updates. Response rate: 95% within 48 hours.
Corrective Action Plans
Two detailed CAPs addressing the findings, with timeline commitments, responsible parties, and validation checkpoints.
Interview Preparation
Bank management and teams prepared with scenario-based dry runs of 30+ meetings with the ECB inspectors — expected questions, evidence cross-references, escalation lines, and post-meeting debriefs. By the time the JST sat down, every interviewee had already lived the conversation twice.
Post-Inspection Roadmap
6 to 12-month enhancement plan addressing observations and strengthening governance for the next inspection cycle.
Results
The inspection concluded successfully — five outcomes the steering committee tracked from day one:
0 critical findings
All issues remained at minor / observation level.
Most minor findings closed
Remediation completed within agreed timelines. No supervisory capital adjustments triggered.
6 observations
Documented and incorporated into a post-inspection enhancement roadmap.
ECB confidence
Inspectors commended the bank's governance maturity and evidence quality. Inspection cycle extended to 3 years (longer intervals for well-run banks).
Internal capability
Bank's risk and finance teams emerged significantly stronger, with clearer governance protocols and supervisor communication discipline.
Book a 30-min diagnostic with the founder.
No slide-ware, no associate intake. A direct, partner-level read on whether the same playbook applies to your situation — and whether you should hire us, hire someone else, or do it in-house.