FFIEC IT Examination Handbook

RI-07Availability of Foundational Model

RI-22Regulatory Compliance and Oversight

RI-14Inadequate System Alignment RI-16Bias and Discrimination RI-17Lack of Explainability RI-18Model Overreach / Expanded Use RI-19Data Quality and Drift RI-20Reputational Risk RI-22Regulatory Compliance and Oversight RI-02Information Leaked to Vector Store RI-04Hallucination and Inaccurate Outputs RI-05Foundation Model Versioning RI-06Non-Deterministic Behaviour RI-09Data Poisoning

RI-20Reputational Risk

RI-07Availability of Foundational Model

RI-07Availability of Foundational Model

RI-14Inadequate System Alignment RI-16Bias and Discrimination RI-17Lack of Explainability RI-19Data Quality and Drift RI-04Hallucination and Inaccurate Outputs RI-06Non-Deterministic Behaviour RI-08Tampering With the Foundational Model RI-09Data Poisoning

RI-10Prompt Injection

RI-10Prompt Injection RI-14Inadequate System Alignment

RI-23Intellectual Property (IP) and Copyright RI-08Tampering With the Foundational Model

RI-19Data Quality and Drift RI-05Foundation Model Versioning

RI-18Model Overreach / Expanded Use RI-22Regulatory Compliance and Oversight RI-23Intellectual Property (IP) and Copyright

RI-16Bias and Discrimination RI-17Lack of Explainability RI-18Model Overreach / Expanded Use RI-20Reputational Risk RI-22Regulatory Compliance and Oversight RI-23Intellectual Property (IP) and Copyright RI-04Hallucination and Inaccurate Outputs

RI-01Information Leaked To Hosted Model RI-23Intellectual Property (IP) and Copyright RI-05Foundation Model Versioning RI-07Availability of Foundational Model RI-08Tampering With the Foundational Model

RI-01Information Leaked To Hosted Model

RI-10Prompt Injection RI-01Information Leaked To Hosted Model RI-02Information Leaked to Vector Store RI-08Tampering With the Foundational Model RI-09Data Poisoning

RI-02Information Leaked to Vector Store