A sourced, alphabetical buyer guide to model validation and MRM advisory firms, organized for fit assessment rather than manufactured rankings.
The right model risk management firm depends on the models in scope, governing framework, independence requirements, technical methods, jurisdiction, and delivery capacity. This guide groups the directory's advisory firms alphabetically and provides a verification checklist. It does not assign rankings, scores, or endorsements without comparable evidence.
A list of famous consulting brands is not a shortlist. Buyers need to distinguish enterprise consultancies, specialist validation firms, actuarial practices, quantitative-risk boutiques, and implementation partners. The evidence needed for a bank credit model is different from the evidence needed for an insurer's capital model or an AI model inventory program.
Model risk management firms can help design or assess an MRM framework, validate individual models, review model inventories and tiering, test monitoring programs, remediate findings, support internal audit, or advise on regulatory transitions. Scope and independence must be explicit because a firm that developed a model may not be suitable to validate it.
Skip the cold search. Send this scope to us and we route it toward qualified top model risk management firms firms.
Request firmsNamed regulatory guidance relevant to this category. Listed for context; they do not endorse this index or any vendor. Verify any framework alignment claim directly against the issuing body.
Alphabetical and rank-agnostic. Inclusion is based on the sourced vendor records in this directory, not payment, review scores, or an endorsement.
4most's Assurance and Validation practice validates credit and other risk models across the full sophistication spectrum, including machine learning and vendor models, for banks and insurers, with a dedicated Model Risk Management service line.
Accenture's Finance & Risk practice advises banks on model lifecycle transformation and independent model validation, including a documented engagement helping an Italian bank redesign its validation framework for Advanced Internal Ratings-Based (AIRB) credit risk capital models.
Aon's Strategy and Technology Group offers independent model review and validation for insurers' capital models, distinct from its model-building and modeling-platform work, to provide assurance on capital model robustness.
Baker Tilly's Model Risk Management specialty practice supports banks and financial institutions across the model lifecycle, including MRM framework implementation, model governance, and validation engagements for CECL, asset/liability management, and BSA/AML models, referencing SR 11-7, OCC Bulletin 2011-12, and the 2026 interagency update SR 26-2.
Baringa advises financial institutions on model risk management frameworks and model validation cadence, including guidance aligned to the UK PRA's SS1/23 model risk management principles for banks, which took effect in May 2024.
Capco advises banks on model risk governance frameworks for both traditional and AI/ML models, applying the model lifecycle of testing prior to use, ongoing monitoring, independent validation, and remediation.
CRA's Financial Economics practice performs model validation, model development review, and gap assessments for compliance with SR 11-7/SR 26-2 and OCC model risk management guidance, including consumer credit and fraud-detection model validation for banks and fintech lenders.
Deloitte Risk & Financial Advisory runs a dedicated Model Risk Management practice for banks covering the full model lifecycle, including model development support, independent validation, governance and policy design, and model inventory and tiering.
EY's Financial Services Risk Management practice runs named Model Risk Management and Model Validation solutions for banks, including a proprietary EY BPM Platform used to automate model validation workflows, risk classification, and ongoing monitoring within a single controlled environment.
Finalyse's Model Validation service provides an independent second opinion on banks' and insurers' risk models, covering IRB PD/LGD/EAD credit scorecards, IFRS 9, market risk (FRTB, VaR), IRRBB, and machine learning models.
Genpact provides model validation and model risk management services and technology for banks, combining a centralized model inventory, an automated MRM workflow of over 30 activities, and structured risk reporting through its Cora RiskMonitor platform.
Grant Thornton member firms run model risk management practices for banking clients covering governance and policy, risk-based model tiering, model inventory, model validation and audits, and ongoing model monitoring, with teams supporting European Central Bank onsite inspection and internal model investigation missions.
KPMG's Modeling and Analytics practice, part of its Financial Services Regulatory Compliance Risk advisory line, helps banks build sustainable model validation and model risk management programs, including model inventory, risk-tiering, and life-cycle governance, and supplements internal quant model development and validation teams.
McKinsey's Risk and Resilience practice advises large banks on model risk management strategy and model life-cycle transformation, including how banks tier and time initial and periodic validation of Tier 1 to Tier 3 models to manage validation backlogs and capacity constraints. This classical MRM advisory work sits within core McKinsey Risk and Resilience, distinct from QuantumBlack, McKinsey's AI arm, whose public banking work centers on generative AI model building rather than independent model validation.
Milliman reviews and validates insurers' and reinsurers' internal capital models and catastrophe models, assessing theoretical structure, key assumptions, technical implementation, and documentation against industry practice.
Oliver Wyman's risk consulting practice advises banks, insurers, and US subsidiaries of foreign banking organizations on model risk management and model validation, including how to structure the interaction between model development and independent validation teams to meet CCAR, resolution-planning, and other regulatory model requirements, and offers benchmark challenger models such as CommForecaster for validating incumbent commercial and industrial credit models.
Protiviti's Model Risk practice performs independent model validations for institutions ranging from large global investment banks to midsized commercial banks and Federal Home Loan Banks, covering retail, commercial, trading-desk, and risk-management models, and supports model risk governance program development under SR 11-7/SR 26-2, OCC guidance, and related interagency guidance.
PwC's Financial Risk Analytics and Modeling practice provides model development and independent model validation for banks across credit risk, market risk, ALM/interest rate risk, and BSA/AML models, and supports internal audit teams in assessing the design of a bank's independent model risk management program.
RiskSpan provides independent model validation for mortgage, structured finance, vendor, and interest-rate models, assessing conceptual soundness, ongoing monitoring, and outcomes analysis, including CECL model validation engagements for commercial banks.
S&P Global Market Intelligence's Benchmarking Services and Analytical Services help banks validate mark-to-market and XVA models against independent market data, supporting model testing, benchmarking, calibration, and regulatory approvals such as IMM and IFRS 13.
Sia Partners' Model Review capability critically analyzes ALM and risk model methodology, structure, and regulatory compliance, including a 'parallel runs' offer that builds a mirror model to identify and root-cause output discrepancies.
WTW's Operational Risk Solutions practice performs statistical modelling, model validation, and exposure gap analysis, and supports development or validation of economic and regulatory capital models using WTW proprietary data combined with a client's internal loss data.
Zanders offers model validation as an external expert across the full model life cycle, validating the conceptual and technical soundness of banks' and insurers' financial risk models against its own published Zanders Model Risk Framework.
No. Firms are presented alphabetically from sourced directory records. The guide does not claim a universal best firm, assign review scores, or sell ranking positions.
Usually not without a documented independence analysis and effective separation. The applicable framework, institution policy, model risk rating, and engagement structure determine what is acceptable.
Start with the model type, governing framework, independence needs, expected tests, delivery deadline, data restrictions, and required artifacts. Then evaluate the actual proposed team against those criteria.
