AI impact assessment: underwriting triage

Draft 2, saved 2026-10-16 by Practitioner, Northline Advisory. Template version 1.0.

Prototype states

typed stated in the records or by youproduced computed here from the recordsmissing the records hold nothing yet

Example record, fictional institutionnebula-mutual/underwriting-triage/impactDraft 2Author Practitioner, Northline Advisory

System: Underwriting triage, model, vendor Corvane, tier 2As declared in register.xlsx, imported 2026-10-16.; typed
Gate state: G3 passed 2026-09-12, G4 draftAs declared in register.xlsx, imported 2026-10-16.; typed
Purpose: Orders new applications for an underwriter’s reviewDrafted by you; to confirm with the Actuary.; typed
Decision it informs: Which application an underwriter reviews first. The underwriter decides.Drafted by you; to confirm with the Actuary.; typed
People affected: Applicants for cover; typed
Data classes: missingAdd it in the register
Human oversight design: missingSet it in the controls below
Regimes: OSFI E-23, effective 2027-05-01; AMF AI guidelineFrom the regime profile.; produced
Residual risk: not statedThe Actuary states it at G4, in words. No score.

Risks and controls

Risk	Effect	Control	State
The vendor changes its model without notice	The approval stops covering what runs	Re-validate on a vendor model change	Proposed, typed
An input stands in for a protected ground	Applications are ordered unfairly	Bias audit before G4, Bias audit report	not started
Underwriters treat the order as a decision	Review becomes a formality	Underwriters record their own reason	Proposed, typed

Learn more about this document

Fields from the register are typed as the client declared them; what you draft is typed under your name; what the records lack says missing.

Residual risk is a statement by the accountable person, never a score.