Track record
The Lab shows what I build. This page records what I have built inside banks, because prototypes demonstrate judgment only if the judgment has survived contact with supervisors, boards, and production.
Three times I have been handed a blank page.
1. A stress testing framework where none existed
The mandate. Establish the US operational risk stress testing framework at TD Bank when no program, no model, and no methodology existed (2014 to 2019).
What was built. The framework end to end: methodology, loss projection models, scenario integration, governance, and the CCAR and DFAST submission machinery around them.
Under scrutiny. The framework ran through Federal Reserve and OCC examination cycles under CCAR and DFAST, revised and defended year over year.
What it shows. I do not inherit frameworks; I write them, and they hold up when the examiner sits down.
2. Operational resilience, from second hire to regulatory validation
The mandate. Join as the second hire on Operational Resilience and build the program from inception.
What was built. The program itself: important business services, impact tolerances, dependency mapping, testing, plus the GRC platform implementation and enterprise vendor selection to run it at scale.
Under scrutiny. The program was built through regulatory validation. The mandate included direct second line oversight and challenge of the UK entity's FCA and PRA operational resilience submissions: important business services, impact tolerances, and submission readiness.
What it shows. The discipline this site writes about, resilience as the successor discipline to operational risk, is one I have operated, not observed. ORBIT and CALIPER in the Lab are that experience, rebuilt as tooling.
3. Three enterprise programs, production to insight
The mandate. Transform three enterprise programs at once: stress testing, scenario analysis, and board-level risk appetite reporting, from production-focused to insight-driven.
What it shows. Transformation is the current altitude of the work: taking programs that produce numbers and rebuilding them to produce decisions.
Regulatory range
Direct engagement across FRB, OCC, OSFI, FDIC, and CDIC on CCAR, DFAST, operational resilience reviews, model risk, and resolution planning. Consolidated parent-bank ICAAP submissions to RBI, built from inception at ICICI Bank Canada. Direct second line oversight and challenge of UK FCA and PRA operational resilience submissions.
Where the Lab comes from
AEGIS, the twelve module research agenda, is this record applied forward: the tooling I believe these same mandates need next, built in public as blueprints, with synthetic data, and nothing for sale.
If you run or supervise a risk function and want to compare notes on any of the above, I read everything sent to chitresh@oprisk.ai.