Basic Prerequisites: 01 · Model Risk from Zero and The European Pricing Formulas (the Greeks used as error sensitivities).


1. Intuition & Practical Objective

Model risk is not one thing that “goes wrong”; it is a set of independent failure channels, each with a different owner, a different detection method, and a different fix. This page names them precisely and turns them into an error budget: a quantitative decomposition of the gap between a model’s output and the truth, in which each channel contributes a dollar amount.

Two canonical taxonomies anchor the field, and they are complementary:

  • SR 11-7 (regulatory, two causes). Model risk arises because (1) a model may have fundamental errors - it produces inaccurate outputs relative to its design objective; or (2) a model may be misused - applied outside its assumptions, or with a misunderstanding of its limitations.
  • Derman (1996, seven types). A finer practitioner taxonomy that separates, crucially, being wrong about the world from being right about the model and wrong about the arithmetic. Derman’s warning: “you’re worse off thinking you have a model and relying on it than in simply realizing there isn’t one.”

The objective: given a live model, fill in the budget with actual numbers, so “model risk” becomes a number with a sign and an owner rather than a worry.


2. Mathematical Ground Truth & Derivations

The two taxonomies, mapped. Each SR-11-7 cause expands into Derman’s types, and each type maps to one term of the error budget.

Derman (1996) typeSR-11-7 causeError-budget channelPrimary detection
Inapplicability of modelingfundamental errorform (unbounded)conceptual soundness - is the phenomenon model-able at all?
Incorrect model (wrong factors / dynamics / dependence / deterministic-vs-stochastic split)fundamental errorformconceptual soundness + benchmark comparison
Unstable datafundamental errorparametercalibration-window sensitivity, orthogonal data
Correct model, incorrect solutionfundamental errorimplementationanalytic vs numerical test on a solvable case
Badly approximated solutionfundamental errorimplementationconvergence study (grid/time-step refinement)
Software and hardware bugsfundamental errorimplementationindependent re-implementation, boundary tests
Correct model, inappropriate usemisuseuseusage inventory, limits, “effective challenge”

The budget, first order. Let be the model value and its calibrated parameters. A first-order (delta/gamma) expansion gives

where is the calibration error in parameter and the discretisation/bug term. The parameter channel is dominated by the Greeks: with (e.g. vega for , rho for ).

Adding channels. If the channels are approximately independent, the total model-risk standard deviation adds in quadrature:

Two consequences worth stating: (i) a channel you have not measured is not zero - the budget is a lower bound on ignorance; (ii) the largest channel dominates the sum, so effort belongs on the biggest term, not on the smallest “bug”.

Error sensitivity as a scale. The parameter channel scales linearly in the calibration error (vega × 1 vol-point), while form error is a model-level jump that no amount of calibration removes. Empirically, for a vanilla option the ordering is often form > parameter > implementation - which is why “we recalibrated daily” answers the wrong question.


3. Computational Implementation - building the error budget

Take an at-the-money 1-year call, , , . We price the same contract under five lenses: the analytic BSM value; a vol-point parameter error (vega); a bp rate error (rho); a 50-step CRR tree (discretisation); a 360-vs-365 day-count bug; and a Merton jump-diffusion model (form error). Stdlib only.

Reading the budget: the 1-vol-point calibration error alone moves the price by - larger than the day-count bug () and the discretisation error () combined. The jump-diffusion form error () dominates all parameter channels. The quadrature total is of price. Note the vega number is exactly the raw vega from the Pillar-3 Greek table - the budget is built from quantities you already compute.


4. Failure Modes & First-Principles Breakdowns

  1. Calibrating to the wrong observable. Fitting to a price that was itself produced by a different model makes absorb (and hide) the form error - the parameter channel looks small because it is doing the form channel’s job. This is the “unstable data” channel in disguise.
  2. The budget’s missing terms. Derman’s “inapplicability” and SR-11-7’s “misuse” have no Greek - they cannot be measured by perturbation. Omitted the most dangerous channels from your quadrature sum, and the total is a floor, not an estimate.
  3. Correlated channels. Quadrature assumes independence; calibration error and form error are often positively correlated (a bad model needs a distorted to fit the smile). The independent sum then understates total error.
  4. Convergence theatre. A discretisation study that refines a grid while the form is wrong certifies the wrong number to more decimals - “correct model, incorrect solution” read backwards.
  5. Day-count and convention bugs are model risk. Derman’s point: the most avoidable large errors hide in the simple part (counting coupons, day-count, settlement dates) while attention sits on the exotic part.

5. References

  • Derman, E., Model Risk, Goldman Sachs QSR Notes (1996)
  • Federal Reserve / OCC, SR 11-7 (2011)
  • Morini, M., Understanding and Managing Model Risk (2011)
  • Hull, J. C., Options, Futures, and Other Derivatives

6. Connected Graph Bridges