Operating model practice library32
DefineMAN-01
AI operating model charter
Define purpose, scope, customers, authority, services, boundaries, outcomes, and executive sponsorship for enterprise AI delivery and oversight.
DesignMAN-02
Enterprise principles and risk appetite
Translate strategy, values, regulatory expectations, and consumer commitments into practical risk tolerances and design principles.
OperateMAN-03
Strategic portfolio alignment
Connect AI demand to insurance strategy, product priorities, customer outcomes, operating goals, and enterprise dependencies.
ImproveMAN-04
Board and executive accountability
Set accountable executives, board oversight, reserved decisions, reporting expectations, and consequences for unresolved material risk.
DefineFED-01
Central-federated topology
Define which capabilities are enterprise-owned, embedded in business units, shared, or locally executed under common standards.
DesignFED-02
Three-lines responsibility map
Clarify business ownership, enabling functions, independent challenge, internal audit, and assurance without transferring accountability.
OperateFED-03
Decision authority matrix
Specify who proposes, designs, approves, validates, accepts risk, deploys, changes, restricts, pauses, and retires each AI use case.
ImproveFED-04
Escalation and exception authority
Create time-bound exception, escalation, appeal, conflict-resolution, and emergency-stop paths with recorded decisions.
DefineINT-01
Standard use-case intake
Capture objective, users, affected decisions, data, technology, vendors, consequence, value, dependencies, owner, and requested timing.
DesignINT-02
Value-risk-feasibility triage
Apply a consistent first review that identifies value potential, customer consequence, control burden, evidence needs, and delivery feasibility.
OperateINT-03
Portfolio dependency mapping
Expose shared data, platforms, vendors, models, controls, people, jurisdictions, and transformation dependencies across use cases.
ImproveINT-04
Capacity-aware prioritization
Sequence demand using strategy, value, urgency, risk, readiness, scarcity, dependency, and opportunity-cost evidence.
DefineLIF-01
Proportional lifecycle pathway
Route use cases to governance and delivery activities that match consequence, complexity, autonomy, scale, and uncertainty.
DesignLIF-02
Design and data gate
Confirm purpose, requirements, architecture, data rights and quality, human oversight, test plan, controls, ownership, and resources.
OperateLIF-03
Validation and release gate
Require independent-enough evaluation, operational readiness, approved residual risk, evidence, monitoring, rollback, and accountable release.
ImproveLIF-04
Operate change and retirement gate
Govern monitoring, incidents, material changes, revalidation, restrictions, end-of-life decisions, migration, records, and lessons learned.
DefineCOE-01
Advisory and design service
Provide early multidisciplinary consultation on problem framing, options, use-case design, risk tiering, architecture, and evidence plans.
DesignCOE-02
Reusable patterns and platforms
Maintain approved components, architectures, prompts, controls, templates, data products, integrations, and reference implementations.
OperateCOE-03
Evaluation and assurance service
Offer evaluation methods, independent challenge, test environments, red teaming, documentation review, and regulator-ready evidence support.
ImproveCOE-04
Training community and knowledge service
Build role-based learning, practitioner communities, office hours, standards guidance, case studies, and searchable institutional knowledge.
DefineRES-01
Demand and capacity plan
Forecast portfolio demand and match it to product, engineering, data, actuarial, legal, compliance, risk, security, and change capacity.
DesignRES-02
Funding and chargeback model
Define durable funding for shared platforms, controls, pilots, production operations, monitoring, remediation, and retirement.
OperateRES-03
Role and competency plan
Set role profiles, proficiency expectations, career paths, workforce transitions, succession, and critical-person dependency controls.
ImproveRES-04
Sourcing and partner strategy
Decide what to build, buy, share, or outsource and align vendors to architecture, controls, service levels, evidence, and exit needs.
DefineMGT-01
Integrated inventory and records
Use linked records for use cases, systems, models, agents, data, vendors, decisions, controls, tests, changes, incidents, and retirement.
DesignMGT-02
Committee cadence and decision log
Run risk-proportionate forums with clear agendas, quorum, decision standards, actions, aging, escalation, and authoritative minutes.
OperateMGT-03
Policy control and standards library
Maintain a navigable hierarchy from principles and policies to standards, procedures, controls, templates, and technical patterns.
ImproveMGT-04
Issue incident and remediation link
Connect findings, exceptions, complaints, incidents, audit actions, root causes, remediation, validation, and closure evidence.
DefinePER-01
Operating model KPI set
Define a balanced scorecard for demand, throughput, quality, control, capacity, value, adoption, risk, and stakeholder outcomes.
DesignPER-02
Service level and throughput review
Measure intake, triage, advice, gate, validation, exception, remediation, and decision cycle times without weakening review quality.
OperatePER-03
Value risk and adoption portfolio review
Evaluate realized outcomes and residual risk across the portfolio, including dependencies, concentration, underuse, and retirement candidates.
ImprovePER-04
Maturity review and improvement roadmap
Periodically assess whether the operating model is understood, resourced, used, effective, and adaptable, then fund prioritized improvements.