E-23 Readiness Review
A three-week diagnosis that reads your model risk framework against OSFI Guideline E-23, tests two or three of your own systems, and leaves a dated gap plan to 1 May 2027. Delivered personally by Nabeel Khan, through iSystematic Inc.
The question you are asked
The E-23 Readiness Review, delivered through iSystematic Inc., answers one question: is your institution ready for OSFI Guideline E-23 when it takes effect on 1 May 2027? E-23 applies to all models at federally regulated financial institutions, AI and machine learning methods included, so the answer has to reach your AI systems and the third-party models you rely on.
What the company delivers
The Review is a fixed-scope, three-week diagnosis, remote with one day on site.
| Term | Detail |
|---|---|
| Scope | Your model risk framework read against E-23, two or three of your own systems tested against the handbook's five artefacts, and every gap placed on the four altitudes of the MESA Framework™, owned and dated. |
| Duration | Three weeks. Remote, with one day on site. |
| Deliverables | A dated gap plan to 1 May 2027; artefact status for the sampled systems; a one-page board summary; your own answers beside the evidence. |
| Team | Delivered personally by Nabeel Khan, through iSystematic Inc., not staffed to a bench. |
| Fee | Fixed fee, disclosed on the Fit Call. The scope, and with it the fixed fee, is set on the Fit Call before anything is signed. |
| Not included | It does not attest conformance, approve any model, or substitute for your validation function. |
Week by week
The Review runs over three weeks, one stage a week.
Week 1
The framework and the inventory.
Week 2
Two or three of your systems tested, at least one AI system and one vendor model.
Week 3
The plan, a board summary, and a readout to the sponsor with the engineering lead present.
What can follow
Implementation, with your teams executing the plan, and an advisory retainer are offered only after the Review, and only where the plan shows the need. The gap plan's owners are the natural participants in the E-23 Practitioner Course.
What it is built on
The Review reads your models against OSFI Guideline E-23 and the five artefacts in the handbook, OSFI E-23 for AI Systems. Each gap is placed on the four altitudes of the MESA Framework™, a deposited specification on nabeelkhan.com.
Who leads it
Nabeel Khan, Defensible AI Architect (enterprise AI architecture and AI governance for regulated institutions), leads and delivers the Review as the named practice lead.
How to start
Book a Fit Call: a free 30-minute video call to find the governance gap and set the scope. If it fits, a proposal follows within 48 hours. To check your position first, take the free E-23 readiness check; the practice behind the Review is set out on nabeelkhan.com/e-23.
Where to go next
Readiness
Two readiness routes from iSystematic: AI Governance Readiness and E-23 Readiness, each a free check on nabeelkhan.com followed by one fixed-fee paid diagnosis.
AI Governance Teardown
The AI Governance Teardown is a fixed-scope, two-week examination of how your organisation governs its AI and its models, scored against the MESA Framework™.
Training
iSystematic's enterprise training: the E-23 Practitioner Course, two days in house on your own systems, and board briefings delivered within an engagement.
Advisory
iSystematic's advisory: a retainer in three-month terms after a diagnosis, and advisory hours for one named question, answered by the author of the frameworks.
Canadian financial institutions
Federally regulated financial institutions: take the free E-23 readiness check, then iSystematic's three-week E-23 Readiness Review, led by Nabeel Khan.
Conformance is self-declared; no regulator endorses this work.
Start with a Fit Call
A free 30-minute video call to find the governance gap and see whether Nabeel Khan is the right person to close it. If it fits, a proposal follows within 48 hours.