Where conventional bank licensees use models to measure components of risk, they must establish model governance frameworks including regulatory validation and testing.