Walk through the IQ series, one click at a time

Follow one fictional lender, Northbridge Credit, through three apps: deciding what governance applies to its credit-decision model, checking the supplier behind that model, assessing the effect on customers, and ending with a list of open work and who owns it. Each step says what to click, what you should see, and why it matters. It takes about 15 minutes.

1. STEP 1Record what appliesGovernIQ
2. STEP 2Check the supplierSupplierIQ
3. STEP 3Read the impact briefImpactIQ
4. STEP 4Look at the harmsImpactIQ
5. STEP 5See who owns what is openGovernIQ

1

Record what applies, and who owns it

GovernIQ

Governance starts with scope: which system, whose responsibility, and which controls apply and why. Every later step traces back to a decision recorded here.

Do this

1. Open GovernIQ (button below).
2. Click Explore the fictional Northbridge example. You land on the Statement of applicability.
3. Scroll to control EX-04, Oversee the supplier that provides the model, and click Edit record.
4. Read the Evidence references field, then click Cancel.

Open GovernIQ (opens in a new tab) ↗

You should see

• A scope panel: Northbridge Credit (fictional), credit decisioning for personal loans up to £25,000, accountable owner Chief Risk Officer.
• Three counters: 8 controls recorded, 2 decisions still pending, 11 gaps to review.
• Eight controls, each marked applicable, pending or not applicable, with an owner and the team's reasoning.

The thread to step 2: EX-04's evidence is "Supplier due diligence record for Meridian Decisioning Ltd (SupplierIQ, fictional)". Northbridge relies on Meridian's model, so it has to check Meridian. That record is the next step.

2

Check the supplier behind the model

SupplierIQ

Using a supplier's model does not move the responsibility to the supplier. This record shows what Northbridge has asked Meridian for, what it has received, and what is still unanswered.

Do this

1. Open SupplierIQ (button below).
2. Click Explore the fictional Meridian example. You land on What remains open with this supplier?
3. Click the 12 Need evidence count to jump to Evidence and documentation gaps, just below it.
4. Click any Go to Requirements on the supplier link, then the blue ← Back to results button to return.

Open SupplierIQ (opens in a new tab) ↗

You should see

• Diligence completeness: 61%. This is how much of the record and its evidence has been written, not a rating of Meridian. The page says so beside the number.
• Human disposition escalate: a person has decided this needs to go higher.
• 12 items needing evidence and 8 with partial evidence, such as fairness testing results and the right to be told about model changes.

The thread to step 3: Meridian's model decides who gets a loan, so Northbridge also has to understand what those decisions do to its customers. At the foot of this page, Explore ImpactIQ takes you there.

3

Read the impact brief a board would see

ImpactIQ

An impact assessment is only useful if a senior reader can see, in a minute, what could go wrong for customers and what evidence stands behind each claim.

Do this

1. Open ImpactIQ (button below), or use Explore ImpactIQ from step 2.
2. Click Explore the fictional Northbridge Credit example. You land on What needs a decision?
3. Click each card under Impacts to inspect and watch the Follow the evidence panel light up and update for that impact.
4. Optional: Take the two-minute guide gives a short tour of this page.

Open ImpactIQ (opens in a new tab) ↗

You should see

• The system in scope: Northbridge's personal loan scoring, used as a deployer in the UK and EU, last reviewed 15 May 2026.
• Four recorded impacts. The most serious, Major, Likely: postcode acting as a proxy for ethnicity.
• For each impact: who is affected, the evidence reference, and the judgement a person still has to make. The app does not open or check the evidence itself.

4

Look at the harms, and what is missing

ImpactIQ

The risk matrix draws only what people recorded. It does not decide the risk. The value is in what it shows as unsupported.

Do this

1. On the same page, scroll to What's ready, and what's outstanding.
2. Keep scrolling to the Risk matrix and select one of the outlined, numbered cells.
3. Under Gaps, click Go to Benefits, harms & foreseeable misuse to see where the missing evidence belongs.
4. Click the blue ← Back to results button to return.

You should see

• 6 of 7 ready. The one outstanding item: not every recorded harm has evidence attached.
• Four harms on a severity-by-likelihood grid. Clicking a cell lists the harms in it.
• One harm with no evidence at all: underwriters may defer to the model's score instead of judging the case themselves.

The thread to step 5: in GovernIQ, EX-05 (assess the effect on affected people) points to this assessment as its evidence, with the next action "Close the evidence gaps listed in the assessment". Gaps found here come back to a named owner there.

5

See who owns what is still open

GovernIQ

A governance record should end with named people and next actions, not a score. This is the page an accountable executive would take into a meeting.

Do this

1. Go back to the GovernIQ tab. The example is still loaded, because it is saved in your browser.
2. Open Statement of applicability in the left menu, then the Work plan tab, just below the three counters.
3. Optional: in Settings, click Print or save as PDF for a one-document statement.

Open GovernIQ (opens in a new tab) ↗

You should see

• A numbered Suggested order at the top. 1. EX-03, Review changes to the system, comes first because it has no owner. The order follows a stated rule about what is missing, not a risk score.
• Third-party risk lead: EX-04, with the next action "Resolve the open diligence questions with the vendor". That is step 2's open work.
• Five open items across five owners. The Working gaps tab counts the same five controls; the counter above says 11 because it counts each missing field separately.

What you have just seen

Try it on your own work

Each app has a blank record lower on its home page: Start a blank statement of applicability (GovernIQ), Start a blank supplier record (SupplierIQ) and Start a blank impact assessment (ImpactIQ). The app asks before replacing the example. Please do not enter confidential or personal information in a public demonstrator.