OSFI E-23 introduces broader model risk management expectations. But for many financial institutions, the biggest challenge may be identifying the models they already use. By