SR 11-7 frames model risk around development, validation, and governance. For CS-204, the gates sit in the first two.
An independent validation covering conceptual soundness, outcomes analysis, and monitoring is required before deployment, performed by staff independent of development. Documentation must let a third party reproduce the model.
Because CS-204 informs consumer credit, fair-lending testing and an effective-challenge record should accompany the package. Your MRM policy also requires a board-approved Tier-1 rating, which CS-204 lacks.