The model should be effective — identifying where risk is most likely to occur, and making inspections more targeted. It should also be explainable to the people who use it and to the outside world.
You should be aware that scrutiny of algorithmic decision-making is rising. There's a national Algorithm Register where you have to register the model. Oversight queries and public information requests are becoming more common, and no one can say exactly when or how hard they'll hit. You can't control that pressure — only how ready you are for it. The choices you make along the way also shape your organisation's legitimacy.
Over eight sprints, two teams build that model together, gathering data, refining it, mitigating risks — while unexpected events land in the middle of each sprint's stand-up.