Add AI-specific controls for supplier dependencies: What is the decisive policy gap?
The legacy policy lacks AI-specific supplier, data, and accountability controls, rather than ordinary access or availability safeguards.
The question
A travel-support team uses a vendor model to draft customer replies. Its legacy security policy covers passwords and network access but says nothing about supplier AI dependencies, data limitations, or assigned responsibilities. What is the decisive policy gap?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Add a network availability target for the vendor’s response service.Availability targets address service reliability, not the missing governance controls concerning data, dependencies, and responsibilities.
- Increase password rotation requirements for travel-support staff.Password controls may strengthen access security, but do not address supplier evidence, data limitations, or AI accountability.
- Require employees to complete general cybersecurity awareness training.General training supports security culture, but does not establish AI supplier controls or clarify operational responsibilities.
- Add AI-specific controls for supplier dependencies, data, and responsibilities. ✓The missing policy must address AI-specific information gaps and accountability beyond conventional access-security controls.
The trap
Compare the policy’s existing scope with the AI system’s supplier, data, and accountability dependencies. How to remember it
The legacy policy lacks AI-specific supplier, data, and accountability controls, rather than ordinary access or availability safeguards.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding the Foundations of AI Governance questions
- Require advance notice of material model: What contract requirement is decisive? →
- Trigger review when the population or data use materially: Which review trigger is most decisive? →
- Create an inventory and intake record linking each use: Which missing control is most direct? →
- All 337 Understanding the Foundations of AI Governance questions →
Part of the Certsqill AIGP question bank · Understanding the Foundations of AI Governance ·
Every answer, right and wrong, comes with its own explanation.