Assign independent challenge authority: Which governance change best addresses this conflict?
A conflicted delivery owner needs a separate function with authority to challenge and escalate risk.
The question
A procurement manager wants rapid deployment of a vendor’s coding assistant, while security staff identify unresolved data-handling risks. The manager also owns the delivery target. Which governance change best addresses this conflict?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Add detailed security obligations to the vendor contract.Contract terms can improve vendor controls, but they do not independently assess whether deployment should proceed.
- Document the risk review.Documentation preserves evidence, but it does not give an independent function authority to challenge the delivery owner.
- Assign independent challenge authority. ✓A competent function separate from the delivery owner can assess the unresolved risk, require mitigation, and escalate if necessary.
- Require the manager to approve residual risk in writing.Written approval records the conflicted manager’s decision but does not separate operational ownership from risk challenge.
The trap
Separate the person accountable for delivery from the function empowered to challenge its risks. How to remember it
A conflicted delivery owner needs a separate function with authority to challenge and escalate risk.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding the Foundations of AI Governance questions
- Assign clear scaled roles: Which requirement best reflects proportionate governance? →
- Vendor testing is sufficient without employer validation: Which assumption about the supplier evidence must →
- Resource empowered review with escalation and fallback: Which control is most defensible? →
- All 337 Understanding the Foundations of AI Governance questions →
Part of the Certsqill AIGP question bank · Understanding the Foundations of AI Governance ·
Every answer, right and wrong, comes with its own explanation.