Complete a deployment-specific control-gap assessment: Before approval, which evidence best addresses this
Complete a deployment-specific control-gap assessment covering the identified governance gaps.
The question
A medical administration office, which does not provide clinical advice, plans to add a vendor AI assistant. Its legacy security policy covers access control but not prompt logging, vendor retention, or output review. Before approval, which evidence best addresses this deployment-specific gap? Assume any applicable EU AI Act obligations are in scope; this question focuses on internal control evidence rather than classification.
Preparing for AIGP? Take the free 5-min readiness quiz →
- Accept the vendor’s general cybersecurity certification after confirming its expiration dateA certification has a defined scope and may not address prompts, retention, output review, or this deployment’s governance needs.
- Complete a deployment-specific control-gap assessment ✓The assessment should map the stated gaps to vendor evidence, logging and retention controls, review ownership, and documented residual-risk decisions.
- Run a pilot measuring administrative accuracy, user satisfaction, and processing speed before final approvalA pilot can assess usefulness and performance, but it does not by itself resolve logging, retention, review ownership, or residual-risk controls.
- Brief administrators on AI risksAwareness training may improve user behavior but does not establish logging, retention limits, output-review ownership, or residual-risk decisions.
The trap
Translate legacy controls into deployment-specific requirements and document ownership and residual risk. How to remember it
Complete a deployment-specific control-gap assessment covering the identified governance gaps.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding the Foundations of AI Governance questions
- Require contractual notice and cooperation for material: Before approving the arrangement, which evidence →
- Reconstruct data transformations and compare product-line: Which evidence most directly resolves that →
- Pause use until an owner and suitability evidence are: Which approach is most defensible? →
- All 337 Understanding the Foundations of AI Governance questions →
Part of the Certsqill AIGP question bank · Understanding the Foundations of AI Governance ·
Every answer, right and wrong, comes with its own explanation.
