Escalate the incident and preserve affected records: What should happen?
Possible confidentiality impact and uncertain scope trigger escalation independently of the supplier’s contractual error threshold.
The question
A financial-document processor begins routing some statements to the wrong customer folders. The supplier says the error rate remains below its contractual threshold, but affected volume, customer exposure, and recovery status are not yet known. Internal policy escalates incidents involving possible confidentiality impact or uncertain scope. What should happen?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Monitor the error rate against the contract before escalating.Contractual rate compliance does not resolve possible confidentiality impact or unknown affected volume under the stated policy.
- Ask the supplier for a root-cause report before opening internal escalation.Supplier analysis is useful, but waiting for it delays required escalation while impact and recovery status remain uncertain.
- Escalate the incident and preserve affected records for scope analysis. ✓Possible confidentiality impact combined with unknown scope satisfies the stated escalation condition and supports investigation and recovery.
- Limit processing to low-volume documents while reviewing supplier controls.Reducing volume may mitigate future exposure, but it does not satisfy escalation or establish the scope of existing misrouting.
The trap
A contractual metric does not replace internal escalation criteria tied to impact or uncertainty. How to remember it
Possible confidentiality impact and uncertain scope trigger escalation independently of the supplier’s contractual error threshold.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding the Foundations of AI Governance questions
- Require change review with affected-line validation: What approval action best fits the evidence? →
- Link each output to model: For this internal reproducibility requirement, with any applicable EU AI Act review →
- Require material-change notice: What contract term closes the governance gap? →
- All 337 Understanding the Foundations of AI Governance questions →
Part of the Certsqill AIGP question bank · Understanding the Foundations of AI Governance ·
Every answer, right and wrong, comes with its own explanation.