The exception needs an expiry: Which distinction controls the decision?
A policy exception requires bounded duration, accountable ownership, and compensating controls before authorization.
The question
A public-benefit agency wants a six-month exception to its approved-use policy for a pilot chatbot. The pilot has a named project manager, but the request omits an end date and compensating controls. Which distinction controls the decision?
Preparing for AIGP? Take the free 5-min readiness quiz →
- The agency should require additional user training before deciding.Training may be relevant, but it does not resolve the missing expiry and compensating-control requirements in the request.
- A pilot can proceed once the project manager accepts accountability.Naming an accountable person helps, but accountability alone does not bound duration or address risks created by the exception.
- The agency should approve the pilot provisionally and revisit controls afterward.Deferring controls permits the exception before its risks and boundaries are defined, weakening governance during the pilot.
- The exception needs an expiry, owner, and compensating controls before authorization. ✓A controlled exception requires bounded duration, accountable ownership, and safeguards addressing risks introduced by departing from policy.
The trap
Look for owner, expiry, scope, rationale, and compensating controls; a pilot label does not remove those needs. How to remember it
A policy exception requires bounded duration, accountable ownership, and compensating controls before authorization.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding the Foundations of AI Governance questions
- Assign approval requirements according to each use’s: Which approval distinction is decisive? →
- Request use-case-specific evidence: What is the decisive procurement requirement? →
- Document provenance: Which distinction is decisive? →
- All 337 Understanding the Foundations of AI Governance questions →
Part of the Certsqill AIGP question bank · Understanding the Foundations of AI Governance ·
Every answer, right and wrong, comes with its own explanation.