Extend the policy with AI-specific assets: What governance | AIGP
7-day money-back guarantee — full refund within 7 days of purchase if you've completed under 20% of the questions. See pricing →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing For Teams About

Language

✓ EnglishDeutschEspañolFrançaisPortuguês
Check readiness — free →

Extend the policy with AI-specific assets: What governance action best closes the identified gap?

AIGP Understanding the Foundations of AI Governance Medium

Legacy controls need explicit AI extensions covering assets, data flows, supplier changes, and accountable ownership.

The question

An employment-screening organization’s legacy security policy covers access control, encryption, and incident reporting for software. It does not address prompt data, model artifacts, retrieval sources, or supplier AI changes. What governance action best closes the identified gap?

Preparing for AIGP? Take the free 5-min readiness quiz →

  1. Require the supplier to certify compliance with the legacy policy annually.
    Supplier certification may provide limited evidence, but it cannot define internal AI assets, data flows, responsibilities, or change controls.
  2. Extend the policy with AI-specific assets, data flows, supplier changes, and ownership. ✓
    The gap concerns AI-specific assets, data flows, dependencies, and accountability, requiring explicit controls and assigned ownership.
  3. Add a model-accuracy review while retaining the current security policy.
    Accuracy review does not govern security-relevant AI assets, data flows, supplier changes, or accountable control ownership.
  4. Apply the existing software controls unchanged to the screening model.
    Existing controls provide a foundation but do not address prompt data, model artifacts, retrieval sources, or supplier changes.
The trap
Map the actual AI lifecycle and information flows against existing policy; do not assume software coverage is complete.

How to remember it

Legacy controls need explicit AI extensions covering assets, data flows, supplier changes, and accountable ownership.

How many of these would you get right?

One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.

Test your AIGP readiness — free

More Understanding the Foundations of AI Governance questions

Part of the Certsqill AIGP question bank · Understanding the Foundations of AI Governance · Every answer, right and wrong, comes with its own explanation.