Link documented risk tiers to approval routes and decision: Which missing control is most direct?
Risk-tiered approval requires documented risk categories to determine review routes and decision authority, not merely testing or recordkeeping.
The question
A manufacturer uses AI to flag possible defects. All evidence, monitoring, training, and technical controls are satisfied, but the approval process sends every use case to the same reviewer regardless of documented risk tier. Which missing control is most direct?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Assign every defect model to an independent technical reviewer.Independent review may be valuable, but uniform assignment does not establish risk-tiered approval authority or routing.
- Require another round of testing for all models before approval.Additional testing may strengthen evidence, but does not correct the process’s failure to differentiate approval by risk.
- Record the final approval decision in the manufacturing quality register.Recording decisions improves traceability, but leaves the identical approval route unchanged across risk tiers.
- Link documented risk tiers to approval routes and decision authority. ✓This directly makes approval proportionate to documented risk by specifying who reviews and decides at each tier.
The trap
Ask whether risk classification changes who reviews or approves; if not, the process is not truly risk-tiered. How to remember it
Risk-tiered approval requires documented risk categories to determine review routes and decision authority, not merely testing or recordkeeping.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding the Foundations of AI Governance questions
- Create an inventory and intake record linking each use: Which missing control is most direct? →
- Record an accountable owner and expiry or review date: Which missing control is most direct? →
- Require use-case evidence: Which missing control is most direct? →
- All 337 Understanding the Foundations of AI Governance questions →
Part of the Certsqill AIGP question bank · Understanding the Foundations of AI Governance ·
Every answer, right and wrong, comes with its own explanation.