The owner pauses use: Which handoff best enforces the boundary?
The owner contains the deviation, compliance assesses impact, and the designated committee decides approval.
The question
An energy utility’s internal acceptable-use policy permits an AI assistant for maintenance planning only. A technician uses it to draft a public-facing outage explanation, outside the approved-use register. The system owner must contain unauthorized use; compliance assesses impact; and a designated AI governance committee decides whether changed uses may be approved. Which handoff best enforces the boundary?
Preparing for AIGP? Take the free 5-min readiness quiz →
- The system owner pauses use and sends the matter to compliance only.The owner properly contains the use, but the stated process also requires the designated committee to decide whether the changed use may be approved.
- Compliance records the event and updates the register after its assessment.Compliance assessment is required, but retrospective registration alone does not contain the active unauthorized use or provide the committee’s decision.
- The owner pauses use; compliance assesses impact; the committee decides. ✓This sequence assigns immediate containment, independent impact assessment, and the designated approval decision to their stated roles.
- The technician records the event and continues under supervision.Recording and supervision do not authorize the public-facing use or stop the deviation from continuing.
The trap
Separate immediate containment from impact assessment and the authority that approves changed use. How to remember it
The owner contains the deviation, compliance assesses impact, and the designated committee decides approval.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding the Foundations of AI Governance questions
- The business data owner coordinates privacy and supplier: Who must resolve the purpose, provenance, →
- Escalate the decision to the model risk committee: Who should decide whether deployment approval can proceed? →
- All 337 Understanding the Foundations of AI Governance questions →
Part of the Certsqill AIGP question bank · Understanding the Foundations of AI Governance ·
Every answer, right and wrong, comes with its own explanation.