Risk owner approves: Which handoff correctly preserves accountability?
The risk owner accepts the temporary exception; governance records expiry and accountability before operations implements it.
The question
In insurance operations, an unvalidated extraction model is needed temporarily for a backlog. The risk owner may approve exceptions, governance records them, and operations implements controls. Which handoff correctly preserves accountability?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Operations approves the exception and informs governance after implementation begins.Operations may implement controls, but approval belongs to the designated risk owner and should precede implementation.
- The vendor approves the exception after confirming the model’s extraction throughput.Vendor throughput evidence may inform operations, but the supplier cannot accept the organization’s internal risk exception.
- Risk owner approves; governance records expiry and ownership. ✓The risk owner accepts the bounded exception, while governance records its duration and accountable owner for follow-up and closure.
- Governance approves the exception while operations decides its expiration date.Governance records exceptions, but the designated risk owner approves and accountability should not be delegated implicitly to operations.
The trap
Match each handoff to authority, recordkeeping, or execution; expiry prevents a temporary exception from becoming uncontrolled. How to remember it
The risk owner accepts the temporary exception; governance records expiry and accountability before operations implements it.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding the Foundations of AI Governance questions
- The independent assessor should challenge evidence: After governance classifies the use as high risk, which →
- The operational owner evaluates evidence and escalates: Before award, who should verify that evidence matches →
- The business data owner coordinates privacy and supplier: Who must resolve the purpose, provenance, →
- All 337 Understanding the Foundations of AI Governance questions →
Part of the Certsqill AIGP question bank · Understanding the Foundations of AI Governance ·
Every answer, right and wrong, comes with its own explanation.