Use a severity matrix with the supplier escalation route: Which evidence resolves both uncertainties?
Use a severity matrix linked to a confirmed supplier escalation route.
The question
A media company uses a third-party generator for production drafts. A suspected incident may have exposed confidential source material. Before approving continued use, the team must both classify severity and confirm the supplier's response channel. This is an internal incident-governance question, not a claim about a specific statutory reporting deadline. Which evidence resolves both uncertainties?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Use a severity matrix with the supplier escalation route. ✓A severity matrix classifies and prioritizes the incident, while its linked supplier escalation route identifies how coordinated response should occur.
- Resume production, then schedule a post-incident review and lessons-learned meeting.A later review can improve controls but does not resolve immediate severity and communication uncertainties before continued use.
- Obtain the supplier's general security certification and scope statement.A certification describes assurance within its stated scope; it does not classify this incident or confirm the operational response contact.
- Request a provenance and watermarking report for the affected drafts.Provenance may help investigate content origin, but it does not classify incident severity or establish the supplier escalation route.
The trap
For supplier incidents, look for severity criteria connected to a usable communication and escalation route. How to remember it
Use a severity matrix linked to a confirmed supplier escalation route.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding the Foundations of AI Governance questions
- A contractual change-notification requirement: What should be obtained first? →
- Create a case-linked record of model version: Which additional evidence should be added first? →
- Require contractual notice and cooperation for material: Before approving the arrangement, which evidence →
- All 337 Understanding the Foundations of AI Governance questions →
Part of the Certsqill AIGP question bank · Understanding the Foundations of AI Governance ·
Every answer, right and wrong, comes with its own explanation.