Add contractual incident triggers and information-sharing | AIGP
7-day money-back guarantee — full refund within 7 days of purchase if you've completed under 20% of the questions. See pricing →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing For Teams About

Language

✓ EnglishDeutschEspañolFrançaisPortuguês
Check readiness — free →

Add contractual incident triggers and information-sharing: Which control is most direct?

AIGP Understanding How to Govern AI Deployment and Use Hard

The agreement should define incident triggers and supplier information duties so the organization can coordinate response effectively.

The question

A company is procuring an AI-enabled software product. Evaluation, security review, ownership, monitoring, and supplier documentation are complete. The draft agreement does not specify incident triggers or what information the supplier must share when an incident affects the service. Which control is most direct?

Preparing for AIGP? Take the free 5-min readiness quiz →

  1. Require annual certification renewal and a joint tabletop exercise.
    These activities can improve preparedness, yet neither defines binding triggers and information duties for actual incidents.
  2. Create an internal incident-response playbook.
    An internal playbook supports response, but cannot require the supplier to communicate incidents or provide necessary information.
  3. Review the supplier’s existing security certification.
    Certification may provide assurance about controls, but it does not establish contractual incident triggers or information-sharing duties.
  4. Add contractual incident triggers and information-sharing duties. ✓
    This directly establishes when the supplier must notify the company and what relevant information must be provided for response.
The trap
Separate internal preparedness from supplier obligations; incident cooperation must be established where the supplier controls information.

How to remember it

The agreement should define incident triggers and supplier information duties so the organization can coordinate response effectively.

How many of these would you get right?

One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.

Test your AIGP readiness — free

More Understanding How to Govern AI Deployment and Use questions

Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use · Every answer, right and wrong, comes with its own explanation.