Amend the contract with audit: Which control is missing?
The missing control is contractual access to evidence, including audit and information rights supporting investigation and oversight.
The question
An employer is procuring an AI assistant for internal employee support. Security, privacy review, intended use, monitoring, and supplier evaluation are complete. The draft contract lacks rights to inspect relevant records or obtain information needed to investigate performance concerns. Which control is missing?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Request the supplier’s latest marketing materials.Marketing materials may describe capabilities, but they do not provide enforceable access to records or investigation information.
- Add quarterly supplier performance reports to the contract.Periodic reports provide some information, but may not grant access to underlying records needed for targeted investigations.
- Assign an internal owner for employee-support oversight.An owner is necessary for accountability, but ownership alone cannot compel the supplier to provide relevant records.
- Amend the contract with audit, records, and information-access rights. ✓These contractual rights enable the employer to examine relevant evidence and investigate concerns rather than relying solely on supplier summaries.
The trap
If oversight depends on supplier-held evidence, verify that the contract grants access, not merely periodic summaries. How to remember it
The missing control is contractual access to evidence, including audit and information rights supporting investigation and oversight.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- Obtain use-case evidence and record limitations: Which control directly addresses the gap? →
- Add contractual incident triggers and information-sharing: Which control is most direct? →
- Analyze actual purposes and means: Which control is most direct? →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.