Enforce authorization during retrieval: What missing control | AIGP
7-day money-back guarantee — full refund within 7 days of purchase if you've completed under 20% of the questions. See pricing →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing For Teams About

Language

✓ EnglishDeutschEspañolFrançaisPortuguês
Check readiness — free →

Enforce authorization during retrieval: What missing control is most direct?

AIGP Understanding How to Govern AI Deployment and Use Hard

The defect is unauthorized retrieval, so authorization must be enforced at retrieval rather than only through accuracy testing or review.

The question

An energy-maintenance assistant retrieves work orders and personnel records from a shared index. The model is accurate and reviewers are available, but technicians can receive records outside their assigned sites. Assume all other prerequisites are satisfied. What missing control is most direct?

Preparing for AIGP? Take the free 5-min readiness quiz →

  1. Expand the maintenance impact assessment.
    Impact assessment can clarify risks and affected people, but it does not technically enforce record-level access boundaries.
  2. Require supervisors to review every maintenance response.
    Supervisor review may reduce some disclosure risk, but retrieval authorization should restrict inaccessible records before generation.
  3. Enforce authorization during retrieval. ✓
    Filtering retrieval by user and site authorization prevents the assistant from exposing records beyond each technician’s permitted operational scope.
  4. Add stronger answer-quality testing.
    Answer testing may find factual defects, but it does not prevent retrieval of records that the requesting technician is unauthorized to view.
The trap
When retrieval crosses permission boundaries, fix access before generation rather than relying on reviewers afterward.

How to remember it

The defect is unauthorized retrieval, so authorization must be enforced at retrieval rather than only through accuracy testing or review.

How many of these would you get right?

One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.

Test your AIGP readiness — free

More Understanding How to Govern AI Deployment and Use questions

Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use · Every answer, right and wrong, comes with its own explanation.