Pause the secondary use pending purpose-specific: Which missing control most directly addresses this emergent
A materially different use requires purpose-specific reassessment and approval before consequential deployment continues.
The question
A customer-service assistant was approved to summarize conversations for internal quality review. Other governance controls are complete. Usage monitoring now shows supervisors using those summaries to trigger customer account restrictions, a materially different purpose. Which missing control most directly addresses this emergent secondary use?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Expand the original quality-review sample to include more conversations.A larger original-purpose sample may improve quality evidence, but it does not evaluate the new account-restriction purpose.
- Improve summary fluency before continuing the new use.Fluency may improve readability, but it does not authorize, assess, or govern a materially different operational purpose.
- Pause the secondary use pending purpose-specific reassessment and approval. ✓A materially changed purpose requires reassessing risks and obtaining appropriate governance approval before continuing consequential use.
- Add a disclaimer that summaries were created by artificial intelligence.Disclosure may improve transparency, but it does not provide approval or reassessment for the new restriction-triggering use.
The trap
When actual use expands beyond the approved purpose, address authorization and reassessment before optimizing the output. How to remember it
A materially different use requires purpose-specific reassessment and approval before consequential deployment continues.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- Reassess the model using representative local data: Which missing control most directly addresses this local →
- Enforce least-privilege tools and pre-action containment: Which missing control most directly limits →
- Treat retrieved instructions as untrusted data: What missing control most directly addresses this →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.