Reassess the updated system: Which missing control most directly addresses the changed vendor system before
A substantial vendor update requires reassessment because previous evidence may no longer describe the deployed system.
The question
A medical administration office uses a vendor’s appointment-scheduling assistant without providing clinical advice. The vendor releases a substantial model update. Monitoring, permissions, human oversight, incident response, and documentation are otherwise established. Which missing control most directly addresses the changed vendor system before continued use?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Continue use under the previous evaluation results.Earlier results may provide context, but they do not establish performance or risk after a substantial system change.
- Accept the vendor’s update notice as sufficient evidence.An update notice identifies change but does not establish suitability for this deployment or reveal changed limitations and responsibilities.
- Reassess the updated system. ✓A substantial vendor change can alter performance and risks, so reassessment directly determines whether existing controls remain suitable.
- Require the vendor to provide a broad performance guarantee.A guarantee may allocate responsibility, but it does not replace use-case-specific evaluation or reveal operational changes after release.
The trap
A supplier update changes the evidence base; reassess actual use rather than relying on old benchmarks or broad assurances. How to remember it
A substantial vendor update requires reassessment because previous evidence may no longer describe the deployed system.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- Suspend the affected function and route applicants through: Which action most directly limits ongoing impact? →
- Link delayed labels to predictions for outcome monitoring: Which missing control most directly addresses this →
- Revoke the service account and disable vendor connector: Which missing control is most direct? →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.
