Revoke credentials and vendor access: Which retirement action is most complete?
Retirement requires removing executable access and dependencies while preserving evidence and verifying the replacement process.
The question
An insurance operations team retires a claims-triage model after discovering that a new policy population was outside its validated scope. A manual fallback is operating, but the model remains callable through a service account, two workflow rules still route claims to it, and the vendor retains scheduled data access. This is an EU deployment; applicable EU AI Act obligations apply, while NIST guidance informs internal controls. Which retirement action is most complete?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Revoke credentials and vendor access, remove routing paths, preserve records, and verify fallback handling. ✓This closes technical and supplier access, removes residual invocation paths, preserves evidence, and confirms continuity through the fallback.
- Cancel the vendor subscription and retain internal routing rules for possible reuse.Cancellation may not revoke credentials, and retained routing rules can continue invoking or misdirecting claims.
- Archive documentation, notify staff, and complete a post-retirement review of the model’s performance.Records, notice, and review support governance but do not remove executable access or scheduled external processing.
- Disable the interface and direct staff to the manual fallback.Removing the interface does not stop service-account calls, workflow routing, or vendor data access.
The trap
Look beyond the interface: revoke access, remove invocation paths, preserve evidence, and check fallback operation. How to remember it
Retirement requires removing executable access and dependencies while preserving evidence and verifying the replacement process.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- Track process indicators while awaiting verified outcome: Which monitoring response best preserves decision →
- Record affected interactions and accessible correction: What documentation most directly supports those →
- Route contested assignments to an authorized supervisor: What escalation design best addresses the changed →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.
