Block release and restore the prior security baseline: Which action is most appropriate?
A confirmed security regression requires withholding release and restoring the prior baseline before operational use.
The question
A public benefit agency integrates a decision-support model with a new case-management API. Security testing finds that the integration exposes sensitive prompts in logs. The release cannot proceed until the existing security baseline is restored. Which action is most appropriate?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Ask the supplier to monitor logs after deployment and report anomalies.Post-deployment supplier monitoring leaves the known exposure active and does not satisfy the requirement to restore baseline security first.
- Measure accuracy differences before deciding whether exposure matters.Accuracy evidence cannot resolve a confirmed confidentiality regression or justify releasing a system below its security requirement.
- Deploy with additional reviewer training while logging remains exposed.Human review does not correct sensitive data exposure created by integration logging or restore the required security baseline.
- Block release and restore the prior security baseline. ✓Blocking release and restoring the baseline directly addresses the confirmed security regression before affected public-benefit operations continue.
The trap
When a release condition is explicit, choose the action that satisfies it before adding secondary monitoring or training. How to remember it
A confirmed security regression requires withholding release and restoring the prior baseline before operational use.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Development questions
- Test the update against claims-specific acceptance: Before enabling the update, which action best satisfies →
- Log the near miss: What should the team do? →
- Measure outcomes by service area: Which monitoring action best addresses this feedback loop? →
- All 426 Understanding How to Govern AI Development questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Development ·
Every answer, right and wrong, comes with its own explanation.