Log near misses with owners and corrective actions: Which missing control best addresses this gap?
Log prevented privacy incidents with ownership and corrective actions, not only incidents causing confirmed harm.
The question
A customer-service assistant generated several responses that nearly exposed private account details, but agents corrected them before customers saw the information. Monitoring, testing, oversight, risk treatment, and supplier controls are complete. The organization records only incidents causing confirmed customer harm. Which missing control best addresses this gap?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Log near misses with owners and corrective actions. ✓Structured near-miss records preserve evidence, support causal analysis, assign follow-up, and allow the organization to assess corrective-action effectiveness.
- Sample more responses.More sampling may detect additional failures, but it does not ensure prevented incidents are recorded, analyzed, assigned, and corrected.
- Add privacy examples to annual staff training.Training may improve awareness, but it does not create a reliable record of near misses or trigger case-specific corrective action.
- Create an informal channel for agents to flag unusual responses.An informal channel may surface concerns, but it does not require consistent evidence, ownership, causal analysis, or follow-up.
The trap
Averted harm still supplies governance evidence; capture the event and its follow-up, not only confirmed harm. How to remember it
Log prevented privacy incidents with ownership and corrective actions, not only incidents causing confirmed harm.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Development questions
- Test the integrated workflow for security regressions: Which control is missing? →
- Track subgroup outcomes over time: Which control most directly addresses the concern? →
- Document owner: Which control best resolves both constraints? →
- All 426 Understanding How to Govern AI Development questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Development ·
Every answer, right and wrong, comes with its own explanation.