Pause automated recommendations and preserve incident: What is the appropriate immediate governance response?
Containment can precede root-cause completion when a controllable exposure exists and a safer fallback is available.
The question
A procurement tool begins recommending a supplier with expired security documentation. The organization has not completed root-cause analysis, but the recommendation can be paused and manual procurement is available. What is the appropriate immediate governance response?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Ask the supplier to renew documentation while recommendations continue.Supplier remediation may help, but continued automated recommendations preserve the immediate exposure during unresolved uncertainty.
- Pause automated recommendations and preserve incident evidence. ✓Containment reduces immediate exposure while preserving logs and evidence needed for later diagnosis, remediation, and recovery decisions.
- Replace the procurement model immediately without documenting the incident.Replacement may be premature and undocumented action loses evidence needed to understand impact and evaluate corrective effectiveness.
- Complete root-cause analysis before changing operations.Waiting for causal certainty leaves an identifiable supplier-security risk active despite an available lower-risk fallback.
The trap
Contain first when exposure can be reduced safely; investigate concurrently rather than delaying protection. How to remember it
Containment can precede root-cause completion when a controllable exposure exists and a safer fallback is available.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Development questions
- The red-team result identifies a release-blocking risk: What should the release team conclude? →
- Restore the prior model with compatible data handling: What must accompany the rollback decision? →
- Disclose the model’s handwritten-form limitations: What should the insurer request before deployment? →
- All 426 Understanding How to Govern AI Development questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Development ·
Every answer, right and wrong, comes with its own explanation.
