Require update impact assessment before production: Which control is most direct?
Supplier updates require impact assessment before acceptance, because changed behavior may alter safety-related priorities.
The question
An energy company uses a supplier model to prioritize maintenance inspections. All current monitoring, testing, oversight, risk treatment, and supplier documentation are complete. The supplier announces a model update, but the company lacks a process to determine whether changed behavior affects safety-related priorities before production use. Which control is most direct?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Ask maintenance supervisors to report unusual outputs.Supervisor feedback can supplement monitoring, but an informal reporting request does not establish structured pre-use change assessment.
- Archive the supplier’s update notice.Archiving notice preserves evidence of communication, but does not evaluate behavioral changes or their consequences for safety-related priorities.
- Require update impact assessment before production acceptance. ✓A pre-acceptance impact assessment directly evaluates changed behavior against the safety use case before the update enters production.
- Compare updated outputs with prior production outputs.Output comparison can identify differences, but alone does not determine whether changed priorities remain safe and acceptable for deployment.
The trap
A supplier update is a change event; require use-case-specific impact assessment before accepting it into production. How to remember it
Supplier updates require impact assessment before acceptance, because changed behavior may alter safety-related priorities.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Development questions
- Define outcome measures and mitigation review thresholds: What is missing? →
- Test the integrated workflow for security regressions: Which control is missing? →
- Log near misses with owners and corrective actions: Which missing control best addresses this gap? →
- All 426 Understanding How to Govern AI Development questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Development ·
Every answer, right and wrong, comes with its own explanation.