Test the model and service against attacks: Which missing control most directly addresses the evidence gap?
The gap is security evidence, requiring testing of attacks and unauthorized access.
The question
An insurance claims model meets its accuracy, subgroup, privacy, documentation, and acceptance criteria. Held-out performance is validated, but malicious-input testing and unauthorized-access testing are absent. All other development prerequisites are satisfied. Which missing control most directly addresses the evidence gap?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Review feature transformations, data lineage, and documentation for implementation weaknesses.Those reviews may reveal implementation or provenance issues but do not directly demonstrate resilience against attacks or access violations.
- Recalculate subgroup metrics using additional claims from underrepresented groups.Additional subgroup metrics address fairness and performance variation, not malicious inputs or unauthorized access.
- Test the model and service against attacks and unauthorized access. ✓Security testing directly evaluates adversarial manipulation, access weaknesses, and related security threats missing from ordinary validation.
- Expand validation coverage.More ordinary validation cases improve performance evidence but do not directly test attacks or unauthorized access.
The trap
Match the control to the evidence gap: performance metrics cannot establish security properties. How to remember it
The gap is security evidence, requiring testing of attacks and unauthorized access.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Development questions
- Set thresholds using documented error costs: Which control is most direct? →
- Perform privacy-leakage and re-identification testing: Which control is most direct? →
- Establish adjudication and measure annotator agreement: Which missing control is most direct? →
- All 426 Understanding How to Govern AI Development questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Development ·
Every answer, right and wrong, comes with its own explanation.
