Define deployer oversight: Which missing control is most direct?
The university is the deployer, so its missing control is operational human oversight rather than provider documentation or reclassification.
The question
Under the EU AI Act, assume all relevant duties apply. A university deploys a vendor’s high-risk admissions-ranking system without changing its intended purpose or technical design. The vendor has supplied technical documentation, instructions, and provider evidence; data governance, transparency, conformity, and risk management are satisfied. The university has not designated how staff will exercise human oversight or respond to system outputs. Which missing control is most direct?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Define deployer oversight ✓The university, as deployer, must operationalize human oversight rather than rely solely on the vendor’s provider documentation.
- Rewrite provider documentationRewriting vendor documentation is unnecessary because the provider’s required materials are already supplied and technically complete.
- Reclassify the university as providerPurchasing and deploying a system does not automatically make the university its provider under the stated facts.
- Publish the vendor’s training summaryA public training summary concerns certain general-purpose model obligations and does not establish operational human oversight.
The trap
Ask who changed, supplied, or deployed the system; purchasing alone does not transfer provider status. How to remember it
The university is the deployer, so its missing control is operational human oversight rather than provider documentation or reclassification.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Provide an AI interaction notice: Which missing control is most direct? →
- Assess provider responsibilities: Which missing control is most direct? →
- Assess substantial modification: Before distribution, which missing control is most direct? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.