Document the risk-management process: Which missing control | AIGP
7-day money-back guarantee — full refund within 7 days of purchase if you've completed under 20% of the questions. See pricing →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing For Teams About

Language

✓ EnglishDeutschEspañolFrançaisPortuguês
Check readiness — free →

Document the risk-management process: Which missing control is most direct?

AIGP Understanding How Laws, Standards and Frameworks Apply to AI Hard

The missing control is documented risk management because the system’s high-risk classification requires evidence of foreseeable-risk identification and mitigation.

The question

Under the EU AI Act, assume all relevant duties apply. A research-administration system ranks applicants for publicly funded research grants. Its intended purpose places it in a high-risk category; provider and deployer roles, data governance, transparency, human oversight, and technical documentation are already satisfied. The risk-management file does not show systematic identification and mitigation of foreseeable risks. Which missing control is most direct?

Preparing for AIGP? Take the free 5-min readiness quiz →

  1. Document the risk-management process ✓
    A documented, iterative risk-management process directly addresses the missing evidence that foreseeable risks were identified, assessed, and mitigated.
  2. Schedule post-market monitoring
    Post-market monitoring remains important, but it does not replace documenting the required pre-deployment risk-management process.
  3. Add user-facing disclosure
    Disclosure addresses transparency, but the stated evidence gap concerns structured identification and mitigation of foreseeable system risks.
  4. Expand training-data validation
    Data validation supports data governance, yet the stem expressly confirms data governance and identifies a broader risk-management documentation gap.
The trap
Identify the confirmed category first, then select the control corresponding exactly to the unfulfilled requirement.

How to remember it

The missing control is documented risk management because the system’s high-risk classification requires evidence of foreseeable-risk identification and mitigation.

How many of these would you get right?

One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.

Test your AIGP readiness — free

More Understanding How Laws, Standards and Frameworks Apply to AI questions

Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI · Every answer, right and wrong, comes with its own explanation.