Exam Bundle

This result would support licensing restrictions, a distinct governance need illustrated by: A team embeds a model in a public product although the vendor license restricts its distribution and certain uses. For the reported vendor model changes issue at a global platform operator in Berlin, the relevant corrective action is: Require change management, notice, and reevaluation rights proportionate to deployment risk. The offered observation does not establish whether that targeted control succeeded.

This result would support subprocessor oversight, a distinct governance need illustrated by: A vendor may route prompts through undisclosed subcontractors, but the buyer's review covers only the contracting company. For the reported vendor model changes issue at a global platform operator in Berlin, the relevant corrective action is: Require change management, notice, and reevaluation rights proportionate to deployment risk. The offered observation does not establish whether that targeted control succeeded.

This result would support portability and exit, a distinct governance need illustrated by: A proprietary vendor becomes unavailable and the company cannot export necessary settings or transition critical processes. For the reported vendor model changes issue at a global platform operator in Berlin, the relevant corrective action is: Require change management, notice, and reevaluation rights proportionate to deployment risk. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to human oversight by design, for which an example concern is: A financial approval workflow inserts a reviewer screen but gives the reviewer no relevant evidence or ability to override. It could be useful in that different situation, but it would not directly address the architecture security review deficiency reported at a regional technology consortium in Auckland. The targeted acceptance criterion here is: Architecture tests demonstrate bounded tool access and blocked data-exfiltration paths.

This response relates instead to benchmark relevance, for which an example concern is: A vendor presents a generic language benchmark to justify clinical workflow use without evaluating the clinical tasks. It could be useful in that different situation, but it would not directly address the architecture security review deficiency reported at a regional technology consortium in Auckland. The targeted acceptance criterion here is: Architecture tests demonstrate bounded tool access and blocked data-exfiltration paths.

This response relates instead to affected-party design feedback, for which an example concern is: A tenant-screening AI is designed using only landlord opinions, excluding people who could be unfairly rejected. It could be useful in that different situation, but it would not directly address the architecture security review deficiency reported at a regional technology consortium in Auckland. The targeted acceptance criterion here is: Architecture tests demonstrate bounded tool access and blocked data-exfiltration paths.

This result would support evaluation-threshold setting, a distinct governance need illustrated by: Engineers approve a classifier because it scored well in a demo with no predeclared acceptance criteria. For the reported architecture security review issue at a regional technology consortium in Auckland, the relevant corrective action is: Perform threat modeling and least-privilege architectural review before connecting AI to tools. The offered observation does not establish whether that targeted control succeeded.

This result would support affected-party design feedback, a distinct governance need illustrated by: A tenant-screening AI is designed using only landlord opinions, excluding people who could be unfairly rejected. For the reported architecture security review issue at a regional technology consortium in Auckland, the relevant corrective action is: Perform threat modeling and least-privilege architectural review before connecting AI to tools. The offered observation does not establish whether that targeted control succeeded.

This result would support human oversight by design, a distinct governance need illustrated by: A financial approval workflow inserts a reviewer screen but gives the reviewer no relevant evidence or ability to override. For the reported architecture security review issue at a regional technology consortium in Auckland, the relevant corrective action is: Perform threat modeling and least-privilege architectural review before connecting AI to tools. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to nist measure function, for which an example concern is: A system's risks are discussed qualitatively but no evaluation method or measurable evidence has been selected. It could be useful in that different situation, but it would not directly address the nist map function deficiency reported at a cross-sector corporate group in Dublin. The targeted acceptance criterion here is: A context map links the use case to affected groups, constraints, and foreseeable harms.

This response relates instead to nist govern function, for which an example concern is: An AI risk project starts measuring accuracy but nobody has established accountability or organizational risk-management policy. It could be useful in that different situation, but it would not directly address the nist map function deficiency reported at a cross-sector corporate group in Dublin. The targeted acceptance criterion here is: A context map links the use case to affected groups, constraints, and foreseeable harms.

This response relates instead to nist manage function, for which an example concern is: An assessment reveals material AI harm but the project never prioritizes or acts on the findings. It could be useful in that different situation, but it would not directly address the nist map function deficiency reported at a cross-sector corporate group in Dublin. The targeted acceptance criterion here is: A context map links the use case to affected groups, constraints, and foreseeable harms.

This result would support iso 42001 aims, a distinct governance need illustrated by: A multinational wants organization-wide procedures for managing AI systems but focuses only on a single model's technical tests. For the reported nist map function issue at a cross-sector corporate group in Dublin, the relevant corrective action is: Use the NIST AI RMF Map function to define context, stakeholders, purpose, and potential impacts. The offered observation does not establish whether that targeted control succeeded.

This result would support iso terminology and impact scope, a distinct governance need illustrated by: A procurement team confuses ISO/IEC 22989 terminology work with the impact-assessment role of ISO/IEC 42005. For the reported nist map function issue at a cross-sector corporate group in Dublin, the relevant corrective action is: Use the NIST AI RMF Map function to define context, stakeholders, purpose, and potential impacts. The offered observation does not establish whether that targeted control succeeded.

This result would support nist govern function, a distinct governance need illustrated by: An AI risk project starts measuring accuracy but nobody has established accountability or organizational risk-management policy. For the reported nist map function issue at a cross-sector corporate group in Dublin, the relevant corrective action is: Use the NIST AI RMF Map function to define context, stakeholders, purpose, and potential impacts. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to ai end-user training, for which an example concern is: New frontline users trust every generated recommendation because the training explains features but omits failure modes. It could be useful in that different situation, but it would not directly address the external incident communications deficiency reported at an enterprise digital assurance office in Toronto. The targeted acceptance criterion here is: Communication exercises demonstrate timely, accurate, coordinated notices where required.

This response relates instead to deactivation authority, for which an example concern is: A model shows a serious new safety defect, but no role is empowered to suspend its use until an executive meeting next month. It could be useful in that different situation, but it would not directly address the external incident communications deficiency reported at an enterprise digital assurance office in Toronto. The targeted acceptance criterion here is: Communication exercises demonstrate timely, accurate, coordinated notices where required.

This response relates instead to agentic red-team testing, for which an example concern is: An agent gains new tools for external actions, but the last red team exercised only its conversational answers. It could be useful in that different situation, but it would not directly address the external incident communications deficiency reported at an enterprise digital assurance office in Toronto. The targeted acceptance criterion here is: Communication exercises demonstrate timely, accurate, coordinated notices where required.

This result would support deployment operating procedure, a distinct governance need illustrated by: An AI decision-support service goes live with no instructions for operators on appropriate inputs, exceptions, or prohibited uses. For the reported external incident communications issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Prepare consistent stakeholder and regulator communication plans with accountable spokespeople. The offered observation does not establish whether that targeted control succeeded.

This result would support agentic red-team testing, a distinct governance need illustrated by: An agent gains new tools for external actions, but the last red team exercised only its conversational answers. For the reported external incident communications issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Prepare consistent stakeholder and regulator communication plans with accountable spokespeople. The offered observation does not establish whether that targeted control succeeded.

This result would support maintenance after drift, a distinct governance need illustrated by: A deployed forecasting model gradually deteriorates, but updates are scheduled only annually regardless of monitoring results. For the reported external incident communications issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Prepare consistent stakeholder and regulator communication plans with accountable spokespeople. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to continuous model monitoring, for which an example concern is: A production classifier has no monitoring because engineers assume prelaunch validation remains sufficient forever. It could be useful in that different situation, but it would not directly address the red-teaming schedule deficiency reported at a cross-sector corporate group in Dublin. The targeted acceptance criterion here is: Exercise reports identify exploits, mitigations, and retest results for updated functionality.

This response relates instead to concept drift, for which an example concern is: A prediction model's learned relationship degrades after policy changes although the input-value distribution appears stable. It could be useful in that different situation, but it would not directly address the red-teaming schedule deficiency reported at a cross-sector corporate group in Dublin. The targeted acceptance criterion here is: Exercise reports identify exploits, mitigations, and retest results for updated functionality.

This response relates instead to external transparency materials, for which an example concern is: Deployers are offered a high-impact model without understandable operational instructions, limitations, or monitoring information. It could be useful in that different situation, but it would not directly address the red-teaming schedule deficiency reported at a cross-sector corporate group in Dublin. The targeted acceptance criterion here is: Exercise reports identify exploits, mitigations, and retest results for updated functionality.

This result would support threat-model maintenance, a distinct governance need illustrated by: An agent's tool access expands beyond its original design, but the security threat model is still based on a text-only chatbot. For the reported red-teaming schedule issue at a cross-sector corporate group in Dublin, the relevant corrective action is: Schedule risk-appropriate red teaming after material capability changes and periodically thereafter. The offered observation does not establish whether that targeted control succeeded.

This result would support reliability regression tests, a distinct governance need illustrated by: Every model upgrade is assessed only on new features and ignores whether previously safe behavior has regressed. For the reported red-teaming schedule issue at a cross-sector corporate group in Dublin, the relevant corrective action is: Schedule risk-appropriate red teaming after material capability changes and periodically thereafter. The offered observation does not establish whether that targeted control succeeded.

This result would support model-card limitations, a distinct governance need illustrated by: A deployer receives a new model but cannot find its intended uses, benchmark limits, or known failure populations. For the reported red-teaming schedule issue at a cross-sector corporate group in Dublin, the relevant corrective action is: Schedule risk-appropriate red teaming after material capability changes and periodically thereafter. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to cross-functional review, for which an example concern is: A credit-related model is reviewed only by engineers although its use may affect fairness, privacy, and consumer rights. It could be useful in that different situation, but it would not directly address the board-level oversight deficiency reported at a professional services group in London. The targeted acceptance criterion here is: Leadership dashboards and minutes demonstrate oversight decisions and follow-up actions.

This response relates instead to enterprise inventory ownership, for which an example concern is: Different divisions independently operate AI features and cannot say which systems process sensitive or consequential data. It could be useful in that different situation, but it would not directly address the board-level oversight deficiency reported at a professional services group in London. The targeted acceptance criterion here is: Leadership dashboards and minutes demonstrate oversight decisions and follow-up actions.

This response relates instead to employee ai literacy, for which an example concern is: Staff begin using generative assistants with customer data without learning permitted uses, limitations, or escalation procedures. It could be useful in that different situation, but it would not directly address the board-level oversight deficiency reported at a professional services group in London. The targeted acceptance criterion here is: Leadership dashboards and minutes demonstrate oversight decisions and follow-up actions.

This result would support employee ai literacy, a distinct governance need illustrated by: Staff begin using generative assistants with customer data without learning permitted uses, limitations, or escalation procedures. For the reported board-level oversight issue at a professional services group in London, the relevant corrective action is: Establish regular governing-body reporting on AI objectives, material risks, and unresolved exceptions. The offered observation does not establish whether that targeted control succeeded.

This result would support enterprise inventory ownership, a distinct governance need illustrated by: Different divisions independently operate AI features and cannot say which systems process sensitive or consequential data. For the reported board-level oversight issue at a professional services group in London, the relevant corrective action is: Establish regular governing-body reporting on AI objectives, material risks, and unresolved exceptions. The offered observation does not establish whether that targeted control succeeded.

This result would support cross-functional review, a distinct governance need illustrated by: A credit-related model is reviewed only by engineers although its use may affect fairness, privacy, and consumer rights. For the reported board-level oversight issue at a professional services group in London, the relevant corrective action is: Establish regular governing-body reporting on AI objectives, material risks, and unresolved exceptions. The offered observation does not establish whether that targeted control succeeded.