Exam Bundle

This result would support safety versus raw accuracy, a distinct governance need illustrated by: An industrial anomaly detector improves average accuracy but produces rare unsafe false negatives in a safety-critical process. For the reported probabilistic output and review issue at a multinational enterprise in Amsterdam, the relevant corrective action is: Establish testable quality thresholds and an exception-review path reflecting probabilistic outputs. The offered observation does not establish whether that targeted control succeeded.

This result would support algorithmic unfairness, a distinct governance need illustrated by: An AI screening tool achieves high overall accuracy while a protected demographic group has substantially worse false-negative rates. For the reported probabilistic output and review issue at a multinational enterprise in Amsterdam, the relevant corrective action is: Establish testable quality thresholds and an exception-review path reflecting probabilistic outputs. The offered observation does not establish whether that targeted control succeeded.

This result would support autonomous agent boundaries, a distinct governance need illustrated by: An agent is permitted to make irreversible account changes on its own because it performed well in a few chat demonstrations. For the reported probabilistic output and review issue at a multinational enterprise in Amsterdam, the relevant corrective action is: Establish testable quality thresholds and an exception-review path reflecting probabilistic outputs. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to copyright in training data, for which an example concern is: A model team scrapes copyrighted technical manuals for training and treats public accessibility as a universal license. It could be useful in that different situation, but it would not directly address the housing access equality deficiency reported at a residential management group in Rotterdam. The targeted acceptance criterion here is: Application outcomes and selection criteria are tested under applicable housing rules.

This response relates instead to product safety liability, for which an example concern is: A manufacturer integrates AI into a safety device but evaluates only the vendor's standalone model accuracy. It could be useful in that different situation, but it would not directly address the housing access equality deficiency reported at a residential management group in Rotterdam. The targeted acceptance criterion here is: Application outcomes and selection criteria are tested under applicable housing rules.

This response relates instead to confidential business material, for which an example concern is: An employee uploads trade-secret pricing data to a third-party assistant without checking confidentiality commitments. It could be useful in that different situation, but it would not directly address the housing access equality deficiency reported at a residential management group in Rotterdam. The targeted acceptance criterion here is: Application outcomes and selection criteria are tested under applicable housing rules.

This result would support confidential business material, a distinct governance need illustrated by: An employee uploads trade-secret pricing data to a third-party assistant without checking confidentiality commitments. For the reported housing access equality issue at a residential management group in Rotterdam, the relevant corrective action is: Assess housing-specific nondiscrimination requirements alongside the AI governance policy. The offered observation does not establish whether that targeted control succeeded.

This result would support consumer deception, a distinct governance need illustrated by: An AI-powered shopping assistant claims it performed a professional inspection that never occurred. For the reported housing access equality issue at a residential management group in Rotterdam, the relevant corrective action is: Assess housing-specific nondiscrimination requirements alongside the AI governance policy. The offered observation does not establish whether that targeted control succeeded.

This result would support credit fairness, a distinct governance need illustrated by: A lender checks statistical prediction accuracy but ignores how its automated score affects borrowers subject to fair-lending rules. For the reported housing access equality issue at a residential management group in Rotterdam, the relevant corrective action is: Assess housing-specific nondiscrimination requirements alongside the AI governance policy. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to impact assessment in design, for which an example concern is: A high-impact model architecture is finalized before anyone assesses possible harm to vulnerable users. It could be useful in that different situation, but it would not directly address the model selection trade-offs deficiency reported at a regional service provider in Singapore. The targeted acceptance criterion here is: An alternatives assessment explains why the chosen method meets the actual use-case constraints.

This response relates instead to affected-party design feedback, for which an example concern is: A tenant-screening AI is designed using only landlord opinions, excluding people who could be unfairly rejected. It could be useful in that different situation, but it would not directly address the model selection trade-offs deficiency reported at a regional service provider in Singapore. The targeted acceptance criterion here is: An alternatives assessment explains why the chosen method meets the actual use-case constraints.

This response relates instead to evaluation-threshold setting, for which an example concern is: Engineers approve a classifier because it scored well in a demo with no predeclared acceptance criteria. It could be useful in that different situation, but it would not directly address the model selection trade-offs deficiency reported at a regional service provider in Singapore. The targeted acceptance criterion here is: An alternatives assessment explains why the chosen method meets the actual use-case constraints.

This result would support benchmark relevance, a distinct governance need illustrated by: A vendor presents a generic language benchmark to justify clinical workflow use without evaluating the clinical tasks. For the reported model selection trade-offs issue at a regional service provider in Singapore, the relevant corrective action is: Evaluate model types against the task, risk, cost, latency, accuracy, and explainability requirements. The offered observation does not establish whether that targeted control succeeded.

This result would support architecture security review, a distinct governance need illustrated by: An AI model is connected to privileged enterprise tools without evaluating injection, exfiltration, or privilege boundaries. For the reported model selection trade-offs issue at a regional service provider in Singapore, the relevant corrective action is: Evaluate model types against the task, risk, cost, latency, accuracy, and explainability requirements. The offered observation does not establish whether that targeted control succeeded.

This result would support affected-party design feedback, a distinct governance need illustrated by: A tenant-screening AI is designed using only landlord opinions, excluding people who could be unfairly rejected. For the reported model selection trade-offs issue at a regional service provider in Singapore, the relevant corrective action is: Evaluate model types against the task, risk, cost, latency, accuracy, and explainability requirements. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to proprietary vendor model, for which an example concern is: Procurement selects a proprietary AI provider without checking model change notices, data handling, or service continuity. It could be useful in that different situation, but it would not directly address the fine-tuning governance deficiency reported at a cross-sector corporate group in Dublin. The targeted acceptance criterion here is: Fine-tuned versions pass privacy and task benchmarks and remain subject to version control.

This response relates instead to rag versus fine-tuning, for which an example concern is: A policy assistant gives outdated answers because its knowledge changes weekly, and the team proposes retraining model weights for every update. It could be useful in that different situation, but it would not directly address the fine-tuning governance deficiency reported at a cross-sector corporate group in Dublin. The targeted acceptance criterion here is: Fine-tuned versions pass privacy and task benchmarks and remain subject to version control.

This response relates instead to small versus large model, for which an example concern is: An edge device must operate offline, but a team selects a large remote model based only on headline benchmark scores. It could be useful in that different situation, but it would not directly address the fine-tuning governance deficiency reported at a cross-sector corporate group in Dublin. The targeted acceptance criterion here is: Fine-tuned versions pass privacy and task benchmarks and remain subject to version control.

This result would support multimodal capability decision, a distinct governance need illustrated by: A document workflow requires understanding diagrams and photographs, but procurement tests only text-only model capability. For the reported fine-tuning governance issue at a cross-sector corporate group in Dublin, the relevant corrective action is: Assess training-data rights, privacy exposure, evaluation, and rollback before fine-tuning. The offered observation does not establish whether that targeted control succeeded.

This result would support agentic orchestration risk, a distinct governance need illustrated by: A multi-agent workflow executes purchases and messages without explicit tool permission or a plan for cascading failures. For the reported fine-tuning governance issue at a cross-sector corporate group in Dublin, the relevant corrective action is: Assess training-data rights, privacy exposure, evaluation, and rollback before fine-tuning. The offered observation does not establish whether that targeted control succeeded.

This result would support classic versus generative choice, a distinct governance need illustrated by: A team chooses an open-ended generative model to perform a simple constrained numerical classification without comparing simpler alternatives. For the reported fine-tuning governance issue at a cross-sector corporate group in Dublin, the relevant corrective action is: Assess training-data rights, privacy exposure, evaluation, and rollback before fine-tuning. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to proportional control design, for which an example concern is: A small internal autocomplete pilot receives the same resource-intensive approvals as a high-impact medical triage system. It could be useful in that different situation, but it would not directly address the stakeholder engagement deficiency reported at a multinational enterprise in Amsterdam. The targeted acceptance criterion here is: Consultation findings are recorded and visibly influence risk controls or design changes.

This response relates instead to supplier-vs-deployer expectations, for which an example concern is: A procurement contract labels the system seller as the only accountable party even when the customer will configure and operate the service. It could be useful in that different situation, but it would not directly address the stakeholder engagement deficiency reported at a multinational enterprise in Amsterdam. The targeted acceptance criterion here is: Consultation findings are recorded and visibly influence risk controls or design changes.

This response relates instead to governance change management, for which an example concern is: A company adds agentic features to existing chatbots without telling policy owners or updating approval responsibilities. It could be useful in that different situation, but it would not directly address the stakeholder engagement deficiency reported at a multinational enterprise in Amsterdam. The targeted acceptance criterion here is: Consultation findings are recorded and visibly influence risk controls or design changes.

This result would support governance change management, a distinct governance need illustrated by: A company adds agentic features to existing chatbots without telling policy owners or updating approval responsibilities. For the reported stakeholder engagement issue at a multinational enterprise in Amsterdam, the relevant corrective action is: Involve affected stakeholders in governance consultation with suitable accessibility and feedback methods. The offered observation does not establish whether that targeted control succeeded.

This result would support cross-functional review, a distinct governance need illustrated by: A credit-related model is reviewed only by engineers although its use may affect fairness, privacy, and consumer rights. For the reported stakeholder engagement issue at a multinational enterprise in Amsterdam, the relevant corrective action is: Involve affected stakeholders in governance consultation with suitable accessibility and feedback methods. The offered observation does not establish whether that targeted control succeeded.

This result would support board-level oversight, a distinct governance need illustrated by: A company announces AI as strategically important but leadership receives no risk, exception, or incident information. For the reported stakeholder engagement issue at a multinational enterprise in Amsterdam, the relevant corrective action is: Involve affected stakeholders in governance consultation with suitable accessibility and feedback methods. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to risk-tier classification, for which an example concern is: A company considers all AI equally regulated without checking whether a use fits prohibited, high-risk, or transparency-focused categories. It could be useful in that different situation, but it would not directly address the applicable-role analysis deficiency reported at a multinational enterprise in Amsterdam. The targeted acceptance criterion here is: The regulatory responsibility map reflects real activities and any changes to the system.

This response relates instead to ai system transparency, for which an example concern is: Users interact with a machine-generated assistant while being told they are communicating with a human employee. It could be useful in that different situation, but it would not directly address the applicable-role analysis deficiency reported at a multinational enterprise in Amsterdam. The targeted acceptance criterion here is: The regulatory responsibility map reflects real activities and any changes to the system.

This response relates instead to gpai model responsibilities, for which an example concern is: An organization offering a general-purpose foundation model assumes only downstream app developers ever have governance duties. It could be useful in that different situation, but it would not directly address the applicable-role analysis deficiency reported at a multinational enterprise in Amsterdam. The targeted acceptance criterion here is: The regulatory responsibility map reflects real activities and any changes to the system.

This result would support deployer operational duties, a distinct governance need illustrated by: A customer believes purchasing a compliant high-risk model removes obligations to use it as instructed and monitor local outcomes. For the reported applicable-role analysis issue at a multinational enterprise in Amsterdam, the relevant corrective action is: Assess actual provider, deployer, importer, and distributor functions under the applicable legal framework. The offered observation does not establish whether that targeted control succeeded.

This result would support ai system transparency, a distinct governance need illustrated by: Users interact with a machine-generated assistant while being told they are communicating with a human employee. For the reported applicable-role analysis issue at a multinational enterprise in Amsterdam, the relevant corrective action is: Assess actual provider, deployer, importer, and distributor functions under the applicable legal framework. The offered observation does not establish whether that targeted control succeeded.

This result would support conformity assessment planning, a distinct governance need illustrated by: A vendor claims a high-risk AI product complies merely because internal stakeholders liked its prototype. For the reported applicable-role analysis issue at a multinational enterprise in Amsterdam, the relevant corrective action is: Assess actual provider, deployer, importer, and distributor functions under the applicable legal framework. The offered observation does not establish whether that targeted control succeeded.