A consultant is advising a customer that wants a scalable implementation. What is the best way to handle policy configuration while staying aligned with the certification objectives?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Think of policies like the foundation of a house—skip laying it properly and everything built on top wobbles. Option C is right: you've got to configure policies, questionnaires, and workflows that genuinely match what your organization is obligated to do. It's not about checking a box; it's about building governance that actually scales and sticks around!
Full explanation below image
Full Explanation
The correct answer is C. Policies, questionnaires, and workflow requirements must be deliberately configured to align with your organization's specific governance obligations. This ensures that as you scale, every team follows consistent controls tied to real business needs. Option A (default text without mapping) ignores your actual obligations and won't scale. Option B (disabling questions for high-risk assets) removes critical controls exactly where you need them most. Option D (one-time demo task) misses that governance is ongoing and must evolve as your AI inventory grows.