Governance activities in the current plan are not linked to any external requirement. What should the plan instead map those activities to?
Select an answer to reveal the explanation.
Short Explanation
If a governance activity isn't tied to a real requirement, it's just busywork. You should map it to the laws, standards, and organisational policies that apply to the use case. That mapping is what makes the activity meaningful.
Full Explanation
Governance activities exist to demonstrate compliance with real external and internal obligations, so each one should trace back to the specific law, standard, or organisational policy it is satisfying. Mapping governance work to the relevant laws, standards, and organisational policies that apply to the use case gives the activity a clear purpose and makes it auditable. An internal engineering style guide is not sufficient because it covers code conventions, not legal or regulatory obligations. A vendor's terms of service is also not sufficient because it governs the vendor relationship, not the organisation's own regulatory exposure. Industry news about AI incidents can be informative, but it is not itself a binding requirement to map governance activities against. For the exam, expect governance activities to be traceable to specific laws, standards, and policies.