Which statement best summarises how structured lifecycle workflows should treat risk and controls?
Select an answer to reveal the explanation.
Short Explanation
Risk isn't fixed at proposal time. You need to check it again at each key stage, with a recorded sign-off before the model moves closer to real users.
Full Explanation
The correct statement is that risk and controls should be reviewed at each key stage, with recorded sign-off before the model advances. Repeated, stage-specific review with sign-off lets an organisation catch risk that changes as data, scope or deployment context change over the model's life.
The statement saying review once at proposal and treat as settled is wrong because a single early review cannot account for shifts between proposal and production.
The statement saying review only by the building team is wrong because it removes the independent check governance depends on.
The statement saying review only when accuracy drops below a threshold is wrong because accuracy degradation is a monitoring trigger, not a substitute for scheduled lifecycle review.
For the exam, describe risk and controls review as recurring and independent, tied to lifecycle stages.