Which statement best summarises good practice for mapping AI governance activities to external requirements?
Select an answer to reveal the explanation.
Short Explanation
You need to identify the laws, standards and organisational policies that apply, document how each is addressed, and keep the mapping current as requirements or jurisdictions change. A mapping that never gets revisited is only accurate for the day it was written.
Full Explanation
The best summary is identifying the specific laws, standards and organisational policies that apply, documenting how each is addressed, and keeping the mapping current as requirements or jurisdictions change. Requirements change and systems get deployed into new contexts, so the mapping must stay current, not be produced once and left alone. A single uniform policy applied across every jurisdiction and system is wrong because it cannot account for genuine differences between jurisdictions and standards. A mapping documented once at project start and treated as permanently complete is wrong because it misses new or changed requirements that arise later. Documentation limited to what is strictly needed to pass the next scheduled audit is wrong because it leaves gaps for anything the audit did not happen to check. For the exam, describe governance mapping as specific, documented and kept current.