An AI risk manager is prioritizing which AI models in a large enterprise portfolio require immediate attention. Which combination of factors should drive the HIGHEST risk rating?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because the combination of customer-facing use with material financial impact (credit decisions), absence of ongoing monitoring (a key control gap), and moderate complexity creates a high-risk profile. The absence of monitoring means degradation would go undetected.
Full explanation below image
Full Explanation
B is correct because the combination of customer-facing use with material financial impact (credit decisions), absence of ongoing monitoring (a key control gap), and moderate complexity creates a high-risk profile. The absence of monitoring means degradation would go undetected. A has a low-stakes context that mitigates risk. C has compensating controls (monthly reviews) and rule-based logic. D has internal HR use with existing validation, both of which reduce urgency.