An AI auditor is examining an organization's AI incident log. The log contains 47 entries over 12 months, all classified as 'minor.' The auditor interviews business units and discovers several significant AI failures that were not reported. What control failure does this reveal?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because the gap between unreported significant incidents and the log containing only 'minor' entries most likely reflects unclear or inadequate incident classification criteria and escalation thresholds — business units lack clear guidance on what constitutes a reportable AI incident. C assumes malicious intent without evidence.
Full explanation below image
Full Explanation
B is correct because the gap between unreported significant incidents and the log containing only 'minor' entries most likely reflects unclear or inadequate incident classification criteria and escalation thresholds — business units lack clear guidance on what constitutes a reportable AI incident. C assumes malicious intent without evidence. A and D are access and technical issues that do not explain the classification gap.