A financial institution uses the COBIT for AI framework to assess its AI governance maturity. The assessment reveals that AI-related risks are tracked informally by individual teams without enterprise-level visibility. Which maturity level does this MOST likely represent?
Select an answer to reveal the explanation.
Short Explanation
You’re at Level 1 — Initial (ad hoc) because AI risks are tracked informally by individual teams, with no enterprise-level visibility or standardization. That’s reactive, siloed behavior, not a documented or measured process.
Full Explanation
Level 1 — Initial (ad hoc) is correct because COBIT-based maturity models describe it as informal, reactive practices with no enterprise-level oversight or standardization, matching siloed informal risk tracking. The defined documented-processes option is wrong because it requires documented, consistently followed processes. The managed quantitatively-measured option is wrong because it requires quantitative measurement. The optimizing continuous-improvement option is wrong because it requires a continuous improvement culture.