An AI audit report identifies a finding that an organization lacks a documented AI model inventory. Under which audit reporting criterion should this finding be classified?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — you should classify this as a significant deficiency in governance controls with a required remediation timeline because a missing AI model inventory breaks model risk oversight, prioritization, and compliance monitoring. Calling it a minor observation understates a foundational governance gap.
Full Explanation
The finding should be classified as a significant deficiency in governance controls with a required remediation timeline because the absence of a documented AI model inventory is a significant governance control gap. It prevents effective model risk oversight, prioritization, and compliance monitoring, so it warrants a remediation timeline. The minor observation option understates the severity of a foundational governance gap. The fraud indicator option is inappropriate because this is a governance deficiency, not a fraud indicator. The technical defect option is a disproportionate response because the issue is a documentation and governance control gap, not a technical defect requiring immediate system shutdown.