An AI auditor is examining an organization's AI incident log. The log contains 47 entries over 12 months, all classified as 'minor.' The auditor interviews business units and discovers several significant AI failures that were not reported. What control failure does this reveal?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — if significant failures aren't in the log and everything logged is 'minor,' you're looking at unclear classification criteria and escalation thresholds. Business units don't have clear guidance on what counts as a reportable AI incident.
Full Explanation
The correct control failure is unclear or misaligned AI incident classification criteria and escalation thresholds. The gap between unreported significant failures and a log of only 'minor' entries shows business units lack clear guidance on what is reportable. The character limit on descriptions is a technical logging issue, not a classification gap. Deliberate concealment assumes malicious intent without evidence. Inaccessible storage is an audit access issue, not why significant failures were logged as minor.