A vendor switched its chatbot's AI model without due diligence, causing unethical investment advice. What control BEST prevents this scenario?

Question

Options

• AMaster services agreement
• BChange management
• CShared responsibility model
• DData minimization

• A
  3% (1)
• B
  80% (24)
• C
  10% (3)
• D
  7% (2)

Explanation

Change management is a formal process that requires all system changes - including model swaps - to go through review, impact assessment, testing, and approval before being deployed to production. A properly enforced change management process would have flagged the model substitution, triggered due diligence, and prevented the unvetted deployment. A master services agreement (A) defines contractual obligations but does not operationally prevent unauthorized changes. A shared responsibility model (C) clarifies who owns what but does not enforce a review gate. Data minimization (D) reduces data scope and has no bearing on preventing unreviewed model changes.

No community discussion yet for this question.