AIGP · Question #180
Sam Simon is charged with implementing an AI governance program at his company, Spenger Inc. The company has implemented some AI systems already but has not really considered the risks involved and…
The correct answer is A. Leverage an existing impact assessment and tailor it to cover any gaps for AI. Leveraging an existing impact assessment framework (A) is the correct first step because building from an established template is more efficient and reliable than starting from scratch - it ensures best practices are already embedded, and Sam only needs to tailor it to address…
Question
Sam Simon is charged with implementing an AI governance program at his company, Spenger Inc. The company has implemented some AI systems already but has not really considered the risks involved and wants to ensure it has solid procedures and policies in place. Sam researches how to build an AI governance program, including talking with some of the company's other risk management professionals and the legal department to determine the best way to begin. Sam knows an algorithmic impact assessment is necessary to manage AI risks and adopt responsible, ethical AI practices, but he is not sure where to begin. Which of the following options will help ensure the assessment is both appropriate and effective. What should Sam do first?
Options
- ALeverage an existing impact assessment and tailor it to cover any gaps for AI.
- BMake sure the organization has secured the proper funding for the AI system.
- CNotify employees who will use the system about any necessary risk mitigation.
- DConfirm whether the AI system has been approved by the appropriate regulators.
How the community answered
(29 responses)- A72% (21)
- B7% (2)
- C3% (1)
- D17% (5)
Explanation
Leveraging an existing impact assessment framework (A) is the correct first step because building from an established template is more efficient and reliable than starting from scratch - it ensures best practices are already embedded, and Sam only needs to tailor it to address AI-specific gaps rather than reinventing the wheel. Funding (B) is a prerequisite concern handled before implementation, not part of designing the assessment itself. Notifying employees (C) is a downstream communication step that comes after the assessment has already identified risks and mitigations. Regulatory approval (D) may or may not apply depending on jurisdiction and industry, and checking it is not the first step in building the assessment framework itself.
Memory tip: Think of the assessment as a recipe - you adapt an existing recipe before you worry about telling the kitchen staff or getting a health inspection.
Topics
Community Discussion
No community discussion yet for this question.