Policies and third-party risk
AIGP · Lesson 4 of 15 · 23:04
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the IAPP AIGP exam, on the AIGP Body of Knowledge version 2.1. In this lesson: policies across the AI life cycle (use case intake, ethics by design, monitoring, documentation, and incident management), approvals, risk tiering, and the AI inventory, updating privacy, security, data governance, and intellectual property policies for AI, third-party risk through procurement, contracts, and the supply chain, and human resources and acceptable use policies. Includes three original practice questions, with Elmstead Group, a fictional retail and finance group, as the example.
Preview the topics
- Elmstead’s committee wants to know how many AI systems the group runs, who owns each one, and how risky each one is. What should it create first?
- Employees paste customer complaints, with names and account numbers, into a free public chatbot to draft replies. Which policy should address this first?
- A business unit wants to buy an AI tool that summarizes customer calls. Before signing, what should procurement add to its usual vendor review?