QuestionQ36

AI Governance and Program Management

When AI is used as part of incident response, which of the following BEST ensures that automation complies with regulatory and governance obligations?

Explanation

A risk-based, tiered automation model aligns the level of human oversight with incident severity. It preserves accountable human review for higher-impact actions while allowing appropriate automation for lower-risk events, supporting governance and regulatory compliance. NIST’s AI Risk Management Framework calls for defined, documented human-oversight processes under organizational governance policies.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!