Ethics, Compliance, Governance and Sustainable Operations

Introduction

Retail operations are often evaluated through sales, margins, inventory turnover and customer satisfaction. Yet operational excellence also depends on whether a retailer acts lawfully, fairly, transparently and sustainably. A store that achieves high sales by misleading customers, exploiting workers, mishandling personal data or generating avoidable waste is not operationally successful. Its apparent performance conceals legal, reputational, financial and social liabilities.

Ethics, compliance, governance and sustainability are therefore strategic dimensions of retail store operations. They influence assortment, pricing, selling practices, workforce management, technology deployment, supplier relationships, facilities, waste management and reporting. Their importance is amplified by omnichannel retailing, algorithmic decision-making, heightened consumer awareness, climate risk and increasingly demanding investors and regulators.

This chapter examines how retail managers can design controls and operating routines that protect consumers, employees, communities and the organization itself. It treats compliance not merely as a legal department’s responsibility, but as a system of managerial accountability embedded in everyday store decisions.

Learning Objectives

After studying this chapter, the reader should be able to:

1. Explain the relationship between ethics, compliance, governance and sustainability in retail.
2. Design controls for consumer protection, pricing integrity, product safety, privacy and accessibility.
3. Evaluate labor obligations and ethical selling practices.
4. Explain responsible uses and limitations of artificial intelligence in retail.
5. Develop operational responses to energy use, waste, packaging and environmental risks.
6. Construct audit-ready governance systems and ESG accountability measures.
7. Analyze an integrated retail compliance and sustainability problem and recommend corrective action.

1. The Retail Responsibility System

Ethics, compliance and governance

Ethics concerns principles about what ought to be done. It includes honesty, fairness, respect, non-maleficence, responsibility and stewardship. Ethical conduct may require action beyond the minimum demanded by law. For example, a retailer may legally collect certain customer data but still decide that collecting it is unnecessary or intrusive.

Compliance is adherence to applicable laws, regulations, standards, contractual commitments and internal policies. Relevant requirements differ by jurisdiction and product category. They may include consumer protection, competition, employment, tax, product safety, environmental, data protection and accessibility rules.

Governance is the allocation of authority, accountability and oversight through which decisions are directed and controlled. It answers questions such as: Who owns the risk? Who approves an exception? What evidence demonstrates control effectiveness? Who receives escalation reports?

Sustainability concerns the long-term management of economic, environmental and social impacts. In retail it includes energy and water consumption, emissions, waste, packaging, responsible sourcing, labor conditions, inclusion and community effects. Sustainability is not synonymous with environmentalism alone; it includes social and governance dimensions.

These concepts overlap but are not interchangeable. A governance system may ensure that a legally required privacy notice is issued, while ethics asks whether the retailer’s data practices are proportionate and understandable. Sustainability reporting may disclose energy consumption, while governance determines whether the reported data are reliable and whether managers are accountable for improvement.

A three-lines operating model

A useful control architecture distinguishes three lines of responsibility:

The board or governing body provides oversight across the model. The three lines are not three separate departments that can transfer responsibility. Store and functional managers remain accountable for operating controls; compliance specialists support and challenge them; internal audit provides independent assurance.

Risk-based management

Retailers should prioritize risks according to likelihood, impact, vulnerability and control weakness. A simple qualitative risk assessment can classify risks as low, medium or high. More formal analysis may use an expected-loss relationship:

Here, E(L) is expected loss, P(L) is the estimated probability of the loss event, and I(L) is its impact if it occurs. The expression is a decision-support approximation, not a prediction. It assumes that probability and impact can be meaningfully estimated and that the dimensions are measured consistently. Reputational, human and legal consequences may be difficult to express financially and should not be ignored merely because they are hard to quantify.

A retailer should identify inherent risk before controls, residual risk after controls, risk owners, indicators, response plans and escalation thresholds. Risk registers should be reviewed after incidents, regulatory changes, new technology, new products or major operational changes.

2. Consumer Protection and Pricing Integrity

Fair dealing and truthful information

Consumers make decisions using prices, claims, product descriptions, promotions, reviews, guarantees and salesperson representations. A retailer can mislead through explicit falsehoods, material omissions, ambiguous presentation or a design that predictably causes misunderstanding. Ethical retail communication should be accurate, clear, timely and proportionate to the consumer’s decision.

Controls should cover:

• substantiation of environmental, health, performance and comparative claims;
• clear disclosure of important conditions, exclusions and fees;
• transparent returns, refunds, warranties and cancellation terms;
• review and testimonial integrity;
• controls over scarcity, urgency and “limited-time” claims;
• separation of advertising from independent content; and
• accessible communication for customers with disabilities or limited digital access.

Managers should distinguish an attractive presentation from deceptive interface design. A preselected add-on, confusing cancellation path or hidden delivery charge can undermine informed choice even if a disclosure technically exists.

Pricing integrity

Pricing integrity means that the price displayed, advertised, scanned and charged is consistent with applicable law and the retailer’s promise. Common failures include outdated shelf labels, incorrect promotional dates, inconsistent online and in-store terms, unauthorized markdowns, duplicate discounts and price overrides without documentation.

A price-control process should include:

1. A single approved price master with version control.
2. Effective dates and approval authority for promotions.
3. Synchronization between shelf labels, point-of-sale systems, websites and mobile applications.
4. Exception reports for overrides, refunds and manual discounts.
5. Test purchases and periodic label-to-system reconciliations.
6. A customer remedy process when an incorrect price is charged.

A basic pricing accuracy rate can be calculated as:

The numerator and denominator must use the same testing population and period. The metric indicates observed accuracy, not total compliance; biased or small samples can produce misleading results. Managers should report sample size, selection method and material exceptions alongside the percentage.

Dynamic pricing can improve inventory allocation but raises ethical questions about discrimination, transparency and consumer trust. Price differences should be based on legitimate commercial factors rather than protected characteristics or exploitative targeting. Governance should define permissible variables, testing requirements, approval thresholds and an appeals or complaint route.

3. Labor Obligations and Ethical Selling

Workforce responsibilities

Retail employment risks include wage and hour violations, unlawful deductions, unsafe work, harassment, discrimination, retaliation, insecure scheduling and inadequate breaks. Requirements vary by jurisdiction, so managers must use current local legal guidance rather than assuming that a general policy is sufficient.

Operational controls include accurate time records, separation of managerial approval from payroll processing, documented break practices, safe staffing levels, training, incident reporting and confidential grievance channels. Performance targets should not encourage employees to misrepresent products, pressure vulnerable customers, conceal fees or ignore safety procedures.

Ethical selling balances commercial objectives with customer autonomy. A sound sales culture rewards need discovery, accurate explanation, suitability and long-term trust rather than only transaction value. Managers should monitor complaints, returns, cancellations, mystery-shopping results and unusual sales patterns for evidence of pressure selling.

Incentives and conduct

Incentives shape behavior. A commission based solely on units sold may encourage unsuitable recommendations; a target based only on shrinkage reduction may encourage wrongful accusations; a productivity metric that ignores fatigue may increase injury risk. Balanced scorecards can include sales, customer outcomes, compliance quality, employee well-being and sustainability indicators.

Whistleblowing systems should provide confidentiality, protection from retaliation, independent investigation and documented closure. A hotline without credible follow-up can reduce trust rather than improve it. Managers must also avoid treating every complaint as proof of misconduct; fair investigation requires evidence, proportionality and due process.

4. Product Safety, Accessibility and Operational Assurance

Product safety

Product safety is a shared supply-chain and store responsibility. Risks may arise from defective design, counterfeit goods, incorrect labeling, damaged packaging, improper storage, expired products or unsafe displays. High-risk categories can include food, cosmetics, medicines, toys, electrical goods, children’s products and products containing chemicals.

A practical product-safety system includes:

• supplier qualification and contractual safety obligations;
• traceability by batch, lot, serial number or delivery record;
• receiving inspection and quarantine procedures;
• age, hazard and usage warnings;
• storage conditions and expiry-date controls;
• incident and near-miss reporting;
• recall communication and product withdrawal;
• reconciliation of stock removed from sale; and
• post-incident root-cause analysis.

A recall is not complete merely because a notice is sent. The retailer should identify affected inventory, stop sales, notify relevant parties, document disposal or return, and verify that the product is no longer available through stores or digital channels.

Accessibility and inclusion

Accessibility means designing facilities, services, communications and digital journeys so that people with diverse abilities can use them with dignity and reasonable independence. It includes physical access, readable signage, accessible checkout, alternative communication, service-animal policies, website compatibility and inclusive complaint processes.

Accessibility is both a legal and ethical requirement. Managers should involve users with disabilities in testing rather than relying only on technical checklists. A compliant ramp does not guarantee an accessible store if merchandise blocks the route, alarms are inaudible or staff are not trained to provide assistance respectfully.

5. Privacy, Cybersecurity and Responsible AI

Privacy by design

Retailers collect data through loyalty programs, payment systems, Wi-Fi, CCTV, delivery platforms, websites, mobile applications and customer service interactions. Privacy governance should address purpose limitation, data minimization, accuracy, retention, security, transparency, individual rights and lawful disclosure. Exact obligations depend on the applicable jurisdiction and data category.

A privacy impact assessment should be considered when introducing facial analysis, location tracking, biometric processing, large-scale profiling or data sharing. The assessment should identify the purpose, necessity, affected people, risks, safeguards, retention period, access rights and incident response.

Operational safeguards include role-based access, strong authentication, encryption where appropriate, retention schedules, vendor due diligence, secure disposal, incident escalation and staff training. Convenience is not a sufficient justification for collecting sensitive information.

Responsible AI in retail

AI may support demand forecasting, assortment decisions, customer service, fraud detection, scheduling, personalization and visual inspection. Its risks include inaccurate outputs, bias, opacity, privacy intrusion, automation bias, cybersecurity exposure and displacement of human accountability.

A responsible AI governance cycle includes:

1. Purpose definition: specify the business and customer need.
2. Data assessment: examine quality, provenance, representativeness and permissions.
3. Impact assessment: identify discrimination, privacy, safety and exclusion risks.
4. Validation: test performance across relevant customer and operational groups.
5. Human oversight: define when an employee must review, override or explain a result.
6. Deployment controls: restrict access, log decisions and monitor drift.
7. Incident response: suspend or correct systems that cause material harm.
8. Periodic review: reassess necessity, performance and legal requirements.

A model should not be judged only by average accuracy. For a classification system, overall accuracy is:

TP, TN, FP and FN denote true positives, true negatives, false positives and false negatives. This metric assumes a clearly defined classification task and labeled evaluation data. It may conceal unequal error rates between groups, and it is inappropriate as the sole measure when false positives and false negatives have different consequences. In retail fraud screening, for example, wrongly declining legitimate customers may create significant exclusion and reputational harm.

Human oversight must be meaningful. An employee who can technically override an automated decision but is penalized for doing so does not provide genuine oversight. Governance should specify override authority, documentation and accountability.

6. Sustainable Store Operations

Environmental operating priorities

Stores influence environmental performance through building energy, refrigeration, lighting, transport, water, materials, food waste, packaging and end-of-life disposal. The first principle is to measure material impacts before claiming improvement.

Common interventions include LED lighting, controls for heating and cooling, preventive maintenance, efficient refrigeration, renewable electricity procurement where credible, leak detection, route optimization, reusable transport packaging, source reduction and donation or redistribution of suitable products.

A basic energy-intensity indicator is:

If energy is measured in kilowatt-hours and area in square metres, the unit is kWh/m². The comparison is meaningful only when boundaries, weather effects, operating hours, leased areas and measurement periods are defined consistently. A lower intensity does not automatically mean lower total energy use if the store has expanded substantially.

Waste hierarchy and packaging

The waste hierarchy prioritizes prevention, reduction, reuse, recycling or recovery, and disposal as the least preferred option. Retail managers should distinguish waste diversion from actual environmental benefit: material sent to a recycling facility may still be contaminated, downcycled or rejected.

Packaging decisions require lifecycle thinking. Lightweight packaging may reduce transport emissions but impair product protection; recyclable material may be unavailable in local systems; reusable packaging may require reverse logistics and cleaning. Decisions should consider material quantity, product protection, customer use, collection infrastructure and end-of-life outcomes rather than relying on a single label such as “eco-friendly.”

Food waste programs should address forecasting, replenishment, markdown timing, donation safety, cold-chain controls and employee training. Waste targets must not encourage unsafe sale of expired or damaged goods.

ESG accountability

Environmental, social and governance reporting can improve transparency, but metrics may become symbolic if definitions, boundaries and data controls are weak. A credible ESG system specifies:

• the reporting boundary and material topics;
• definitions, units and calculation methods;
• data owners and evidence sources;
• estimation methods and uncertainty;
• targets, baselines and time horizons;
• assurance or verification arrangements; and
• escalation for missed targets or misleading claims.

A target should identify baseline, scope, deadline and responsible owner. “Become greener” is not an auditable target. “Reduce electricity consumption per square metre by 15% from the 2024 baseline by 2027, subject to defined boundary conditions” is more actionable, although the baseline and measurement method must still be documented.

7. Audit, Controls and Governance in Practice

Control design

A control is a policy, procedure, system feature or behavior intended to prevent, detect or correct an unwanted event. Preventive controls include approval limits and system validation. Detective controls include exception reports and reconciliations. Corrective controls include refunds, recalls, retraining and root-cause remediation.

Effective controls have a clear objective, owner, frequency, evidence, threshold and response. “Staff should check prices” is weakly specified. “The department supervisor compares ten randomly selected promotional shelf labels with the approved price file each Monday, records exceptions and escalates unresolved discrepancies within one business day” is more testable.

Control effectiveness has two dimensions: design effectiveness and operating effectiveness. A control may be well designed but not performed; it may be performed regularly but fail to address the risk. Audit evidence should therefore include records, system logs, observations, interviews and independent testing.

Incident management

An incident process normally follows these stages:

1. Detect and protect people from immediate harm.
2. Record facts without premature conclusions.
3. Contain the issue, such as disabling a promotion or isolating stock.
4. Escalate according to severity and legal requirements.
5. Investigate root causes and contributing conditions.
6. Remediate affected customers, workers or communities.
7. Verify that corrective action worked.
8. Share lessons and update controls.

Root-cause analysis should look beyond individual error. A cashier may enter an incorrect price because a promotion file was uploaded late, training was inadequate or the system displayed ambiguous instructions. Blaming the last person in the process can leave the underlying risk unchanged.

Governance roles

The board or governing body sets expectations, oversees material risks and challenges management reporting. Senior executives allocate resources and establish accountability. Functional leaders translate requirements into processes. Store managers implement controls and escalate exceptions. Employees and contractors follow procedures and report concerns. Internal audit independently evaluates the system. Suppliers must meet contractual and regulatory expectations, but outsourcing does not transfer ultimate responsibility for customer or societal impacts.

8. Integrated Case: The GreenCart Hypermarket Incident

The following is a fictional illustrative case.

Background

GreenCart, a regional hypermarket chain, launched a “low-waste smart shopping” program. The program used personalized digital coupons, electronic shelf labels, camera-based traffic analytics and dynamic markdowns for short-dated food. Management announced a 20% reduction in food waste and a 10% increase in loyalty-program sales.

Problem

After six months, complaints increased. Some customers were charged a higher price than the shelf display because promotional files had not synchronized. The algorithm offered larger discounts to customers inferred to be price-sensitive, but the basis of the inference was not explained. Several customers reported that a camera-based system appeared to identify them repeatedly. Store employees said that food markdown targets encouraged hurried relabeling and that staffing was insufficient for safe checks. An audit also found that energy savings were reported per store without adjusting for expanded trading hours.

Analysis

The case contains interconnected risks rather than isolated failures:

• Consumer protection: price discrepancies and unclear personalized offers undermine informed choice.
• Privacy: customer tracking may exceed what is necessary or reasonably expected.
• AI governance: the pricing model lacks documented variables, fairness testing and an appeal process.
• Food safety: operational pressure may weaken expiry and storage controls.
• Labor: targets and staffing levels create foreseeable workload and safety risks.
• ESG reporting: the energy metric uses an unstable denominator and may overstate progress.
• Governance: no single executive owns the integrated program, and the board receives sales data but not control exceptions.

Approach and solution

GreenCart should first suspend the disputed pricing logic and camera functionality until purpose, legality, necessity and safeguards are reviewed. It should honor customer remedies for pricing errors, preserve evidence and notify relevant authorities where required. A cross-functional committee should include operations, legal, privacy, information security, human resources, sustainability, customer advocacy and internal audit.

The revised program should use a controlled price master, synchronized effective dates, pre-launch testing and daily exception reporting. Personalized offers should disclose relevant conditions and use a documented fairness assessment. Where analytics can be achieved through aggregated, non-identifying counts, identifiable tracking should not be used. Food markdowns should be subject to expiry, temperature and packaging checks, with staffing adjusted to workload. Employees should be able to report unsafe targets without retaliation.

For ESG reporting, GreenCart should establish a baseline, define store and energy boundaries, normalize relevant variables transparently and obtain independent review of material indicators. The board should receive a dashboard containing customer complaints, price accuracy, privacy incidents, product-safety events, employee concerns, waste, energy intensity and corrective-action status.

Outcome

In this illustrative scenario, GreenCart’s immediate sales growth slows after the suspension, but customer complaints decline, price accuracy improves and employee reporting increases. The chain later relaunches a narrower program with clearer consent, human review, stronger price controls and independently verified sustainability measures. The outcome demonstrates that responsible governance may reduce short-term convenience while protecting long-term trust and operational resilience.

Learning points

1. Digital innovation multiplies, rather than eliminates, traditional compliance risks.
2. A sustainability claim is credible only when its boundary and measurement method are clear.
3. Incentives can create unsafe or unethical behavior even when policies appear appropriate.
4. Privacy, pricing, labor, safety and ESG issues often share common root causes: unclear ownership and weak controls.
5. Effective governance links operational data to accountability and corrective action.

9. Challenges and Contemporary Developments

Retail compliance is complicated by cross-border operations, fragmented supply chains, platform dependence, rapidly changing regulation and inconsistent data. Small stores may lack specialist expertise, while large retailers may suffer from excessive policy complexity. Compliance fatigue can result when employees receive generic training unrelated to real decisions.

Emerging issues include climate-related physical disruption, human-rights due diligence, digital identity, biometric systems, generative AI, dark patterns, algorithmic price discrimination, extended producer responsibility and assurance of sustainability disclosures. Managers should avoid treating every emerging technology as either inherently beneficial or inherently harmful. The appropriate question is whether the use is necessary, proportionate, controlled, inclusive and demonstrably valuable.

Best practice is therefore adaptive. Policies should be reviewed after incidents, legal developments, technology changes and stakeholder feedback. Training should use realistic scenarios. Metrics should combine leading indicators—such as completed safety checks and unresolved exceptions—with lagging indicators—such as injuries, recalls, complaints and regulatory penalties. Senior management should reward early escalation rather than only the absence of reported problems.

Chapter Summary

Ethical, compliant and sustainable retail operations are strategic capabilities, not administrative additions. Ethics establishes principles of fair and responsible conduct; compliance translates external obligations and internal commitments into requirements; governance assigns authority, accountability and assurance; sustainability manages long-term environmental, social and economic impacts.

Consumer protection requires truthful communication, fair promotions, accessible service and reliable pricing. Labor governance must protect wages, safety, dignity, voice and freedom from retaliation, while incentives should support ethical selling rather than pressure tactics. Product-safety systems depend on traceability, inspection, recall capability and disciplined incident management. Privacy requires purpose limitation, data minimization, security and transparent use. AI requires documented purpose, quality data, impact assessment, human oversight, monitoring and correction.

Sustainable operations address energy, waste, packaging, food loss and responsible sourcing through lifecycle thinking and credible measurement. ESG accountability depends on defined boundaries, consistent metrics, reliable evidence, targets and oversight. The three-lines model, risk-based prioritization, preventive and detective controls, internal audit and root-cause analysis help convert principles into dependable store practices. Ultimately, trustworthy retail performance is created when commercial results are achieved without sacrificing consumer rights, employee welfare, safety, privacy or the future environment.

Key Terms

Ethics: Principles used to judge responsible and fair conduct.

Compliance: Adherence to applicable laws, standards, contracts and internal policies.

Governance: Structures and processes for directing, controlling and holding an organization accountable.

Sustainability: Management of long-term economic, environmental and social impacts.

Consumer protection: Measures that safeguard customers from deception, unsafe products and unfair treatment.

Pricing integrity: Consistency between approved, displayed, advertised, scanned and charged prices.

Product safety: Prevention and management of risks associated with products sold or supplied.

Accessibility: Design of services, spaces and communications for use by people with diverse abilities.

Privacy by design: Incorporation of privacy safeguards from the beginning of a system or process.

Personal data: Information relating to an identified or identifiable person.

Responsible AI: Development and use of AI with attention to legality, fairness, transparency, safety and accountability.

Human oversight: Meaningful ability of authorized people to review, explain or override automated decisions.

Risk owner: Person accountable for managing a specified risk.

Preventive control: Control intended to stop an unwanted event before it occurs.

Detective control: Control intended to identify an event or deviation after it occurs.

Corrective action: Action taken to remedy an incident and prevent recurrence.

ESG: Environmental, social and governance considerations used in management and reporting.

Energy intensity: Energy consumed relative to a defined operational denominator, such as retail area.

Materiality: Significance of an issue to decisions, impacts or stakeholder understanding.

Internal audit: Independent assurance and advisory activity that evaluates governance, risk and controls.

Review Questions

Short Answer Questions

1. Distinguish ethics, compliance and governance in a retail context.
2. What are the principal elements of pricing integrity?
3. Why is data minimization important in retail privacy management?
4. State two preventive controls and two detective controls relevant to product safety.
5. What information should accompany an ESG performance target?

Long Answer Questions

1. Explain how a three-lines operating model can be applied to retail store compliance. Discuss the responsibilities of store management, compliance functions and internal audit.
2. Analyze the relationship between sales incentives and ethical selling. Recommend a balanced performance system for a retail sales team.
3. Discuss the governance requirements for using AI in personalization, fraud detection or workforce scheduling.
4. Explain how energy, waste and packaging decisions should be evaluated using lifecycle thinking.
5. Develop an integrated framework for managing consumer protection, privacy, product safety and accessibility in an omnichannel retailer.

Analytical / Application Questions

1. A store tests 240 transactions and finds 228 correctly priced. Calculate the pricing accuracy rate and explain two limitations of using this figure as the sole measure of pricing compliance.
2. A retailer’s waste reduction program increases recycling rates but also increases contaminated material sent to disposal. Diagnose the measurement problem and propose a better evaluation approach.
3. An AI system rejects more loyalty-program transactions from one demographic group because its false-positive rate is substantially higher for that group. Identify the governance failures and recommend an investigation and remediation plan.

Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes compliance from ethics in retail operations?

A. Compliance concerns only employee behavior, while ethics concerns only customers.

B. Compliance follows applicable requirements, while ethics also evaluates what is fair and responsible beyond minimum rules.

C. Compliance is voluntary, while ethics is legally enforceable.

D. Compliance applies to stores, while ethics applies only to corporate offices.

Correct Answer: B. Compliance follows applicable requirements, while ethics also evaluates what is fair and responsible beyond minimum rules.

Question 2

Which control is primarily preventive for pricing integrity?

A. A customer complaint report after checkout

B. A monthly analysis of refund patterns

C. System validation requiring approval before a promotion is activated

D. An internal-audit report issued after the promotion ends

Correct Answer: C. System validation requiring approval before a promotion is activated

Question 3

A test examines 500 transactions, of which 485 are correctly priced. What is the pricing accuracy rate?

A. 95.0%

B. 96.0%

C. 97.0%

D. 98.5%

Correct Answer: C. 97.0%

Question 4

Which practice best reflects data minimization?

A. Collecting every available customer attribute for possible future use

B. Retaining all loyalty data indefinitely

C. Collecting only data necessary for a defined and legitimate purpose

D. Sharing customer data with all suppliers by default

Correct Answer: C. Collecting only data necessary for a defined and legitimate purpose

Question 5

Why may overall AI accuracy be insufficient as a fairness measure?

A. Accuracy cannot be calculated from labeled data.

B. Accuracy may conceal unequal error rates or unequal consequences across groups.

C. Accuracy is relevant only to financial models.

D. Accuracy always exaggerates false positives.

Correct Answer: B. Accuracy may conceal unequal error rates or unequal consequences across groups.

Question 6

Which action is most consistent with the waste hierarchy?

A. Preventing excess inventory before it becomes waste

B. Sending all waste directly to landfill

C. Increasing packaging to simplify disposal

D. Recycling material without checking contamination

Correct Answer: A. Preventing excess inventory before it becomes waste

Question 7

Who primarily owns a retail risk in the first line of the three-lines model?

A. The external regulator

B. The internal audit committee alone

C. The manager responsible for operating the process

D. The customer who reports the issue

Correct Answer: C. The manager responsible for operating the process

Question 8

Which is the strongest ESG target?

A. Improve sustainability soon

B. Become more environmentally friendly than competitors

C. Reduce electricity use per square metre by 15% from a defined 2024 baseline by 2027

D. Use energy responsibly whenever possible

Correct Answer: C. Reduce electricity use per square metre by 15% from a defined 2024 baseline by 2027

Question 9

What is the appropriate first priority during a serious product-safety incident?

A. Protect people and contain the immediate risk

B. Wait until the next annual audit

C. Continue selling stock until the supplier confirms the issue

D. Delete incomplete incident records

Correct Answer: A. Protect people and contain the immediate risk

Question 10

Which condition is necessary for meaningful human oversight of an AI decision?

A. Employees are allowed to override the system but are penalized whenever they do so.

B. The system is never monitored after deployment.

C. Authorized employees can review, understand sufficiently, document and override decisions when required.

D. The system’s output is treated as final in all cases.

Correct Answer: C. Authorized employees can review, understand sufficiently, document and override decisions when required.