15. Responsible AI, Governance and Future DirectionsIntroduction and ContextArtificial intelligence is no longer confined to research laboratories. Machine-learning systems influence credit decisions, medical triage, recruitment, education, policing, insurance, logistics, media recommendations, and scientific discovery. Their increasing influence creates a central question: not merely whether an AI system works, but whether it works safely, fairly, lawfully, transparently, and in ways that remain accountable to people and institutions. Responsible AI refers to the design, development, deployment, and governance of AI systems in accordance with ethical principles, legal requirements, professional standards, and social expectations. It connects technical performance with human rights, organizational responsibility, public interest, and long-term sustainability. Governance provides the institutional mechanisms through which those commitments are translated into policies, controls, roles, audits, and decisions. The topic is particularly important at postgraduate level because responsible AI is not an optional layer added after model development. Choices about data collection, target definition, feature engineering, evaluation metrics, deployment context, and human oversight determine the social consequences of an AI system. A highly accurate model may still be unacceptable if it discriminates against a protected group, exposes confidential information, cannot be challenged, or fails dangerously under unusual conditions. This chapter examines the principal dimensions of responsible AI, risk-based governance, lifecycle controls, auditing, documentation, regulation, and human oversight. It then considers emerging directions including synthetic data, autonomous agents, causal AI, neuro-symbolic systems, and progress toward general-purpose AI. Learning ObjectivesBy the end of this chapter, students should be able to: 1. Explain fairness, privacy, transparency, accountability, safety, robustness, cybersecurity, intellectual property, and environmental impact in AI systems. 2. Distinguish technical model performance from broader responsible-AI performance. 3. Apply a risk-based governance process across the AI lifecycle. 4. Select appropriate documentation, audit, monitoring, and human-oversight mechanisms. 5. Evaluate major regulatory and professional considerations affecting AI deployment. 6. Analyse the benefits and limitations of synthetic data, autonomous agents, causal AI, and neuro-symbolic systems. 7. Assess claims about general-purpose AI using technical, organizational, and societal criteria. From Model Accuracy to Responsible PerformanceTraditional machine-learning evaluation commonly emphasizes measures such as accuracy, precision, recall, F1 score, calibration, or area under the ROC curve. These remain important, but they answer only a limited question: how well does the model perform on selected data under specified assumptions? Responsible AI asks additional questions. Who may be harmed by errors? Are errors distributed unevenly? Was the data collected legitimately? Can affected people understand and contest a decision? Does the system remain safe when inputs shift? Who is responsible when the system causes damage? A useful way to conceptualize responsible performance is as a set of interacting properties rather than a single score. Fairness concerns equitable treatment and outcomes. Privacy concerns appropriate control over personal and sensitive information. Transparency concerns the intelligibility of the system and its use. Accountability identifies who must answer for decisions and remediate harms. Safety and robustness concern reliable operation under expected and unexpected conditions. Cybersecurity protects models, data, interfaces, and infrastructure from attack. Intellectual-property analysis addresses ownership, licensing, attribution, and unauthorized reproduction. Environmental responsibility considers energy, water, hardware, and lifecycle impacts. These properties can conflict. Increasing model complexity may improve predictive accuracy while reducing interpretability. Anonymization may protect identity but reduce analytical utility. A larger model may perform better but consume substantially more energy. Strong fraud controls may increase false positives and inconvenience legitimate users. Responsible design therefore requires explicit trade-offs, affected-stakeholder analysis, and a defensible rationale rather than a claim that every objective has been maximized simultaneously. Fairness and Non-discriminationFairness in AI is the principle that individuals and groups should not experience unjustified disadvantage because of protected characteristics, their proxies, or features that reproduce structural inequality. Relevant characteristics may include sex, race, caste, ethnicity, disability, age, religion, nationality, or socioeconomic status, depending on the legal and social context. Fairness is not one universally agreed mathematical condition. Common group-based measures include demographic parity, equal opportunity, equalized odds, predictive parity, and calibration. Demographic parity requires comparable positive-decision rates across groups. Equal opportunity requires comparable true-positive rates. Equalized odds requires comparable true-positive and false-positive rates. Predictive parity requires comparable positive predictive values. These criteria are not generally simultaneously satisfiable when groups differ in base rates, so selecting a criterion is a normative and contextual decision. Individual fairness asks whether similar individuals are treated similarly, but defining “similar” requires a justified task-specific similarity measure. Counterfactual fairness asks whether a decision would remain unchanged in a relevant counterfactual world in which a protected attribute were different, while other causal relationships are appropriately considered. No metric by itself proves fairness. Measurement must be combined with domain knowledge, stakeholder participation, impact assessment, and investigation of historical disadvantage. Fairness problems can enter at every stage. A training label may reflect biased institutional decisions. A sample may underrepresent a minority population. A proxy variable may encode a protected attribute. A threshold may have unequal consequences. Deployment may alter behavior and produce feedback loops. Mitigation methods include improving data coverage, reweighting examples, modifying labels, fairness-constrained optimization, group-specific thresholds where lawful and justified, human review, and post-deployment monitoring. Removing a protected attribute is rarely sufficient because correlated variables can preserve its influence. Privacy, Data Protection, and Intellectual PropertyPrivacy is more than deleting names from a dataset. Re-identification may be possible by combining supposedly anonymous records with external information. Privacy risk also arises when sensitive attributes are inferred, when data is used beyond its original purpose, or when individuals cannot exercise rights concerning collection and automated decisions. Responsible data practice follows principles such as purpose limitation, data minimization, accuracy, storage limitation, security, and lawful processing. Privacy-enhancing techniques include aggregation, pseudonymization, differential privacy, federated learning, secure multiparty computation, and, in specialized settings, homomorphic encryption. Each involves trade-offs. Differential privacy limits the information revealed about any one person by adding carefully calibrated noise, but stronger privacy can reduce utility. Federated learning keeps data distributed but does not automatically prevent leakage through model updates or compromised participants. Privacy should be addressed through privacy-by-design. Teams should identify the purpose of processing, legal basis, data subjects, retention period, access controls, transfer arrangements, and deletion procedures before model training begins. A privacy impact assessment is appropriate when processing is likely to create significant risks, particularly with sensitive or large-scale personal data. Intellectual property introduces a separate set of questions. Training data, source code, model weights, prompts, generated outputs, and evaluation datasets may be subject to copyright, database rights, trade-secret protection, patent law, contractual restrictions, or open-source licences. Organizations must maintain data provenance, verify licence compatibility, respect confidential information, and define ownership and permitted use of generated material. A model that produces text, code, images, or designs resembling protected works may create legal and commercial risk even if the technical process is opaque. Legal rules differ across jurisdictions; therefore, governance should involve qualified legal and compliance specialists rather than assuming that technical transformation eliminates rights. Transparency, Explainability, and ContestabilityTransparency may refer to several distinct ideas: disclosure that AI is being used, information about the system’s purpose and limits, access to relevant documentation, interpretability of a particular decision, and openness about governance and performance. These should not be conflated. Publishing source code, for example, may not make a complex model understandable to affected users. Explainability methods are often divided into intrinsic and post hoc approaches. Decision trees and sparse linear models can be intrinsically interpretable in suitable contexts. Post hoc methods, such as feature-attribution techniques, surrogate models, counterfactual explanations, and example-based explanations, attempt to explain the behavior of more complex models. Such explanations are useful only if they are faithful, stable, understandable, and appropriate for the decision. An attractive explanation can be misleading if it describes a plausible reason rather than the actual causal basis of the model’s output. A meaningful explanation should help a person understand what happened, which factors materially influenced the outcome, what uncertainty exists, and what action could change the result. High-impact decisions also require contestability: people should be able to request review, correct relevant information, and obtain an appropriate remedy. Transparency is therefore a communication and institutional process, not simply a visualization technique. Accountability, Safety, Robustness, and CybersecurityAccountability means that identifiable individuals and organizations remain answerable for the effects of an AI system. It cannot be transferred to an algorithm. Effective accountability requires defined roles, approval authority, escalation paths, audit trails, incident reporting, documentation, and remediation. A responsibility matrix can specify who owns the data, model, deployment decision, monitoring, security response, and affected-user complaints. Safety concerns the prevention of unacceptable harm during normal operation, foreseeable misuse, and failure. Safety analysis may include hazard identification, failure-mode analysis, red teaming, simulation, operational constraints, fallback procedures, and shutdown mechanisms. In high-risk applications, a model should not be deployed merely because its average test performance is strong; severe low-probability failures must also be examined. Robustness is the ability to maintain acceptable performance under perturbations, distribution shifts, missing data, adversarial inputs, and changing environments. A medical model trained in one hospital may fail in another because of different equipment or patient populations. Robustness practices include stress testing, out-of-distribution detection, uncertainty estimation, calibration, retraining policies, and conservative thresholds. Monitoring must continue after deployment because real-world data and user behavior evolve. Cybersecurity protects the confidentiality, integrity, and availability of AI systems. Threats include data poisoning, evasion attacks, model extraction, membership inference, prompt injection, insecure tool use, supply-chain compromise, and unauthorized access to model weights. Generative and agentic systems introduce additional risks: malicious instructions can manipulate an agent into disclosing information or taking an unsafe action. Controls include least-privilege access, network isolation, secrets management, secure development, input and output filtering, logging, penetration testing, incident response, and regular security updates. Security must cover the entire AI supply chain, including datasets, pretrained models, libraries, hardware, application interfaces, and human operators. Environmental SustainabilityAI has environmental impacts across hardware manufacture, data-centre operation, electricity consumption, cooling, water use, and electronic waste. Training and serving large models can require substantial computational resources, although precise impacts vary with hardware, location, energy source, utilization, and workload. Environmental assessment should therefore consider the full lifecycle rather than reporting only training time. Practical measures include selecting efficient architectures, distilling or quantizing models, reusing pretrained models, scheduling workloads where lower-carbon electricity is available, improving data-centre utilization, and avoiding unnecessary retraining. Teams should measure energy and emissions where feasible and compare the environmental cost with the value created. Sustainability also includes social effects: an apparently efficient system may shift burdens to low-paid data workers or communities affected by infrastructure development. A Risk-Based Governance LifecycleGovernance is most effective when integrated into the AI lifecycle. A practical risk-based process contains the following connected activities. First, define the purpose and context. The organization should state the intended use, affected groups, decision authority, acceptable performance, foreseeable misuse, and consequences of error. Prohibited or unacceptable uses should be identified before technical development. Second, classify risk. Risk depends on both likelihood and severity of harm. A low-risk recommendation system may require different controls from a system used for employment, healthcare, credit, critical infrastructure, or law enforcement. Classification should consider not only the model but also the use context, degree of autonomy, scale, reversibility, vulnerability of affected people, and availability of human remedy. Third, conduct impact assessments. Algorithmic, privacy, human-rights, security, and environmental impact assessments identify risks and mitigation measures. They should include affected stakeholders and document residual risks that remain after mitigation. Fourth, establish data and model controls. Data lineage, provenance, quality checks, representativeness analysis, access permissions, validation sets, version control, reproducibility, and model cards or similar documentation support responsible development. Evaluation should be segmented by relevant populations and operating conditions. Fifth, validate independently. Internal review should be complemented, where appropriate, by independent assurance, external audit, red teaming, domain-expert review, or user testing. The level of independence should match the risk. Sixth, approve and deploy with safeguards. Deployment should use staged release, access controls, human review, rate limits, confidence thresholds, rollback procedures, and clear user communication. A system should not be allowed to make a decision outside its validated scope. Seventh, monitor and improve. Monitoring should cover performance drift, subgroup outcomes, privacy events, security incidents, user complaints, override patterns, resource consumption, and unexpected uses. Significant incidents should trigger investigation, notification where required, corrective action, and possible suspension. This lifecycle resembles continuous quality management rather than a one-time compliance exercise. Governance documentation must remain current as models, data, users, and legal requirements change. Documentation and AuditDocumentation makes assumptions visible and supports reproducibility, oversight, procurement, and accountability. Useful artefacts include a system purpose statement, data sheet, model card, risk register, impact assessment, evaluation report, security threat model, privacy assessment, change log, deployment approval, incident register, and retirement plan. An audit examines whether claims, controls, and outcomes are supported by evidence. A technically sophisticated audit may test subgroup performance, robustness, explainability, privacy leakage, security, accessibility, and environmental measures. However, auditing has limitations. It is often time-bound, may rely on incomplete documentation, and can miss harms that were not anticipated. An audit should therefore state its scope, methods, evidence, limitations, and conclusions. Passing an audit is not proof that a system is harmless; it indicates that specified controls and tests met specified criteria at a particular time. Human Oversight and Regulatory PrinciplesHuman oversight must be meaningful, not merely symbolic. A reviewer who lacks time, authority, expertise, or access to relevant evidence may simply approve automated recommendations. Effective oversight defines when a human must review, what information is available, how disagreement is handled, and who has authority to stop the system. Automation bias—the tendency to over-trust machine recommendations—must be addressed through training, interface design, and performance monitoring. Regulatory approaches increasingly use risk tiers. Lower-risk systems may require transparency and basic information, while high-risk systems may require risk management, data governance, technical documentation, record keeping, accuracy, robustness, cybersecurity, human oversight, and post-market monitoring. Some applications may be prohibited because their harms cannot be adequately controlled. Data-protection laws may provide rights relating to access, correction, objection, and safeguards around automated decision-making. Sector-specific rules may apply in finance, medicine, employment, education, or critical infrastructure. Because regulations differ across jurisdictions and evolve over time, organizations should maintain a regulatory inventory and map each system to applicable obligations. Compliance is a floor, not a complete definition of ethical conduct. A system may be legally permissible yet socially unacceptable, or technically compliant yet poorly designed for vulnerable users. Applied Case: An Illustrative Credit-Limit SystemBackgroundA regional bank develops a machine-learning system to recommend credit limits for existing customers. The model uses repayment history, account activity, income information, and transaction patterns. Human credit officers approve most recommendations, but the volume of cases makes meaningful review difficult. Situation and ProblemAfter deployment, approval and limit-increase rates appear lower for customers from a particular postal region. The organization initially argues that postal code is not a protected attribute and that the model has strong overall predictive accuracy. A customer advocacy group alleges indirect discrimination and inadequate explanation. AnalysisAn investigation finds that postal region is correlated with ethnicity and historical access to financial services. The training label—whether a previous application was approved—reflects earlier institutional decisions and is therefore not a neutral measure of creditworthiness. Overall accuracy conceals different false-negative rates across groups. In addition, the explanation supplied to customers lists “account activity” without clarifying how the factor influenced the recommendation or how inaccurate information can be corrected. The privacy review identifies extensive use of transaction data beyond what customers reasonably expected. The cybersecurity assessment finds that internal users can export model recommendations without adequate logging. Finally, credit officers frequently accept the recommendation because the interface displays it as a definitive score rather than a risk estimate. Approach and StrategyThe bank pauses automatic limit reductions and conducts an impact assessment with compliance, data science, legal, security, customer-service, and community representatives. It improves data provenance, reviews the target label, tests performance and error rates by relevant groups, and evaluates a model that excludes unjustified proxies. Excluding the postal code alone is rejected as insufficient; correlated features are examined using domain and causal analysis. The revised process provides a reason code, uncertainty estimate, correction channel, and mandatory human review for adverse decisions. Credit officers receive training on automation bias and may override the recommendation with documented reasons. Access controls and audit logs are strengthened. The bank monitors subgroup outcomes, customer complaints, overrides, drift, and privacy incidents, with escalation thresholds that can suspend the model. OutcomeThe revised system produces slightly lower aggregate predictive performance but more balanced error rates and clearer customer communication. Some cases take longer because of human review, but the bank gains a defensible process for correction and appeal. The organization also discovers that a portion of the apparent predictive advantage came from historical decisions rather than genuine repayment risk. Learning PointsThe case illustrates that fairness is a lifecycle issue, not a feature-removal exercise. Labels can encode institutional bias; overall accuracy can hide unequal harm; explanations must support action and contestability; and human oversight requires authority and training. It also shows that responsible governance may accept a modest technical trade-off to achieve lawful, explainable, and socially defensible operation. Emerging Directions in AISynthetic DataSynthetic data is generated to resemble real data while reducing direct exposure of individuals. It can expand rare classes, support testing, and enable controlled sharing. However, synthetic data is not automatically private. If generated from a small or memorized dataset, it may reproduce sensitive records or disclose membership. It may also preserve historical bias, omit rare but important cases, or create unrealistic correlations. Quality assessment should compare distributions, relationships, downstream model performance, subgroup representation, and privacy leakage. Synthetic data should complement, not replace, careful governance of real data. Autonomous and Agentic SystemsAn autonomous agent combines a model with goals, memory, planning, tools, and the ability to act in an external environment. This changes the risk profile from generating an incorrect answer to taking an incorrect action. Agent governance should constrain permissions, separate planning from execution, require confirmation for high-impact actions, validate tool inputs and outputs, limit spending and access, maintain traceable logs, and provide interruption and rollback mechanisms. Agents should operate within clearly defined authority boundaries and should not be treated as independent legal or moral actors. Causal AIPredictive models identify statistical associations; causal AI seeks to reason about interventions and counterfactuals. Causal graphs, structural causal models, randomized experiments, and quasi-experimental methods can help distinguish correlation from causation. This is valuable for policy evaluation, treatment selection, fairness analysis, and explaining what action might change an outcome. Causal conclusions depend on assumptions such as appropriate confounder control, correct temporal ordering, and adequate data. A causal diagram is not evidence by itself. Combining machine learning with causal reasoning may improve decision quality, but it does not eliminate uncertainty or normative choices. Neuro-Symbolic SystemsNeuro-symbolic AI combines neural learning with symbolic representations, rules, logic, knowledge graphs, or constraints. Neural components provide pattern recognition and flexibility; symbolic components can support explicit reasoning, consistency checks, and domain constraints. Such systems may improve traceability in settings where rules and learned perception must interact. Challenges include knowledge acquisition, scaling, handling contradictions, uncertainty, and maintaining the symbolic layer as the world changes. Neuro-symbolic design is promising but should be evaluated against concrete safety and usability requirements rather than assumed to be inherently explainable. General-Purpose AI and the Question of ProgressGeneral-purpose AI systems are designed to perform a broad range of tasks rather than one narrowly defined function. Progress may be measured through capability, adaptability, multimodal performance, tool use, transfer learning, autonomy, reliability, and the breadth of environments handled. Yet benchmark performance is an incomplete indicator. A system may display impressive competence while producing confident errors, failing under distribution shift, or lacking stable goals and situational understanding. Claims about artificial general intelligence should therefore be assessed carefully. Relevant questions include whether capabilities generalize beyond training distributions, whether the system can reliably pursue long-horizon objectives, whether it understands causal and social context, how it handles uncertainty, and whether its behavior remains controllable. Governance must also consider concentration of power, labor effects, misinformation, security, access inequality, and the possibility that capabilities advance faster than oversight institutions. The appropriate response is neither uncritical optimism nor unsupported alarm, but evidence-based evaluation, staged deployment, independent testing, and international cooperation where risks cross borders. Common Mistakes and Best PracticesFrequent mistakes include treating fairness as a single metric, assuming anonymization guarantees privacy, using explanations that are not faithful, delegating accountability to the model, evaluating only average accuracy, ignoring post-deployment drift, treating compliance as ethics, and adding human approval without giving reviewers real authority. Another error is to document a system after deployment rather than designing documentation and controls from the beginning. Best practice is to begin with a clearly justified purpose and an explicit account of unacceptable harm. Organizations should involve domain experts and affected communities, maintain data and model provenance, test across relevant populations and conditions, assess privacy and security together, use proportionate human oversight, document residual risk, and monitor outcomes continuously. Procurement should require vendors to disclose limitations, training-data provenance where appropriate, incident procedures, update policies, and audit evidence. Retirement should be planned: systems need criteria for suspension, replacement, deletion of data, and preservation of necessary records. Chapter SummaryResponsible AI extends evaluation beyond predictive accuracy to fairness, privacy, transparency, accountability, safety, robustness, cybersecurity, intellectual property, and environmental sustainability. These dimensions interact and often involve legitimate trade-offs. Fairness requires attention to labels, representation, proxies, metrics, and structural context. Privacy requires purpose limitation, minimization, security, and suitable privacy-enhancing techniques. Transparency must support understanding and contestability, while accountability requires named roles, evidence, auditability, and remediation. A risk-based governance lifecycle begins with purpose and context, classifies risk, conducts impact assessment, controls data and models, validates independently, deploys safeguards, and monitors continuously. Human oversight must be meaningful and supported by authority, information, and escalation mechanisms. Regulation provides important minimum obligations but does not replace professional judgment or ethical responsibility. Emerging technologies create both opportunities and new risks. Synthetic data may improve sharing but can leak information or reproduce bias. Autonomous agents require strict action boundaries and interruption controls. Causal AI supports intervention reasoning but depends on assumptions. Neuro-symbolic systems may combine learning with explicit constraints. General-purpose AI should be assessed through reliable generalization, controllability, social impact, and governance—not benchmark scores alone. Key TermsResponsible AI: Design and use of AI in ways consistent with ethical, legal, social, and professional responsibilities. AI governance: Policies, roles, processes, and controls that direct and oversee AI systems. Algorithmic fairness: Equitable and non-discriminatory treatment of individuals and groups by an algorithmic system. Demographic parity: A fairness condition requiring similar positive-decision rates across groups. Equalized odds: A condition requiring comparable true-positive and false-positive rates across groups. Counterfactual fairness: Fairness assessed by considering whether an outcome would change under a relevant counterfactual change in protected status. Privacy by design: Integrating privacy protection into system architecture and development from the outset. Differential privacy: A formal privacy approach that limits the influence of any single individual on released information. Explainability: The extent to which a system’s operation or output can be meaningfully understood. Contestability: The ability of affected people to question, challenge, and seek review of an AI decision. Accountability: The obligation of identifiable people or organizations to answer for AI decisions and impacts. Robustness: The ability of a system to maintain acceptable performance under disturbances and changing conditions. Distribution shift: A change between the data environment used for development and that encountered in deployment. Adversarial attack: An intentional manipulation designed to cause an AI system to produce an incorrect or unsafe result. Model card: Documentation describing a model’s purpose, performance, limitations, and appropriate use. Impact assessment: A structured evaluation of potential effects and risks before or during system deployment. Synthetic data: Artificially generated data designed to reproduce useful properties of real data. Autonomous agent: An AI-enabled system that plans or acts through tools in pursuit of specified goals. Causal AI: Methods that represent or estimate causal relationships, interventions, and counterfactuals. Neuro-symbolic AI: AI combining neural learning with symbolic knowledge, rules, or logical constraints. Review QuestionsShort Answer Questions1. Why is overall model accuracy insufficient for evaluating responsible AI? 2. Distinguish demographic parity from equal opportunity. 3. What is meant by meaningful human oversight? 4. Identify two privacy-enhancing technologies and one limitation of each. 5. Why does synthetic data not automatically guarantee privacy? Long Answer Questions1. Explain how fairness risks can enter the AI lifecycle from data collection through deployment. Discuss suitable mitigation strategies. 2. Describe a risk-based AI governance lifecycle, including impact assessment, validation, deployment, and monitoring. 3. Discuss the relationship between transparency, explainability, and contestability in high-impact decisions. 4. Analyse the main safety and cybersecurity risks of autonomous AI agents and propose governance controls. 5. Compare predictive AI and causal AI, explaining when causal reasoning is especially valuable and what assumptions limit it. Analytical / Application Questions1. A hospital model performs well overall but has substantially higher false-negative rates for patients using a particular diagnostic device. Analyse possible causes and design an evaluation and remediation plan. 2. An organization wants to release synthetic employee data to a research partner. Develop a governance checklist covering privacy, utility, bias, security, intellectual property, and contractual controls. 3. A customer-service agent can issue refunds and modify accounts without human confirmation. Assess the risks and redesign the system using appropriate autonomy boundaries, monitoring, and escalation procedures. 22. Multiple Choice Questions with AnswersQuestion 1Which statement best explains why removing a protected attribute may not eliminate unfairness? A. Models cannot be trained without protected attributes B. Correlated variables may act as proxies for the protected attribute C. Protected attributes are always required for calibration D. Removing attributes necessarily causes underfitting Correct Answer: B. Correlated variables may act as proxies for the protected attribute Question 2A model has equal accuracy across two groups but a much higher false-negative rate for one group. What is the most appropriate conclusion? A. The model is necessarily fair because accuracy is equal B. The model is necessarily unfair under every fairness definition C. Group-specific error analysis is needed because aggregate accuracy hides unequal harms D. The model should be deployed without further testing Correct Answer: C. Group-specific error analysis is needed because aggregate accuracy hides unequal harms Question 3Which practice most directly supports contestability? A. Increasing model size B. Providing a correction and appeal mechanism for affected individuals C. Removing all human reviewers D. Publishing only the model’s accuracy score Correct Answer: B. Providing a correction and appeal mechanism for affected individuals Question 4What is the main purpose of a risk-based governance approach? A. To apply identical controls to every AI system B. To prohibit all automated decisions C. To match oversight and controls to the likelihood and severity of potential harm D. To replace technical testing with legal review Correct Answer: C. To match oversight and controls to the likelihood and severity of potential harm Question 5Which statement about differential privacy is most accurate? A. It guarantees that no individual can ever be identified B. It limits the influence of any one individual on released information, usually with a utility trade-off C. It removes the need for access controls D. It applies only to image datasets Correct Answer: B. It limits the influence of any one individual on released information, usually with a utility trade-off Question 6Why can a human-in-the-loop design still be ineffective? A. Humans cannot interpret any model output B. Reviewers may lack authority, time, information, or independence and simply follow the model C. Human review always reduces fairness D. Human oversight prevents monitoring Correct Answer: B. Reviewers may lack authority, time, information, or independence and simply follow the model Question 7Which control is especially important for an autonomous agent that can alter customer accounts? A. Allowing unrestricted tool access B. Removing action logs to protect privacy C. Using least-privilege permissions and confirmation for high-impact actions D. Maximizing response speed regardless of uncertainty Correct Answer: C. Using least-privilege permissions and confirmation for high-impact actions Question 8What distinguishes causal AI from ordinary predictive modelling? A. Causal AI never uses machine learning B. Causal AI focuses on interventions and counterfactual relationships, subject to causal assumptions C. Causal AI always produces more accurate predictions D. Causal AI does not require data Correct Answer: B. Causal AI focuses on interventions and counterfactual relationships, subject to causal assumptions Question 9Which statement best describes an AI audit? A. A permanent guarantee that a system is harmless B. An examination of specified claims, controls, evidence, and outcomes within a defined scope C. A replacement for post-deployment monitoring D. A method that applies only to source code Correct Answer: B. An examination of specified claims, controls, evidence, and outcomes within a defined scope Question 10Why should environmental impact be assessed across the AI lifecycle? A. Only model inference consumes resources B. Hardware manufacture, training, serving, cooling, and disposal may all create impacts C. Environmental effects are unrelated to model architecture D. Lifecycle assessment prevents all model errors Correct Answer: B. Hardware manufacture, training, serving, cooling, and disposal may all create impacts
|