Business A is integrating a generative AI model licensed from a third party (Business B) and is primarily concerned with the risk of toxic or obscene outputs being delivered to users. In this scenario,testing and validationof the AI model for such content risks is the most direct and effective governance strategy.
According to theAI Governance in Practice Report 2024, organizations thatdeployAI must engage in performance monitoring protocolsand ensure systems perform adequately for theirintended purposes, including filtering harmful content:
"Operational governance... development of: #Performance monitoring protocols to ensure systems perform adequately for their intended purposes." (p. 12)
"Product governance... includes: #System impact assessments to identify and address risk prior to product development or deployment." (p. 11) Furthermore, under theEU AI Act, which sets the global standard many organizations aim to align with, there is a clear obligation to test and monitor systems for potential harmful behavior:
"The act imposes regulatory obligations... such as establishing appropriate accountability structures,assessing system impact, providing technical documentation,establishing risk management protocols and monitoring performance..." (p. 7) Option B directly reflects this best practice ofpre-deployment testing and validationto ensure that the model aligns with Business A's minimum content safety requirements.
Let's now evaluate the incorrect options:
* A. Fine-tuning on verified user-generated textmay improve model alignment but does not guarantee that the model will generalize correctly, especially if Business A lacks access to model internals (common in third-party licensing scenarios). Fine-tuning also introduces its own risks and may be contractually restricted.
* C. A user reporting featureisreactive, not preventive. While helpful for long-term monitoring and mitigation, it does not prevent the initial harm of toxic outputs, which isBusiness A's primary concern.
* D. Requesting documentation from Business Bis useful for transparency and risk management, but it does not replaceindependent verificationthat the model meets Business A's content safety standards.
Thus,testing the model's behavior for unacceptable outputs before deploymentis the most aligned approach with AI governance best practices and obligations.

Developing a social media presence for a non-profit is best served by non-AI solutions. This task primarily involves content creation, community engagement, and strategic planning, which are effectively managed by human expertise and traditional marketing tools. AI is more suitable for tasks requiring automation, large- scale data analysis, and personalized recommendations, such as e-commerce personalization, forecasting cost overruns, or automating customer service responses. Reference: AIGP Body of Knowledge on AI Use Cases and Applications.

Documenting AI testing results creates a verifiable audit trail, which is essential for accountability, regulatory compliance, and demonstrating that risks were properly assessed and mitigated.

Testing results need to bedocumented thoroughlyto ensuretraceability, accountability, and compliance.
This is central to enabling audits, investigations, or regulatory inquiries into the system's development and performance.
From theAI Governance in Practice Report 2024:
"Documentation and recordkeeping are essential components... to demonstrate AI system compliance, trace system behavior, and support audits and conformity assessments." (p. 34-35)
"Maintaining audit trails across development and deployment enables transparency and accountability." (p.
12)
* AandBare benefits, but not theprimary governance justification.
* D- Limiting future testing is not a recommended goal.

Training time is affected by the model's complexity, the volume of training data, and the quality of that data, all of which impact computational requirements and training effectiveness.