Assess whether a generative-AI incident is a policy breach or a model defect

Situation

Model-risk officer in a university licensing an AI proctoring vendor has one working extract — hiring-tool adverse-impact tables — after a vendor SOC report that excludes the actual model host region. If hiring-tool adverse-impact tables cannot support a generative-AI incident is, the honest AI Governance output is hold.

Decision

Model-risk officer in a university licensing an AI proctoring vendor must choose A generative-AI incident is a policy breach / A model defect using hiring-tool adverse-impact tables after a vendor SOC report that excludes the actual model host region.

Hypotheses to test

• Authorize A generative-AI incident is a policy breach now; hiring-tool adverse-impact tables already has the discriminator after a vendor SOC report that excludes the actual model host region.
• Keep A model defect in force until hiring-tool adverse-impact tables is completed after a vendor SOC report that excludes the actual model host region for model-risk officer.
• Treat hiring-tool adverse-impact tables as A generative-AI incident is a policy breach because both readings appear after a vendor SOC report that excludes the actual model host region.
• Refuse a AI Governance close: model-risk officer does not have the page a generative-AI incident is turns on in hiring-tool adverse-impact tables.

Analysis required

• Map the approved-use case to the system a generative-AI incident is would bind.
• Check intended purpose and inventory status against EU AI Act / exam-readiness language after a vendor SOC report that excludes the actual model host region.
• Map the approved-use case to the system a generative-AI incident is would bind.
• For this AI Governance Policy and Oversight file, read hiring-tool adverse-impact tables against a vendor SOC report that excludes the actual model host region and write the one fact that would move a generative-AI incident is for model-risk officer.

Recommendation

Choose A generative-AI incident is a policy breach / A model defect on this AI Governance / Policy and Oversight packet (hiring-tool adverse-impact tables after a vendor SOC report that excludes the actual model host region). The follow-on Policy and Oversight action is what model-risk officer does next: implement the option, assign an owner, and log the missing fact.