AIPGF Practitioner Identifying AI Governance Risks

Practitioner scenarios often contain several plausible concerns at once: speed pressure, stakeholder conflict, data sensitivity, unclear ownership, or weak review. The first task is to identify which of those is the real governance problem driving the answer.

What to understand

A strong framing pass usually asks:

• What AI use is actually happening or being proposed?
• What could go wrong if that use continues without stronger governance?
• Is the main issue ethical, legal, operational, accountability-related, or maturity-related?
• What governance gap is making the risk possible?

The answer options often include true but secondary statements. If the main governance gap is unclear role ownership, a generic point about productivity or culture will usually be weaker.

Example

A programme team uses AI to draft steering-committee summaries. The immediate problem is not that the output is fast. The problem is that the summaries are being issued without clear review ownership and without a rule about what source material may be uploaded to the tool.

Common pitfalls

• Reacting to the most alarming sentence instead of the real governance gap.
• Treating a downstream consequence as if it were the first issue to address.
• Choosing a broad value statement when the scenario is really asking for a control or role response.

Sample Exam Question

A scenario says a project team has started using AI to prepare stakeholder updates from mixed internal notes and sensitive commercial discussions. Senior management likes the speed, but no one can explain who reviews the output or what data is allowed into the tool. What is the strongest diagnosis?

A. The main problem is that the team has not yet measured productivity improvement.
B. The main problem is unclear governance around acceptable use, review ownership, and sensitive data handling.
C. The main problem is that the team should stop all AI use permanently.
D. The main problem is that the updates are not yet visually polished enough for executive use.

Best answer: B

Why: The scenario centers on a governance gap: unclear acceptable use, weak review ownership, and sensitive-data exposure.

Why the others are weaker: A and D focus on secondary concerns. C overreacts instead of diagnosing the actual governance issue.