A telecoms group is finalising the documented scope statement for its AIMS under Clause 4.3. The general counsel asks which inputs Clause 4.3 expects the team to consider when defining the AIMS boundaries.
According to GAICC Foundation Module 4, which set of inputs is MOST consistent with Clause 4.3?

• A. The external and internal issues from Clause 4.1, the requirements of interested parties from Clause 4.2, and the organisation ' s AI-related roles, services, and dependencies.
• B. Just the AI inventory and the geographies of deployment, since Clause 4.3 is concerned with describing technical assets and the regions in which they are operated.
• C. The Continuing Professional Development requirements for personnel certified under the GAICC Foundation credential, since scope is governed by personnel certification cycles.
• D. The five-step certification application pathway, including the twelve-month eligibility window opened on the date the certification application is approved by GAICC.

An education provider uses an AI plagiarism-detection tool supplied by a third-party vendor. A student is flagged incorrectly and appeals. The teacher refers the matter to the IT helpdesk, the helpdesk refers it to the procurement team, procurement refers it to the vendor, and the vendor refers it back to the institution. The student receives no clear response for several weeks. Which issue BEST reflects an accountability weakness under the responsible-AI principles in ISO/IEC 42001?

• A. Accountability is adequate because each team in the referral chain followed its own internal procedure, and procedural compliance by individual teams demonstrates that responsibility has been appropriately distributed across the institution.
• B. No specific role inside the institution has been assigned responsibility for AI-system outcomes experienced by users, so the appeal cannot be addressed end to end-a gap inconsistent with the accountability principle and with Clause 5.3 role assignment.
• C. The student should be required to escalate the appeal through a formal external regulator rather than through the institution, as external regulators are better placed than internal staff to adjudicate AI- related complaints raised by individual learners.
• D. The vendor should be considered solely accountable for the misclassification because the model was developed and trained externally, and the institution is therefore a passive consumer of the vendor ' s pre-built classification capability for student submissions.

A travel platform plans to train a recommendation model on five years of customer booking history, including names, contact details, and trip itineraries. The data-protection officer raises concerns about training-data use.
The AI governance lead is asked how ISO/IEC 42001 treats the relationship between AI management and personal-data protection. Which response BEST reflects the standard ' s intent on privacy as a responsible-AI consideration?

• A. Personal-data protection is a relevant input to the AI System Impact Assessment under Clause 6.1.4, and the AIMS should coordinate with applicable privacy obligations rather than treating data protection as a separate concern outside the scope of AI governance.
• B. The AI governance lead should remove privacy considerations from the AI System Impact Assessment scope and refer them to the privacy officer for a parallel assessment, with no formal linkage between the two assessment processes maintained within the AIMS records.
• C. The AIMS should record an exception noting that training data is exempt from privacy review on grounds of model improvement, since pursuit of model accuracy provides a legitimate operational basis for the platform ' s use of historical booking information in training.
• D. Personal-data protection sits entirely outside the AIMS because ISO/IEC 42001 governs AI systems and applicable privacy laws govern personal data, so the two regimes operate independently with no expectation of coordination across them.

During a Foundation classroom exercise, learners are asked to sort four short documents into the categories defined by ISO/IEC 42001. One document is a one-page statement signed by the chief executive that sets direction for responsible AI use, commits to applicable requirements, and commits to continual improvement of the AIMS. Three other documents describe controls, model training procedures, and an incident log. Which categorisation of the signed one-page statement is BEST aligned with Clause 5.2?

• A. It is the AI policy required by Clause 5.2, because top management has documented direction for AI, set a framework for objectives, and committed to satisfying applicable requirements and to continual improvement.
• B. It is an Annex A control implementation record, since it describes how the organisation intends to apply selected controls drawn from the Annex A reference set during the operational phase of the management system.
• C. It is an AI system impact assessment summary, because it sets out the organisation ' s intended position on responsible AI use at a level that informs the impact-assessment scoring rubric for individual systems.
• D. It is a management-review output captured under Clause 9.3, since the chief executive has signed it and the document expresses commitments at a strategic level appropriate to a periodic review of the management system.

A foundation workshop case describes a public-transport agency deploying an AI tool that adjusts bus arrival predictions for passenger displays. The agency lists employees, the transport regulator, and a software vendor as interested parties in its draft AIMS documentation. A learner is asked whether any meaningful interested- party group is missing for a tool with public-facing outputs. Which response BEST reflects the intent of Clause 4.2?

• A. The list should add the company that supplies passenger-display screens as hardware vendor, instead of considering passengers themselves, since the agency interacts contractually with the display vendor rather than with the travelling public.
• B. The list should be reduced to focus on the regulator and the software vendor, on the basis that employees are sufficiently covered by general human-resources processes and do not require separate treatment in the AIMS interested-parties documentation.
• C. The list is acceptable as drafted, since interested parties under Clause 4.2 refer chiefly to internal stakeholders and contracted suppliers; broader public groups do not typically appear in the AIMS interested parties record for an operational tool of this nature.
• D. Passengers who rely on the bus arrival displays are a relevant interested party and their expectations should be identified, since they are individuals affected by the AI system ' s outputs even though they have no direct contractual relationship with the agency.