Exam AIGP topic 1 question 76 discussion

Actual exam question from IAPP's AIGP

Question #: 76
Topic #: 1

CASE STUDY -
Please use the following to answer the next question:
A local police department in the United States procured an AI system to monitor and analyze social media feeds, online marketplaces and other sources of public information to detect evidence of illegal activities (e.g., sale of drugs or stolen goods). The AI system works by surveying the public sites in order to identify individuals that are likely to have committed a crime. It cross-references the individuals against data maintained by law enforcement and then assigns a percentage score of the likelihood of criminal activity based on certain factors like previous criminal history, location, time, race and gender.
The police department retained a third-party consultant to assist in the procurement process, specifically to evaluate two finalists. Each of the vendors provided information about their system’s accuracy rates, the diversity of their training data and how their system works. The consultant determined that the first vendor’s system has a higher accuracy rate and based on this information, recommended this vendor to the police department.
The police department chose the first vendor and implemented its AI system. As part of the implementation, the department and consultant created a usage policy for the system, which includes training police officers on how the system works and how to incorporate it into their investigation process.
The police department has now been using the AI system for a year. An internal review has found that every time the system scored a likelihood of criminal activity at or above 90%, the police investigation subsequently confirmed that the individual had, in fact, committed a crime. Based on these results, the police department wants to forego investigations for cases where the AI system gives a score of at least 90% and proceed directly with an arrest.
Which AI risk would NOT have been identified during the procurement process based on the categories of information requested by the third-party consultant?

A. Security.
B. Accuracy.
C. Explainability.
D. Discrimination.

Show Suggested Answer

Suggested Answer: A 🗳️

by Ecommail at June 12, 2025, 7:39 p.m.

Comments

Submit Cancel

Ecommail

3 days, 21 hours ago

Selected Answer: A

The AI risk that would NOT have been identified during the procurement process, based on the categories of information requested by the third-party consultant, is A. Security. Explanation: The consultant evaluated the vendors based on their system’s accuracy rates, the diversity of their training data, and how their system works. These categories directly relate to the following risks: Accuracy (B): The consultant explicitly reviewed the accuracy rates of the systems, so this risk was assessed. Explainability (C): Information about "how the system works" likely includes details on the system's decision-making process, which relates to explainability. Discrimination (D): The diversity of training data was evaluated, which is directly tied to assessing potential biases or discrimination in the system’s outputs. However, there is no indication that the consultant requested or evaluated information related to security, such as vulnerabilities to hacking, data breaches, or other cybersecurity risks associated with the AI system. Therefore, security risks would not have been identified during the procurement process.

upvoted 1 times

...