AI Certifications CAIPM Passing Score

According to the CAIPM governance and risk management framework, third-party and sub-processor risk is a critical component of AI vendor assessment. Organizations must understand not only the primary vendor’s security posture but also the full data supply chain, including any external entities that may access, process, or handle data.

In this scenario, the key issue is that anonymized text snippets are being routed to third-party linguistic specialists, and these entities are neither disclosed in the contract nor governed by defined security obligations. This creates a significant governance gap, as data exposure risk extends beyond the primary vendor. The most critical question to uncover and manage this risk is “Who else touches the data?” because it directly addresses data access, third-party involvement, and accountability across the supply chain.

Option A focuses on model training usage, which is a separate concern. Option C relates to data portability, and Option D addresses data retention policies—both important but not directly relevant to undisclosed third-party access.

CAIPM emphasizes the need for full transparency of all data processors, clear contractual obligations, and enforceable security controls across the entire vendor ecosystem. Therefore, identifying who else interacts with the data is the primary step in exposing and mitigating this supply chain risk.

The rollout strategy described is clearly department/function-based , where each business unit adopts the AI solution independently with customized training and ownership. While this approach can drive strong local adoption, it often creates silos , leading to inconsistencies in workflows, standards, and collaboration across departments.

The key issue highlighted in the scenario is cross-functional friction —handoff delays, inconsistent processes, and confusion when workflows span multiple departments. This is a known drawback of department-based rollout sequencing, where each unit optimizes locally without ensuring enterprise-wide alignment.

CAIPM emphasizes that while department-based rollouts can accelerate early adoption, they must be carefully managed to avoid fragmentation. For enterprise-wide systems, especially those supporting shared processes, approaches such as use-case-based rollout or coordinated hybrid strategies are often more effective in maintaining consistency.

Other options are less relevant:

Geography-based rollout would create regional differences, not functional workflow conflicts.

Use-case-based rollout focuses on end-to-end processes, which would reduce cross-functional issues.

Hybrid approaches aim to balance these challenges rather than cause them.

Therefore, the correct answer is Department/Function , as it directly explains the siloed adoption and resulting cross-functional inefficiencies.

The key requirement in this scenario is identifying the stage that uses learned representations to make decisions or predictions about the presence of conditions in images . This corresponds to the Modeling or Recognition stage in the computer vision pipeline.

In a typical computer vision workflow:

Image acquisition involves capturing or collecting raw image data

Preprocessing prepares the images by cleaning, normalizing, or resizing them

Feature extraction identifies and encodes relevant visual patterns such as edges, textures, or shapes

Modeling or Recognition uses these extracted features (or learned representations in deep learning models) to classify, detect, or predict outcomes

The question specifically highlights that the system is using learned representations to determine whether conditions are present , which is a decision-making task. This is not just extracting features but interpreting them to produce a clinical outcome , which is the responsibility of the modeling or recognition stage.

In modern AI systems, especially deep learning-based computer vision, feature extraction and modeling are often integrated. However, conceptually, the recognition stage is where predictions are made based on learned patterns .

Therefore, the correct answer is Modeling or Recognition , as it is the stage responsible for interpreting visual features and generating clinically relevant predictions.

=========

The scenario describes a stable production model operating within acceptable thresholds, while gradual, incremental changes in input data are emerging. This does not indicate urgent degradation or sudden drift, but rather a slow evolution that should be addressed proactively without causing disruption.

The most appropriate approach is model refresh and incremental updates , which allows the system to adapt gradually to changing conditions while maintaining operational stability. This approach aligns with CAIPM guidance for continuous, low-impact optimization , where updates are introduced in a controlled and minimally disruptive manner.

Other options are less suitable:

Regular health checks are already implied and do not actively address evolving data patterns.

Retraining based on drift is typically triggered by measurable performance degradation, which is not occurring here.

Scheduled retraining cycles may be too rigid and not aligned with the observed gradual changes.

CAIPM emphasizes that in mature AI operations, organizations should use incremental improvement strategies to maintain performance while avoiding unnecessary interventions. This ensures the system remains aligned with evolving data without introducing instability.

Therefore, the correct answer is Model refresh and incremental updates , as it best balances responsiveness with operational continuity.