AI Governance and vCISO Readiness Diagnostic

A leadership-oriented diagnostic for security leaders, vCISOs, advisors, consultants, and GRC teams translating AI risk into controls, policy, evidence, and buyer-facing trust posture.

60 q · 75m

Question 1 of 602%

governance risk compliance

A policy says 'AI systems must preserve customer confidentiality.' Which implementation best operationalizes that policy for a RAG assistant?

The assistant retrieves from customer documents and generates answers for authenticated users across multiple tenants.

A. Add the policy text to the system prompt and trust the model to follow it.B. Enforce tenant/user ACL filtering before retrieval.C. Ask users to report any confidentiality issues after launch.D. Publish the policy on the company website.