Ethical AI Practices & Data Governance Flashcards

A data governance team needs to classify customer transaction records under a tiered sensitivity framework. Which classification level would MOST appropriately apply to full credit card numbers?

Answer: Restricted

Full PAN (Primary Account Numbers) fall under the most sensitive 'Restricted' or equivalent tier due to PCI-DSS requirements and high re-identification risk.

Which fairness metric requires that the proportion of positive predictions be equal across protected groups, regardless of actual base rates?

Answer: Demographic parity

Demographic parity (also called statistical parity) requires the model's positive prediction rate to be equal across all demographic groups.

An organization implements a policy requiring all ML models affecting employment decisions to be reviewed by a diverse panel before deployment. This control primarily addresses which risk?

Answer: Algorithmic bias and discriminatory outcomes

Diverse review panels are a governance control specifically designed to detect and mitigate embedded biases before a model causes discriminatory employment decisions.

Under the NIST AI Risk Management Framework (AI RMF), which core function is responsible for identifying, analyzing, and prioritizing AI risks?

Answer: MAP

The MAP function in the NIST AI RMF focuses on categorizing and identifying AI risks in their organizational and societal context.

A practitioner uses SHAP (SHapley Additive exPlanations) values to explain a credit scoring model's individual predictions. This falls under which category of explainability?

Answer: Local post-hoc explainability

SHAP produces local, post-hoc explanations by attributing each feature's contribution to a specific individual prediction after the model is trained.

Which principle of data governance ensures that data is accessible to authorized users in the right format at the right time?

Answer: Data availability

Data availability ensures that authorized stakeholders can access accurate, complete data when needed for decision-making or model training.

An AI system used in healthcare automatically flags patients for high-risk interventions. Ethically, the MOST critical requirement for this system is:

Answer: Ensuring meaningful human oversight before acting on flags

In high-stakes healthcare settings, human-in-the-loop oversight is ethically required to prevent automated errors from directly harming patients.