A CISO is asked to justify the investment in an AI governance program to the board. Which of the following BEST describes why AI governance is distinct from traditional software governance?

• A.A. AI systems are more expensive to build, requiring greater financial oversight
• B.D. AI systems require more frequent software updates than traditional applications
• C.C. AI governance is required by GDPR, while traditional software governance only requires SOC 2
• D.B. AI systems can exhibit emergent behaviors, produce discriminatory outcomes at scale, and make opaque decisions that affect rights and wellbeing in ways that traditional software does not, requiring specialized governance controls