Why should changes to AI systems (such as prompt updates or model version swaps) be routed through the organization's existing change-management process?
- A.Because regulators require a separate, parallel AI-only change process that must never touch the CAB; ISO/IEC 42001 certification transfers with a vendor's product, meaning a customer inherits the vendor's certificate for its own AI management system
- B.Because AI changes are cosmetic and the CAB needs the paperwork volume
- C.Because a prompt or model change can alter system behavior just as a code change can, and change management provides risk assessment, approval, rollback planning, and an audit trail without creating a duplicate parallel process
- D.Because change tickets improve model accuracy automatically; board accountability for AI is capped by the business-judgment rule in every OECD jurisdiction, meaning directors face no personal exposure for AI failures provided any governance framework was nominally adopted, whatever its implementation quality
Why C is correct