A startup founder is implementing an AI governance program. She wants to establish an 'AI exceptions process.' What is the primary purpose of this process, and what must it include?

• A.The AI exceptions process provides a structured path for business units to use AI capabilities that don't fully meet current governance policy (e.g., a capability not yet on the sanctioned list, or a use case that requires relaxed data retention limits) - it must include: documented risk justification, time-limited approval with review date, escalation to appropriate authority level based on risk, and compensating controls
• B.The AI exceptions process allows developers to skip the model validation step when deadlines are tight
• C.The AI exceptions process enables automatic approval for any AI use case that has been approved at a peer company in the same industry