AIGP Question of the Day — 28 August 2026
A new free AIGP practice question every few days, with a full explanation.
A bank's internal audit team drafted the AI governance policy and now plans to audit business units against it. The chief risk officer objects. Why?
- Internal audit lacks the specialist AI expertise needed to draft a technically sound policy
- The board should draft the policy itself rather than delegating it to a control function
- Internal audit would be assuring controls it designed itself; policy drafting belongs with the second line
- Policy drafting is a first-line responsibility that belongs with the business units being audited
Under the three-lines model, internal audit provides independent assurance and must not audit a policy it designed; drafting the AI governance policy belongs with second-line risk and compliance functions (c). Expertise gaps (a) can be remedied and are not the structural objection. Boards approve policy rather than draft it (b), and first-line business units execute controls rather than own enterprise policy design (d).
Keep going
All 100 Domain I practice questions are free in the app — no card details — with progress tracking and an explanation for every answer. See more at the free practice questions page.
AI Governance Study is an independent study aid. It does not represent a government entity: it is not affiliated with, endorsed by or authorised by any government, government agency or regulatory authority, and it does not provide government services or legal advice. Laws and frameworks are described in our own words — the official texts are listed at official sources. It is also not affiliated with, endorsed by, or sponsored by the IAPP. The AIGP name is used only to identify the exam this material helps you prepare for.