A compliance manager is preparing a slide for the leadership team to explain the difference between accreditation and certification in the ISO/IEC 42001 ecosystem. She wants a one-sentence working definition of an accreditation body that aligns with GAICC Foundation Module 2. Which option is the BEST fit?

• A. An accreditation body is an authoritative third party that assesses and formally recognises the competence of certification bodies to audit against standards such as ISO/IEC 42001.
• B. An accreditation body is the consulting firm engaged by an organisation to help draft its AI policy, conduct gap analyses, and prepare evidence packs for a Stage 1 audit.
• C. An accreditation body is the internal audit function within an organisation that reviews the AIMS against ISO/IEC 42001 before any external certification audit is conducted.
• D. An accreditation body is the publisher of an ISO standard, responsible for drafting the requirements text, maintaining revisions, and updating the harmonised structure terms.

A logistics company has implemented an AI system that recommends staffing levels for warehouse shifts. The user interface shows each recommendation with an ' Approve ' button. In practice, shift managers approve every recommendation within seconds because the system rarely surfaces context, and the interface does not let managers see the inputs that drove the decision. Reviewing this for responsible-AI conformance, which observation BEST reflects the human-oversight principle from ISO/IEC 42001 Annex B?

• A. The oversight is not meaningful because managers lack the information and context needed to challenge or override the recommendation, so the design provides the appearance of human control without the substance Annex B ' s human-oversight principle expects.
• B. Human oversight should be removed in favour of fully automated approvals on grounds of consistency, with sample audits performed monthly by the operations team to verify that the system ' s recommendations remain reasonable across the warehouse network over time.
• C. Human oversight is not engaged here because shift staffing is a low-risk operational decision; Annex B
  ' s oversight principle applies primarily to high-risk AI systems such as those that affect safety or fundamental rights, so the interface design issue is immaterial.
• D. The approve-button workflow satisfies human-oversight expectations because a human is in the loop for every staffing decision, and the speed of approvals reflects the efficiency gains of well-designed AI tooling rather than a control weakness in the deployed interface.

An education provider uses an AI plagiarism-detection tool supplied by a third-party vendor. A student is flagged incorrectly and appeals. The teacher refers the matter to the IT helpdesk, the helpdesk refers it to the procurement team, procurement refers it to the vendor, and the vendor refers it back to the institution. The student receives no clear response for several weeks. Which issue BEST reflects an accountability weakness under the responsible-AI principles in ISO/IEC 42001?

• A. The vendor should be considered solely accountable for the misclassification because the model was developed and trained externally, and the institution is therefore a passive consumer of the vendor ' s pre-built classification capability for student submissions.
• B. Accountability is adequate because each team in the referral chain followed its own internal procedure, and procedural compliance by individual teams demonstrates that responsibility has been appropriately distributed across the institution.
• C. No specific role inside the institution has been assigned responsibility for AI-system outcomes experienced by users, so the appeal cannot be addressed end to end-a gap inconsistent with the accountability principle and with Clause 5.3 role assignment.
• D. The student should be required to escalate the appeal through a formal external regulator rather than through the institution, as external regulators are better placed than internal staff to adjudicate AI- related complaints raised by individual learners.

A documentation lead is preparing a one-page reference for new joiners that names the four annexes of ISO
/IEC 42001 and their purpose. She wants the description that aligns with GAICC Foundation Module 3.
Which option BEST matches the role of each annex in the standard?

• A. Annex A is a published list of certified consultants; Annex B is the official EU AI Act mapping; Annex C is a sample AI policy template; Annex D is the standard ' s revision history log.
• B. Annex A is a list of accredited certification bodies; Annex B is a Stage 2 audit checklist; Annex C is a Statement of Applicability template; Annex D is a financial impact assessment model.
• C. Annex A maps ISO/IEC 42001 to ISO 9001 directly; Annex B is a vocabulary appendix; Annex C is a sample Statement of Applicability; Annex D is a glossary of regional AI regulations.
• D. Annex A is the reference control set; Annex B is implementation guidance; Annex C catalogues AI- related objectives and risk sources; Annex D shows integration with other management system standards.

A foundation workshop case describes a small financial-advisory firm that has just signed its AI policy. The compliance officer asks what the firm should do next to translate the policy into operational practice for a new portfolio-recommendation AI tool the firm is preparing to deploy. Which next step BEST reflects how ISO
/IEC 42001 expects policy to connect to planning and operations for a specific AI system?

• A. Print and laminate the signed policy for display in the office reception area, then distribute copies to each adviser ' s desk so that the document is visible during client meetings held in the firm ' s premises across the next quarter.
• B. Defer further action until the firm has accumulated several months of live experience with the portfolio- recommendation tool, on the basis that risk and impact assessments are more accurate when informed by post-deployment operational data points.
• C. Conduct an AI risk assessment under Clause 6.1.2 and an AI System Impact Assessment under Clause
  6.1.4 for the portfolio-recommendation tool, then plan risk treatment with controls aligned to the policy
  ' s commitments.
• D. Re-sign the AI policy in front of staff at the next quarterly town-hall meeting to demonstrate leadership commitment, on the basis that visible re-signing reinforces the message conveyed by the original signature at policy adoption.