Week 5 self-check | AI GRCA Practice Lab

WEEK 5 · NIST AI RMF · NIST AI RMF Overview and OECD AI Principles

What does the OECD AI Principles' relationship to human rights and democratic values mean in practice?

This principle has no operational meaningAI must never be used in democraciesAI systems should be designed and used consistent with fundamental rights and democratic norms, not just efficiencyOnly government AI systems need to respect human rights

WEEK 5 · NIST AI RMF · NIST AI RMF Overview and OECD AI Principles

What does 'NIST' stand for?

National Institute of Standards and TechnologyNational Information Security TaskforceNew International Standards TrustNational Institute for Software Testing

WEEK 5 · NIST AI RMF · NIST AI RMF Overview and OECD AI Principles

A leader says: 'We just follow the law, we don't need frameworks.' What's the issue with this view?

There is no issue; law is always sufficientLaws often set outcomes without prescribing how to achieve them; frameworks give practical structure to meet those outcomesFrameworks are illegal to use alongside lawFrameworks always conflict with legal requirements

WEEK 5 · NIST AI RMF · NIST AI RMF Overview and OECD AI Principles

Why might an organisation use NIST AI RMF even where it isn't legally required?

It provides a structured, credible way to manage AI risk that can also support other legal obligationsIt is required to use any AI system anywhereIt replaces the need for any risk assessmentIt has no practical benefit

WEEK 5 · NIST AI RMF · NIST AI RMF Overview and OECD AI Principles

Which of these is one of NIST's listed trustworthy AI characteristics?

Cheapest to operateProfitableValid and reliableFastest to market

WEEK 5 · NIST AI RMF · NIST AI RMF Overview and OECD AI Principles

Which RMF function establishes intended use, context and risk scenarios?

GovernMapMeasureManage

WEEK 5 · NIST AI RMF · NIST AI RMF Overview and OECD AI Principles

Which best describes the combination of using both OECD Principles and NIST AI RMF together?

They contradict each other on every pointOnly one can be legally referenced at a timeRedundant and should never be combinedOECD gives the values-based direction; NIST gives the practical risk-management structure to act on them

WEEK 5 · NIST AI RMF · NIST AI RMF Overview and OECD AI Principles

The OECD principle 'transparency and explainability' emphasises:

Only disclosing information to regulatorsApplies only to open-source modelsKeeping all AI system details secretProviding meaningful, accessible information about how a system works and why