Create and implement policies to ensure oversight and accountability across all AI life cycle stages, including use case assessment, risk management, data governance, model development, and incident management.

A manufacturer is drafting an AI policy to ensure oversight and accountability as high-risk models progress through the life cycle, from use case assessment into development, deployment and ongoing monitoring. Leadership wants the policy itself to assign clear ownership and to force human oversight at the moments that most affect affected individuals. Which TWO provisions most directly embed life cycle oversight and accountability in the policy? Select TWO.

• AName a single accountable owner for each AI system who answers for its outcomes across every life cycle stage, even where delivery work is delegated to other teams.check_circle Correct
• BRequire a documented risk assessment and a defined human review gate before a high-risk system may move from one life cycle stage to the next, such as into production.check_circle Correct
• CMandate that every model achieve at least ninety-five percent accuracy on a held-out test set before it is approved for deployment to production users.
• DDirect the security operations team to retain server access logs for the inference environment for a minimum of twelve months for forensic purposes.
• ERequire the data science team to publish a model card describing the system's intended use and known limitations once development is complete.

Why A is correct: Naming one accountable owner per system who answers for outcomes across all stages is the core accountability mechanism a life cycle policy must establish.

Why B is correct: Stage-gated risk assessment with a human review checkpoint embeds proportionate oversight at the transitions that most affect individuals, which is exactly the policy's purpose.

Why C is wrong: A fixed accuracy threshold is tempting as a quality bar, but it is a narrow technical metric set in a standard, not a policy provision that establishes oversight or accountability across stages.

Why D is wrong: Log retention sounds like governance and aids later forensics, but it is an operational security control that neither assigns life cycle ownership nor forces human oversight at decision points.

Why E is wrong: A model card aids transparency and is tempting, but it documents one stage after the fact and does not by itself assign accountability or compel oversight across the life cycle.