AI & Tech Governance: Test Your Knowledge

Ten questions for UK CEOs, CFOs and board directors. Test your understanding of AI regulation, governance obligations and enterprise AI risk. Results are instant and confidential.

Question 1 of 10

What does the UK’s AI Safety Institute primarily focus on?

Consumer pricing regulation

Frontier AI risk evaluation

Data protection compliance

Patent registration for AI inventions

Question 2 of 10

Under the EU AI Act (which affects UK companies with EU operations), which AI systems are classified as ‘high risk’?

Chatbots used for customer service

AI used in hiring, credit scoring and critical infrastructure

AI used for internal email drafting

Recommendation algorithms on retail websites

Question 3 of 10

Which UK body has primary responsibility for AI regulation in financial services?

ICO (Information Commissioner’s Office)

BEIS (Department for Business and Trade)

FCA (Financial Conduct Authority)

NCSC (National Cyber Security Centre)

Question 4 of 10

A board director’s duty regarding AI governance under UK company law primarily stems from which Act?

Data Protection Act 2018

Companies Act 2006 (duty of care and skill)

AI Act 2024

Digital Markets Act

Question 5 of 10

What is ‘model drift’ in an enterprise AI context?

When an AI vendor changes their pricing model

When AI model performance degrades as real-world data shifts from training data

When AI infrastructure moves to cloud hosting

A scheduled software version update

Question 6 of 10

What should a CEO require as a minimum governance structure before deploying AI in a customer-facing process?

A vendor NDA

A risk assessment, human oversight protocol and escalation process

ISO 27001 certification from the vendor

Board approval for every individual deployment

Question 7 of 10

The ICO’s guidance on AI says organisations must be able to explain automated decisions. This is most directly linked to which principle?

Data minimisation

Accountability and transparency under UK GDPR

Storage limitation

Lawful basis only

Question 8 of 10

When evaluating an AI vendor’s security posture, which certification should a board prioritise asking for first?

Cyber Essentials

ISO 27001 or SOC 2 Type II

PCI DSS

FIDO2

Question 9 of 10

What is ‘shadow AI’ and why should boards care?

AI used only outside business hours; minimal risk

Unapproved AI tools used by employees, creating data leakage and compliance exposure

A dark web AI service used by criminals

AI used covertly by competitors

Question 10 of 10

Which of these is a board-level AI governance red flag?

Having a Chief AI Officer

AI decisions being made entirely by the technology team with no board visibility

Using AI from major cloud vendors

Publishing an AI use policy

Informd

AI & Tech Governance: Test Your Knowledge

AI & Tech Governance: Test Your Knowledge

Your Results