A foundation workshop case describes a public-transport agency deploying an AI tool that adjusts bus arrival predictions for passenger displays. The agency lists employees, the transport regulator, and a software vendor as interested parties in its draft AIMS documentation. A learner is asked whether any meaningful interested- party group is missing for a tool with public-facing outputs. Which response BEST reflects the intent of Clause 4.2?

• A. Passengers who rely on the bus arrival displays are a relevant interested party and their expectations should be identified, since they are individuals affected by the AI system ' s outputs even though they have no direct contractual relationship with the agency.
• B. The list is acceptable as drafted, since interested parties under Clause 4.2 refer chiefly to internal stakeholders and contracted suppliers; broader public groups do not typically appear in the AIMS interested parties record for an operational tool of this nature.
• C. The list should add the company that supplies passenger-display screens as hardware vendor, instead of considering passengers themselves, since the agency interacts contractually with the display vendor rather than with the travelling public.
• D. The list should be reduced to focus on the regulator and the software vendor, on the basis that employees are sufficiently covered by general human-resources processes and do not require separate treatment in the AIMS interested-parties documentation.

A compliance manager is preparing a slide for the leadership team to explain the difference between accreditation and certification in the ISO/IEC 42001 ecosystem. She wants a one-sentence working definition of an accreditation body that aligns with GAICC Foundation Module 2. Which option is the BEST fit?

• A. An accreditation body is the consulting firm engaged by an organisation to help draft its AI policy, conduct gap analyses, and prepare evidence packs for a Stage 1 audit.
• B. An accreditation body is the internal audit function within an organisation that reviews the AIMS against ISO/IEC 42001 before any external certification audit is conducted.
• C. An accreditation body is the publisher of an ISO standard, responsible for drafting the requirements text, maintaining revisions, and updating the harmonised structure terms.
• D. An accreditation body is an authoritative third party that assesses and formally recognises the competence of certification bodies to audit against standards such as ISO/IEC 42001.

An IT director is finalising the certification scope statement for his organisation ' s AIMS. He has been told that ISO/IEC 42001 is built on the Harmonized Structure used by other ISO management system standards.
According to GAICC Foundation Module 2, which clauses of ISO/IEC 42001 contain the auditable management system requirements?

• A. Clauses 4 through 10, which carry the management system requirements that an external audit assesses for conformity against the standard.
• B. Annexes A, B, C, and D, which are the principal sources of audit findings during a Stage 2 certification audit against an ISO management system standard.
• C. Clause 6 by itself, since it covers planning, risk assessment, and AI System Impact Assessment, which are the AI-specific elements that auditors evaluate.
• D. Clauses 1, 2, and 3, which together set scope, normative references, and terms-the binding requirements that an audit team checks for conformity.

A foundation candidate is asked to identify which attributes an AI policy must include to satisfy ISO/IEC
42001 Clause 5.2. The candidate is given four short summary statements about an AI policy drafted by a logistics company that uses route-optimisation and demand-forecast models. The policy is one printed page, signed by the chief executive, and posted on the staff intranet. Which summary BEST reflects the minimum attributes Clause 5.2 requires of a documented AI policy?

• A. The policy mirrors the wording of the EU AI Act in full, copies the relevant sections of the local privacy statute verbatim, and republishes the text of Annex A controls so staff have one combined reference document.
• B. The policy promises to obtain ISO/IEC 42001 certification within twelve months, names the chosen certification body, and commits the chief executive to attend each surveillance audit in person to answer auditor questions.
• C. The policy lists every AI model the organisation operates, names the data scientist accountable for each model, and specifies the exact retraining cadence in months for the algorithms used by the logistics planning team.
• D. The policy is appropriate to the organisation ' s purpose, provides a framework for AI objectives, commits to satisfying applicable requirements, and commits to continual improvement of the AI management system.