- Severity
- HIGH
- Status
- OPEN
- Owner
- Digital Strategy
- Root cause
- AI governance
- Test failure
- Design assessment (CDA)
- Opened
- 2026-05-02
- Due
- 2026-08-15
- Closed
- —
60 days old as of 2026-07-01
Review-gate bypasses are not logged, defeating the compensating control design.
FAIL
tested 2026-04-30
This issue records a CDA failure, shown first.
Control Design Assessment (CDA)
Procedures evaluating whether the control is designed adequately.
- 1.Obtain and read the human-review-gate procedure; confirm it defines which AI-generated outputs require review before customer or record use.
- 2.Confirm the gate applies before customer-facing or record use, not after.
- 3.Confirm bypass events are captured in an audit log as part of the control design, so a bypass does not defeat the compensating review.
Control Operating Effectiveness (COE)
Procedures evaluating whether the control operated over the testing period.
- 1.Select 25 AI-generated outputs used with customers or in records and confirm each carries evidence of human review prior to use.
- 2.Confirm the reviewer identity captured on each sampled item differs from the process that generated the content.
- 3.Confirm instances where the review gate was bypassed were logged and escalated.
Related issues
Same root cause or a shared entity
Score contribution
Issue-pressure points as of 2026-07-01, before the factor is capped at 0–100.
- Generative AI Knowledge Assistant25 of 37 pts
67.6% of this entity’s issue pressure
Annual priority score: 70 · issue pressure carries 10% weight in the active model — one factor among several behind that score.
- HIGH severity: 25
Linked entities
- Generative AI Knowledge Assistant
AI USE CASE · HIGH