What does the AI Acceptable Use Policy dictate?

• A. Permitted and not permitted uses of AI within the enterprise
• B. Data Retention Periods
• C. Incident Response Procedures
• D. Vendor Selection Criteria

Answer: (A)

The main concept being tested is how an AI Acceptable Use Policy guides how AI tools may be used within an organization. It defines the permitted and prohibited uses of AI, setting boundaries to protect data privacy, intellectual property, and security, and it governs how employees interact with and deploy AI tools in real work. This makes the option describing allowed and disallowed AI uses the best fit, because the policy’s core purpose is to outline what you can and cannot do with AI in the enterprise.

Policies about data retention periods deal with how long data is kept and purged, which is part of data governance rather than how AI is allowed to be used. Incident response procedures cover steps for detecting and responding to security incidents, not the rules for AI usage. Vendor selection criteria relate to how vendors are chosen and managed, which is procurement policy, not AI usage guidelines.