What does the AI policy establish?

• A. Guidelines, facilitates decision-making, and communicates strategy/values
• B. A Narrow Set of Technical Controls
• C. A Marketing Plan
• D. A Product Roadmap

Answer: (A)

An AI policy sets the governance framework for how AI should be used, guiding principles that shape decisions, risk tolerance, ethics, data handling, and accountability. It provides the criteria and escalation paths teams use to determine what is acceptable, how to respond to incidents, and who is responsible for oversight. At the same time, it communicates the organization’s strategy and values to stakeholders—telling everyone where the organization stands on important issues like fairness, transparency, and safety. This makes it broader than specific technical controls, which are concrete security measures, and it isn’t a marketing plan or product roadmap, which serve different purposes such as market positioning or product development rather than governance and values.