Which item is not typically listed as a key component of an AI Charter?

• A. Security controls.
• B. Timeline.
• C. Scope.
• D. Governance structure.

Answer: (A)

An AI Charter centers on governance and how the AI effort will be managed, not the specific technical controls that will be used. It usually lays out the purpose of the initiative, the boundaries of what will be covered (scope), who is responsible and who has decision rights (governance structure), and the timeline or milestones for delivering outcomes. These elements establish accountability, oversight, and a clear roadmap for the project.

Security controls, while essential for safe operation, belong in the security program and risk management layers. They specify concrete measures like access controls, encryption, auditing, and vulnerability management. Those details are typically documented in security policies and risk assessments, rather than as core components of an AI Charter. The charter may touch on security and privacy at a high level, but it does not usually list security controls as a primary component.

So, security controls are not typically listed as a key component of an AI Charter.