Skip to content
AI Security

Interview question · AI Governance, Risk & Compliance

What obligations apply to general-purpose AI models, and what triggers the systemic-risk regime?

Two layers: documentation, copyright and transparency for every GPAI model provider, then evaluation, incident reporting and cybersecurity once a model crosses into systemic risk.

hardNewPreparation tags: Anthropic, OpenAI, Google DeepMindUpdated Nov 2026

Two layers: documentation, copyright and transparency for every GPAI model provider, then evaluation, incident reporting and cybersecurity once a model crosses into systemic risk.

Make your first attempt

What would you say before reading the answer?

  1. 01 State the assumptions your answer depends on.
  2. 02 Explain the mechanism and choose a control.
  3. 03 Name a condition that would change your decision.

The worked answer includes an approach, scoring criteria and follow-up questions. Compare the reasoning with your own.

signing in unlocks more free answers per topic

What if · the follow-ups in this answer

The answer works through 6 follow-ups like an interviewer would

Your company provides a general-purpose AI model in the EU market and is approaching the training compute level at which systemic risk is presumed.

  1. What must every GPAI model provider do?
  2. When does a model have systemic risk?
  3. What extra duties come with systemic risk?
  4. What does adequate cybersecurity mean for the model?
  5. What if the model is open-weight?
  6. How would you prepare the company?

Each rung has a nudge, a model answer, the principle that carries over and the weak answer to avoid. Sign in free to open it.

UP NEXT ON YOUR JOURNEY
Next in this trackDoes the EU AI Act apply to a company with no EU office?Next in this trackHow do you govern shadow AI?Next in this trackTurn AI risk management into engineering practice: owners, gates and release criteria.
DISCUSSION · 0

No comments yet. Share a correction or a different way to answer it.