Which option describes the contents of an AI incident post-mortem?

• A. Stakeholder communication plan
• B. Incident cost attribution
• C. Root cause, impact, corrective actions, lessons learned, and governance actions to prevent recurrence
• D. Training data purity checklist

Answer: (C)

An AI incident post-mortem should document what happened, why it happened, and how to prevent it from happening again. The contents should include the root cause, the incident’s impact, the corrective actions to fix the issues, the lessons learned, and governance actions to prevent recurrence. This combination provides both a clear explanation of the failure and concrete steps to improve processes, controls, and oversight for future incidents. While a stakeholder communication plan is useful in incident response, it belongs in a separate communications context rather than the post-mortem content; cost attribution focuses on financials rather than learning and prevention; and a training data purity checklist addresses data quality, not the full incident analysis and governance improvements captured in a post-mortem.