CCAR-P · Study Guide

← Build Exercises

Domain 5

Governance, Safety & Risk Management

5 build exercises to practice the concepts in this domain.

5.1Intermediate35 minutes

5.1 — Design layered guardrails for a bank refund agent

What you will learn

  • Map irreversible actions to hard controls
  • Layer prompt guidance with I/O and tool enforcement
  • Log triggers and prove blocks with adversarial cases
5.2Intermediate35 minutes

5.2 — Build a failure-mode register with residual owners

What you will learn

  • Enumerate LLM failure modes with user impact
  • Pair mitigations with residual-risk owners
  • Connect top modes to detection signals
5.3Intermediate35 minutes

5.3 — Design HITL escalation with a structured handoff

What you will learn

  • Define measurable escalation triggers
  • Specify a decision-ready handoff packet
  • Calibrate automation tiers and close the loop
5.4Advanced40 minutes

5.4 — Map HIPAA-oriented controls for a care-routing assistant

What you will learn

  • Name applicable regimes from data and context
  • Map sensitive flows including logs and eval stores
  • Assign owners and evidence per control
5.5Advanced40 minutes

5.5 — Design fairness measurement and recourse for a lending assistant

What you will learn

  • Define fairness-relevant outcomes and slices
  • Set investigation thresholds for disparate outcomes
  • Wire disclosure and recourse into the product path