An organization deploys an AI system that recommends layoffs and budget cuts based on financial and productivity data. Executives approve its use but do not fully understand its decision logic. The recommendations align with profits but raise ethical and reputational concerns internally.
What is the MOST appropriate action for the security leader?
A. Require human review of all AI-generated workforce decisions
B. Document the risk acceptance and ethical considerations in governance records
C. Suspend the AI system until explainability requirements are met
D. Conduct a privacy impact assessment focused on employee data