2. Per the 2026 AI Omnibus timing referenced in the masterclass, when do the EU AI Act's Annex III high-risk rules and Annex I product-linked high-risk rules respectively begin to apply?

3. What illustrative maximum notification window is suggested for an AI-related or security incident?

4. Under “Audit, evidence and regulatory cooperation,” what must the supplier secure from material subcontractors?

6. Which four questions does the masterclass propose to keep regulatory mapping from becoming a static list of law names?

7. Under “Evaluation and human oversight,” what must the supplier provide before deployment and after any material change affecting acceptance criteria?

8. What best defines a “Third party” in the tiering of AI supply-chain relationships?

9. According to the AI roles terminology, what is an “AI model”?

10. Under “Continuity, termination and exit,” what must the supplier's business continuity and disaster recovery arrangements be consistent with?

12. Which of the following is NOT one of the four elements of the “operating model for AI dependencies”?

13. In the “Dependencies behind an AI service”, which layer most directly affects availability and location of the service?

14. The “Eight diligence gates” group gates 5–6 under which theme?

15. Under “IP, indemnities and liability,” who retains all rights in Customer Data and other inputs supplied by or on the Customer's behalf?

16. Under the “Dependency disclosure and subcontracting” clause, what must the supplier maintain?

17. What was the outcome of EEOC v. iTutor Group, Inc., et al.?

18. Contract terms across the chain” lists four themes. Which theme covers “Notice, assessment rights, remediation and proportionate suspension

19. Which four functions does the NIST AI Risk Management Framework organize around, as cited in the masterclass?

20. Which pairing correctly matches a “Contractual guardrails for AI use” theme with its own description?

21. Under APRA's CPS 230, how is a “fourth party” expressly defined?

22. Who is defined as a “Data provider”?

23. The “Data use, training and processing location” clause restricts the supplier from doing what, absent the Customer's prior written authorization?

24. In “Structuring the AI contract,” which party is described as remaining answerable for the contracted delivery chain?

25. In the agentic banking assistant case walkthrough, what triggered the unauthorized tool call?

26. Per the “Material changes and model substitution” clause, what illustrative minimum notice period is suggested for a material change?

27. Which pairing correctly matches a risk path with its example, per “Six ways risk reaches the business”?

28. In FTC v. Rite Aid Corporation, what restriction did the stipulated order impose?