Scoping
Narrowing an agent's deployment to the smallest task and the narrowest authority that still accomplish the job. Task scope is the one-sentence job with every action nameable; authority scope is least-privilege access to only the tools and systems each step provably needs. Scoping is the precondition for containment and for a working stop, because you can only wall off and halt a system whose shape you know.
Defined in 3 GAGE programs, which carry 3 distinct definitions of it. The wording above is taught in Certified AI Governance Professional (CAIGP).
How each discipline defines it
The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.
Narrowing an agent's deployment to the smallest task and the narrowest authority that still accomplish the job. Task scope is the one-sentence job with every action nameable; authority scope is least-privilege access to only the tools and systems each step provably needs. Scoping is the precondition for containment and for a working stop, because you can only wall off and halt a system whose shape you know.
Deciding which accounts, processes, locations and systems are inside an internal control over financial reporting assessment. Reasoned backwards from the financial statements, and committing the organization either to testing or to a rationale that must hold all year.
The engineering activity of deciding what problem you are actually solving, in what order, and why, before committing significant time to building a solution. Scoping is itself engineering work, not a preliminary step separate from it.
Where it is taught
The exact lessons this term appears in. The first module of every program is free with a free account.
- You deploy an agent: scoping, containment, and the kill switch you test before launch · Agents Under Command, Certified AI Governance Professional (CAIGP)
- ITGC, application controls, continuous auditing, and internal control over financial reporting · Internal Audit, Assurance, and Evidence, Certified Enterprise Governance, Risk and Compliance Professional (CEGP)
- Teardown: watch an expert scope a hard robotics problem end to end · Engineering Thinking and Elegant Minimalism, Engineering Judgment and Professional Formation
Where it shows up at work
A definition is where Scoping starts. The lessons above teach it inside the competencies below, which are what job descriptions ask for and what the GAGE credential records. Every link here is drawn from the same careers map that builds a role's readiness check.
Maps risks to preventive, detective and corrective controls, then tests design and operation with samples, evidence and defensible findings.
One lesson on this page teach it as a primary outcome.
Builds minimization, purpose limitation, de-identification, consent and retention into an AI system before launch, with tests that prove it.
One lesson on this page teach it as a primary outcome.
Designs multi step agent systems: orchestration graphs, tool contracts, memory, interruptibility, and the evaluation of agent behavior before it is allowed to act.
One lesson on this page teach it as a primary outcome.
Roles that hire for it
Each role page shows the full competency set, what the seat decides, and a readiness check against your own evidence.
- Chief Audit Executive, AI audit editionneeds it at depth
- Senior AI Compliance Analystneeds working knowledge
- AI Auditorneeds it at depth · 9 open postings this week
- AI Compliance Managerneeds it at depth · 2 open postings this week
- AI Compliance Specialistneeds working knowledge · 1 open posting this week
- AI Governance Engineerneeds it at depth · 7 open postings this week
How job descriptions say it
Postings rarely use the textbook word. These are the phrases the careers map reads as asking for the competencies above.
Where the frameworks place it: COSO; ISO/IEC 42001 Annex A; Global Internal Audit Standards; ISO/IEC 27701.
One interview question about it
Pick one AI control and tell me how you would test that it operated all year, not only that it was designed.
Asked of candidates for control design and operating-effectiveness testing. Answering it in your own words is exactly how a GAGE topic is passed, and the credential records the pass where an employer can check it.
If you come from another field
Some backgrounds already carry this competency, and the readiness check gives credit for it.
- Compliance and regulatory affairs carries it as work you can show: Control mapping and testing evidence exist in your files.
- Internal audit and IT audit carries it as work you can show: Tests of design and operating effectiveness are the core skill.
- Operations, claims, customer service and administration carries it as a claim to back up: Identifying process risks and quality checks is control thinking.
Terms it appears with
Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.