Domain 6 · lesson
Governance, Risk, and Responsible Use
Learning goal: use Claude within data permissions, organizational policy, Anthropic policy, and proportionate human oversight. S26 S27 S28 S29 S30
Objective 6.1
Identify appropriate and inappropriate uses
Core content
Evaluate the intended activity, affected people, consequence of error, applicable policy, and required safeguards. Anthropic's Usage Policy contains prohibitions and requirements for particular categories and high-impact contexts. S26
Applied example
A low-risk internal brainstorming task differs from a system making or materially supporting a high-impact decision about an individual. Similar text generation technology does not imply identical governance.
Exam decision rule
Check whether the use itself is permitted before optimizing how to implement it.
Objective 6.2
Apply privacy and data-sensitivity criteria
Core content
Distinguish consumer and commercial product terms, training use, retention, access permission, purpose limitation, and data minimization. "Not used for training by default" does not mean "not stored," "safe to upload anything," or "authorized for every purpose." S27 S28 S29
Applied example
If analysis requires duration and category, remove addresses and account numbers before transfer when authorized to create a minimized dataset. Renaming sensitive columns is not anonymization.
Exam decision rule
Minimize before transfer and verify the applicable product/account terms.
Objective 6.3
Follow organizational policies and governance
Core content
Organizational controls determine approved accounts, connectors, data locations, permissions, retention, reviewers, exceptions, and incident handling. A restrictive prompt is not a substitute for access control. S26 S30
Applied example
If a corporate integration is blocked, do not move the file to a personal account merely to finish faster. Use the approved access or exception process.
Exam decision rule
Resolve policy exceptions through the authorized process, not through informal approval from the person who wants the work completed.
Objective 6.4
Consider ethical implications
Core content
Evaluate honesty, relevant transparency, content rights, fairness, and effects on people. Distinguish facts, inferences, recommendations, and synthetic material. Aggregate performance can hide materially different outcomes across groups or contexts. S26 S09
Applied example
Marketing material should not present invented testimonials as real customer experiences. Removing one sensitive attribute does not guarantee all proxy effects disappear.
Exam decision rule
Identify the potential harm and choose a proportionate control: validation, redesign, competent review, transparency, or refusal of the use when appropriate.