Team Project: AI Use for Artifacts with Security and Ethics Measures
PMBOK v8 Definition
The evaluation should be focused on the use of AI to produce some artifacts for communication with the sponsor, stakeholders, team, and vendors. Proactive security and ethics measures should be considered, such as project managers engaging with the appropriate stakeholders (e.g., the cybersecurity team, if applicable), to understand if the risk of incorporating AI is acceptable for the organization.
This concept resides within Section 2 – Project Management Performance Domains, specifically within the domain of project team competency and stakeholder engagement. It is not a formal process but rather a guiding practice for modern project teams leveraging technology.
Why It Matters for the Exam
PMI frequently tests your ability to identify proactive risk management and ethical decision-making when using new technologies like AI. Exam questions will present scenarios where the project team uses AI to create deliverables, and you must select the correct stakeholder (e.g., cybersecurity team) to consult before proceeding. This concept appears in situational judgment questions and risk management items, testing whether you prioritize security and ethics over speed or convenience.
Key Points to Remember (for the exam)
- Primary Concern: Evaluate the use of AI specifically for producing artifacts for communication (sponsor, stakeholders, team, vendors).
- Proactive Security: Always consider security measures before implementing AI, not after.
- Ethics First: Ethics measures are equally important as security measures.
- Key Stakeholder to Engage: The cybersecurity team is explicitly mentioned as the appropriate stakeholder to consult.
- Risk Acceptance: The goal is to understand if the risk of incorporating AI is acceptable for the organization.
- Team Competency Required: Social responsibility is a core competency—project teams must make decisions aligned to the common good.
- Risk Threshold Definition: The team defines the risk thresholds of the project and participates in subsequent risk management activities.
Typical PMI Exam Example
A project manager decides to use an AI tool to generate weekly status reports for the sponsor and vendors. What should the project manager do first?
Correct Answer: Engage with the cybersecurity team to evaluate if the risk of incorporating AI is acceptable for the organization, considering proactive security and ethics measures.
PMI Exam Traps
-
Trap: Implementing AI immediately to save time.
- Reality: You must first evaluate security and ethics risks with the cybersecurity team.
-
Trap: Consulting only the project sponsor about AI use.
- Reality: The cybersecurity team is the explicit stakeholder to engage regarding AI risk acceptance.
-
Trap: Treating AI artifacts as identical to manually created artifacts.
- Reality: AI-generated artifacts require additional evaluation for security and ethics compliance.
-
Trap: Focusing only on technical AI capabilities.
- Reality: Social responsibility and alignment to the common good are required competencies.
Important PMI Connections
| Related Concept | Relationship Type | Exam Attention Point |
|---|---|---|
| Risk Management Plan | Input to Risk Responses | AI risk must be assessed before implementing risk responses |
| Stakeholder Engagement | Complements AI Evaluation | Identify, prioritize, and engage cybersecurity team as a stakeholder |
| Social Responsibility | Core Competency Required | Team decisions must align to common good when using AI |
| Lessons Learned Register | Document for Risk Responses | Record AI risk evaluation outcomes for future reference |
| Risk Register | Output of Risk Identification | Document AI-related risks after cybersecurity consultation |
Quick Review Questions
-
A project team wants to use AI to produce vendor communication artifacts. Which stakeholder should the project manager engage first?
-
When evaluating AI use for project artifacts, what two proactive measures must be considered?
-
What competency must project team members possess when making decisions about AI implementation?
-
A project manager has already implemented AI for sponsor reports. What should they have done first according to PMBOK v8?
-
The team defines the risk thresholds of the project. How does this relate to AI use decisions?
PMBOK v8 Reference
Section 2 – Project Management Performance Domains (Page 75) Section 3 – Project Management Principles (Social Responsibilities competency, Page 30) Implement Risk Responses (Section 2, Page 99-100)