In CPMAI risk-based testing, what is the purpose of post-deployment monitoring?

• A. To detect issues that were not captured during testing and assess real-world performance.
• B. To finalize the project budget.
• C. To set marketing strategies.
• D. To disable the model after deployment.

Answer: (A)

Post-deployment monitoring in risk-based testing focuses on watching the model in production to catch problems that testing might miss and to verify its real-world performance. Even with thorough pre-deployment tests, live data can differ from test data, distributions can drift, and unexpected inputs or edge cases can appear. Monitoring tracks key signals such as accuracy or usefulness of outputs, latency, error rates, fairness and safety indicators, and any anomalous or harmful results. It compares these signals to predefined acceptance criteria and triggers remediation, retraining, or adjustments when needed. This ongoing vigilance ensures controls remain effective, supports timely incident response, and sustains risk management as the system evolves. Budgets and marketing strategies are not part of this testing activity, and the aim isn’t to disable the model by default but to maintain and improve its reliable operation in the real world.