Home › Study guides › CCAO-F › Domain 6

CCAO-F · Domain 6 of 7 · 4 lessons · about 76 min

Domain 6: Governance, Risk, and Responsible Use

Using Claude safely at work: appropriate uses, sensitive and regulated data, your organisation's AI policies, and the ethics of AI use. 15% of CCAO-F.

This domain is 15% of CCAO-F, about 9 of the 60 questions. It is the domain where "helpful" and "allowed" can point in different directions, and the exam wants you to notice when they do.

The vocabulary: sensitive data is anything that could harm a person or the organisation if it leaked, such as customer names with account numbers, health details or unreleased financials. Regulated data is sensitive data that a law or contract controls. To anonymise or de-identify data is to remove or replace what points to a real person before you use it. Governance is the set of rules and approvals your organisation puts around AI use: which tools are approved, what may be uploaded, who signs off. Accountability means a named person answers for the result, whoever or whatever drafted it.

The recurring test: protect first, then proceed. The official sample question has the pattern: the right answer removes the personal identifiers before uploading, so the analysis can still happen. Uploading as-is breaks the policy, telling Claude "not to keep it" is not a control, and abandoning the work is an overreaction. Look for the option that applies the safeguard and lets the legitimate work continue.

What the exam guide tests

The official CCAO-F guide lists 4 objectives for this domain. Exam questions are written against them, and so are the lessons: each row says where it is covered.

Lessons

1. 6.1 Appropriate and inappropriate uses of ClaudeHow to judge a proposed use of Claude: six questions, three verdicts, when a qualified person must decide, and which uses are off limits whoever reviews them.19 min
2. 6.2 Sensitive data and privacy: protect it before you share itHow to classify data before it reaches Claude, share only what a task needs, spot re-identification risk, and know what privacy settings do and do not do.19 min
3. 6.3 Working within your organisation's AI policyWhat a workplace AI policy covers, why work stays in the approved account, what admin controls enforce, and how to handle prompt injection and approvals.19 min
4. 6.4 The ethics of using AI at workThe duties that stay with you when Claude drafts work that affects people: disclosure, accountability, fairness, honesty and respect for others' work.19 min

Practice question

From the CCAO-F bank, tagged to this domain. Every answer option is explained. Nothing is stored, nothing to sign up for.