Within the ISACA Advanced in AI Risk framework, life-cycle controls should protect data quality, model design, testing, validation, monitoring, change management, and secure retirement of AI systems. Explainability depends on traceability. Documentation of model logic and data provenance provides evidence of how outputs were produced and which data influenced them, supporting auditability, accountability, and meaningful review of AI decisions. This makes option D, Documentation of model logic and data provenance, the strongest answer. The other choices describe narrower technical, operational, performance, or administrative considerations and do not address the primary risk-management objective in the scenario as directly. A risk practitioner should select the response that most effectively reduces the stated exposure while pre serving appropriate oversight, traceability, and alignment with organizational risk tolerance and business requirements.