Audrey is the Chief Legal Officer for a multinational software corporation.

The correct answer is B. EU AI Act . EC-Council’s CAIPM materials position AI program management around governance, risk, compliance, and safe enterprise-scale adoption. The official CAIPM brochure states that learners must “apply governance, compliance, and ethical frameworks across AI programs” and develop “program-level controls” for responsible deployment. In that context, the EU AI Act is the strongest match because it is the most prominent binding, risk-based regulatory framework among the options listed.

The European Commission describes the AI Act as a framework that “sets out risk-based rules for AI developers and deployers regarding specific uses of AI,” and explains that it introduces a clear approach based on different levels of risk. That makes it directly aligned to the scenario, which involves a high-risk AI application and a multinational organization seeking a foundational compliance baseline. EC-Council’s own governance comparison article further characterizes the EU AI Act as moving the market from voluntary guidance to enforceable obligations and identifies it as a risk-based regime with concrete obligations for high-risk systems.

By contrast, OECD AI Principles and NIST AI RMF are influential but primarily guidance-oriented rather than a directly enforceable law, and Singapore FEAT is narrower and sector/context specific. Therefore, for a global enterprise wanting the most comprehensive compliance anchor, the best answer is EU AI Act .