Enforcement of AI-related rules is handled primarily at the national level because a country’s government and regulatory agencies have the legal authority to create, interpret, and apply laws within its borders. This includes safety standards, privacy protections, transparency requirements, and accountability for misuse. Regional bodies and international organizations can coordinate guidelines and foster harmonization, but the actual enforcement actions—investigations, penalties, licensing, and compliance oversight—rely on jurisdictional power granted to the nation-state. Cross-border AI issues are tackled through cooperation and harmonized frameworks, yet the processing and enforcement decisions occur under national law. For example, a country’s data protection authority investigating a company and issuing penalties demonstrates national-level enforcement in action.

Internal controls are the policies, procedures, and activities that create checks and balances within an organization to govern how financial information is prepared and reported. The main reason they matter for ethical reporting is that they deter improper actions by making it harder to conceal fraud or errors, and they provide verification that financial data is complete and accurate through steps like proper authorizations, reconciliations, and documented evidence. This combination helps ensure that financial statements reflect reality and are trustworthy, which is the cornerstone of ethically responsible reporting. Of course, internal controls don’t guarantee zero errors, they don’t ensure profits every quarter, and they don’t replace the need for independent audits, which provide external validation of the controls’ effectiveness and the financial statements themselves.

Ongoing professional development coupled with a commitment to ethical and professional practice is what sustains credibility in this field. All AI members, designation candidates, practicing affiliates, and affiliates are required to pursue continuing professional education (CPE) to stay current with evolving standards, methods, and best practices. This ensures they have up-to-date knowledge to perform valuations and related work competently. Equally important is adhering to the Code of Professional Ethics and Standards of Professional Practice (SPP). This sets the expected standards for conduct, objectivity, confidentiality, conflicts of interest, and the overall quality of work. Together, these two requirements protect the public by ensuring both competence through ongoing education and integrity through a clear ethical framework. The other options mix items that aren’t the formal requirements for all AI members. For example, USPAP and its Certification Standard are critical professional standards in appraisal practice but aren’t described here as the two core AI-wide obligations; internal by-laws govern governance rather than professional conduct; and terms like CSR 1-2 don’t represent the stated two commitments.

CPE and SPP requirements are designed to keep everyone involved in AI on a continuous, consistent professional footing. Continuing professional education ensures professionals keep their knowledge up to date, while standards of professional practice set the expected ways of conducting work and making decisions. Since AI work involves a wide range of roles—developers, implementers, evaluators, vendors, researchers, and others—the rules are intended to cover all AI-related categories. This broad scope guarantees that anyone contributing to AI is held to the same level of competence and ethical practice, not just a subset of the ecosystem. The other options imply restricting compliance to only certain groups, but the aim of these requirements is to apply across the entire AI field.

IVS applicability is driven by the terms of the engagement with the client. If the client agrees that the valuation work will be performed in accordance with IVS, then the appraiser is obliged to follow IVS. Merely practicing in the United States, holding a membership, or having a designation does not automatically impose IVS; those factors don’t create the standard under which the assignment must be performed. The contract or engagement letter that specifies IVS as the applicable standard is what triggers compliance.