AB-731 · Topic group 3 of 3 · 20–25%
Implementation and Adoption Strategy
The smallest domain by weight and the one that decides whether any of the rest mattered. Most AI projects that fail do not fail technically. They work, and nobody uses them. This domain is about governance that has teeth and adoption that actually happens.
The six responsible AI standards
Microsoft's framework has six principles, and the exam expects you to recognize which one a scenario is really about.
- Fairness: the system treats comparable people comparably. Watch for disparate impact hidden inside acceptable aggregate accuracy.
- Reliability and safety: it behaves predictably, including on input nobody anticipated, and fails safely.
- Privacy and security: data is protected in line with obligations and expectations.
- Inclusiveness: it works for the full range of people who will meet it, including those using assistive technology.
- Transparency: people can tell they are dealing with an AI system, and understand roughly how it reached its output.
- Accountability: a named human remains answerable. The system is never the responsible party.
The point that turns this from a values statement into an operational requirement: each one implies a design decision or a measurement. Fairness implies measuring by segment. Transparency implies disclosure in the interface. Accountability implies a named owner in a document somewhere. A principle with no corresponding artifact has not been implemented.
Governance and the AI council
Governance answers four questions, and if your organization cannot answer them it does not have governance regardless of what the policy document says:
- Who may use which AI capability?
- On what data may they use it?
- What requires review before it goes out, and who reviews it?
- Who is accountable when it goes wrong?
The AI council is the cross-functional group that decides those things. Membership matters more than terms of reference: business owners who understand the processes, IT and security who understand the surface, legal and compliance who understand the obligations, and someone senior enough to make a decision stick. A council that can only recommend will produce documents, not decisions.
Anticipate the effects of rollout across four dimensions, because these are what the council will actually spend its time on:
- Data: what becomes visible that previously was not. This is the oversharing problem, and it is the one that bites first.
- Security: new surface, including prompt injection through content the system reads.
- Privacy: what is retained, where it lives, and what obligations follow.
- Cost: consumption that scales with usage rather than sitting flat like a license.
Adoption: the part that decides success
Microsoft gives adoption strategy roughly a fifth of the exam, which is a fair reflection of where projects actually fail.
The adoption team needs authority and allocated time. A team assembled from people doing this alongside their real jobs produces a launch email and nothing else.
The barriers are predictable, which is what makes them plannable:
- Trust: people don't believe the output, so they check it manually, so the system has added a step rather than removed one.
- Habit: the existing way works well enough, and switching costs are paid by the individual while benefits accrue to the organization.
- Unclear value: nobody has shown this person what it does for their Tuesday.
- Skill: as covered in Domain 1, prompt quality drives output quality, and nobody was trained.
- Data hygiene: poor content quality produces poor answers, which destroys trust, which returns you to the first barrier.
A champions program works because it addresses trust and habit at the same time. People adopt tools their respected colleague uses, in the form that colleague uses them, far more readily than tools that arrive by email from head office. Champions also give you an early warning system: they will tell you what is actually going wrong long before it reaches a survey.
The measurement trap worth naming: licenses assigned is not adoption, and weekly active users is barely better. The number that matters is whether the work got faster or better, which means you needed a baseline before you started.
Licensing and cost models
Two different commercial shapes, and confusing them produces bad forecasts.
Copilot is licensed per user. Microsoft 365 Copilot is a paid add-on to an existing Microsoft 365 subscription. Copilot Chat is available without that add-on. There are also consumption-based arrangements for some agent scenarios, and pay-as-you-go options alongside the subscription route.
The budgeting consequence: per-user licensing is predictable but front-loaded. You pay whether or not the person uses it, which makes assignment discipline a real cost lever, reclaiming licenses from non-users is usually the fastest saving available.
Foundry is consumption-based, with commitment tiers available for committed volume at a lower unit rate. The shape is inverted: you pay for what you use, so cost scales with success. A pilot costs almost nothing and a full rollout can cost a great deal, and that curve surprises people who budgeted from the pilot.
For a manager the practical distinction is:
- Per-user licensing: forecast from headcount. The risk is paying for unused seats.
- Consumption: forecast from transaction volume. The risk is a bill that grows faster than the benefit, which is why cost per unit of work is the number to track rather than total spend.
Written against the documentation pages below, checked 2026-07-25. Anthropic publishes that its exam guides may change without notice, and the platform itself moves faster than that, so verify anything version-specific before you sit.