An organization uses an AI-based chatbot that collects customer data during interactions. Which of the following is MOST important to ensure compliance with data consent requirements?
Answer(s): D
Embedding a consent mechanism that provides clear options before data collection begins is most important. It ensures compliance with privacy regulations by securing informed consent from customers prior to processing their data.
A large organization is implementing a new AI system that uses customer data. Which of the following is the BEST approach for risk mitigation to protect customer privacy?
Answer(s): C
Implementing data anonymization and impact assessments is the best approach to mitigate risks to customer privacy. Anonymization protects sensitive information, while impact assessments ensure compliance and help identify potential privacy risks before deployment.
An IS auditor learns that the organization’s AI solution is configured with web integration enabled. Which of the following is the MOST important control for the auditor to validate?
Validating activity logging with integration to the organization’s SIEM system is most important when AI solutions have web integration enabled. This ensures monitoring of data flows and potential security incidents, reducing risks of unauthorized access or malicious activity.
Which of the following is the GREATEST risk resulting from excessive agency in AI systems?
Answer(s): B
The greatest risk from excessive agency in AI systems is uncontrolled access and unauthorized actions. When AI operates with too much autonomy, it can make unmonitored decisions that compromise security, compliance, and organizational control.
During an audit of an organization that has adopted AI, it was discovered that data ownership responsibilities were not clearly defined. Which of the following is the MOST likely consequence of this gap?
The most likely consequence of unclear data ownership is an increased risk of data breaches due to lack of accountability. Without defined ownership, responsibilities for protecting, monitoring, and governing data are unclear, weakening security and compliance.
Post your Comments and Discuss ISACA AAIA exam prep with other Community members: