Which of the following provides the BEST evidence that an organization's AI integration is aligned with its overall technology strategy?
Answer(s): A
Defined KPIs for AI systems provide direct, measurable evidence that AI initiatives support and align with the organization’s broader technology strategy by linking AI performance to strategic objectives.
An organization has deployed an AI-powered customer service chatbot trained using customer chat logs. When reviewing AI risk assessment documentation, which of the following should be the IS auditor's GREATEST concern?
Answer(s): D
Insufficient access controls create the highest risk because they can lead to unauthorized exposure of customer chat logs, which contain sensitive personal data. This represents a major privacy, compliance, and security threat that outweighs performance or reputational concerns.
Which of the following is the GREATEST risk associated with deploying an AI system with ineffective anomaly detection?
Answer(s): B
Ineffective anomaly detection can allow data poisoning to go unnoticed, corrupting training or operational data and directly degrading the quality and integrity of AI decisions. This poses the greatest governance and risk impact because it compromises the fundamental reliability of the AI system.
An IS auditor is considering using a web-based AI tool to update an audit report. What should be the MOST important consideration before inputting the report?
Before entering audit report content — which may include sensitive, confidential, or regulated information — into a web-based AI tool, the auditor must ensure compliance with organizational data protection requirements. This is essential to avoid unauthorized disclosure or improper handling of sensitive audit data.
When an IS auditor uses generative AI with external retrieval-augmented generation (RAG) to gather evidence during an audit, which of the following poses the GREATEST data security risk?
Sending queries containing sensitive internal context to an external RAG service creates a significant risk of exposing confidential information outside the organization, making it the greatest data security concern.
Post your Comments and Discuss ISACA AAIA exam prep with other Community members: