Which of the following is MOST important to ensure accountability when an organization develops and maintains AI models?
Answer(s): D
Assigning clear ownership for model development establishes accountability, responsibility, and decision authority, ensuring that risks, controls, compliance obligations, and outcomes are owned by defined roles rather than diffused across teams or systems, which is essential for effective AI governance.
An organization completed an initial risk assessment prior to deployment of an AI system. Since them updates have been made to the AI model and its data inputs.Which of the following is MOST important for an IS auditor to verify?
Continuous monitoring and model change controls ensure that evolving risks from model updates and data input changes are identified, assessed, and managed over time, maintaining risk posture validity beyond the initial risk assessment and preserving governance effectiveness throughout the AI lifecycle.
A school uses an AI detection tool to identify AI-generated content in student assignments. During an audit, the IS auditor notes concerns about the tool’s accuracy, with some original student work being incorrectly flagged as AI-generated.Which of the following should the auditor recommend to BEST address this issue?
Answer(s): B
Training teachers to interpret AI detection results cautiously introduces human judgment and governance oversight into decision-making, reducing the risk of wrongful accusations and ensuring that AI outputs are treated as decision-support rather than deterministic evidence.
Which of the following is MOST important to verify when assessing the incident response program’s capability to manage AI-related breaches?
AI anomaly detection combined with transparent breach reporting ensures that incidents are promptly identified, communicated, and traceable, enabling timely, effective, and accountable response actions while maintaining operational and regulatory oversight.
An IS auditor is reviewing an organization’s acceptable use policy for its internal AI system.Which of the following is MOST important for the auditor to confirm?
Ensuring the acceptable use policy aligns with AI strategic and risk management objectives confirms that employee behavior, system usage, and operational practices support organizational goals while maintaining compliance, ethical standards, and risk mitigation across the AI lifecycle.
Post your Comments and Discuss ISACA AAIA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AAIA content, but please register or login to continue.