Which of the following would be of GREATEST concern regarding an organization's AI program governance?
Answer(s): C
Performing risk assessments after approving AI use cases means risks are not identified and addressed before deployment decisions are made. This undermines governance by allowing potentially high-risk or noncompliant AI initiatives to proceed without proper evaluation.
When initiating an AI governance program, which of the following is MOST critical to ensure the AI system aligns with organizational objectives and stakeholder needs?
Answer(s): A
Clearly identifying the specific processes and use cases ensures the AI system is directly aligned with business objectives and stakeholder needs from the outset, forming the foundation for effective governance and value delivery.
An organization plans to implement an AI search and chatbot solution provided by an external vendor. Which of the following is MOST important for an IS auditor to confirm?
Independent third-party attestation provides assurance that the vendor’s AI solution meets recognized security, privacy, and control standards, which is critical when relying on an external provider for AI capabilities.
An IS auditor has discovered that an organization's AI system is less accurate than the required threshold and recommends management implement cross-referencing multiple models in order to produce more accurate results. This is an example of which type of risk response?
Implementing cross-referencing across multiple models reduces the likelihood and impact of inaccurate results by improving overall output reliability, which is characteristic of a mitigation strategy.
A bank is deploying an AI model trained on customer transactions in a multi-cloud environment. Which of the following BEST supports regulatory compliance regarding data security and privacy?
In a multi-cloud environment, ensuring that data is stored, processed, and transferred in accordance with jurisdictional requirements is critical. Data residency and sovereignty controls directly address regulatory obligations related to data location, security, and privacy.
Post your Comments and Discuss ISACA AAIA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AAIA content, but please register or login to continue.