When auditing AI systems, which data management practice BEST ensures compliance with privacy regulations?
Answer(s): B
Data minimization ensures only necessary data is collected and processed, reducing exposure of personal information and aligning with privacy regulations and compliance requirements.
Which of the following should be done FIRST when an AI chatbot has been identified as giving harmful advice?
Answer(s): D
When harmful advice is already being generated, the immediate priority is to prevent further harmful outputs. Content output filters directly control and block unsafe responses in real time, reducing immediate risk to users.
An IS auditor is evaluating a large language model (LLM) before deployment. Which of the following is the MOST secure way to manage agency for the model?
Answer(s): C
Security-critical controls such as authorization and privilege enforcement should not rely on the LLM itself, as models can be manipulated or behave unpredictably. Independent enforcement ensures robust and reliable access control.
A financial institution's customer service chatbot sometimes gives users incorrect legal advice, leading to several customer complaints and potential regulatory exposure. Which of the following should be done FIRST to mitigate this risk?
Introducing human oversight immediately reduces the risk of harmful or noncompliant advice by ensuring responses are reviewed before reaching users, providing a rapid control while longer-term improvements are developed.
Which of the following would be the BEST recommendation for an organization that has adopted vibe coding?
Introducing a structured security checklist ensures consistent and systematic review of AI-generated code, helping identify vulnerabilities and enforce secure coding practices.
Post your Comments and Discuss ISACA AAIA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AAIA content, but please register or login to continue.