Which risk associated with AI systems is MOST important for an IS auditor to consider?
Answer(s): A
Data privacy breaches are a major AI-specific risk because AI systems often process large volumes of sensitive or personal information throughout training, operation, and inference. Unauthorized exposure or misuse of this data can create significant regulatory, legal, reputational, and financial consequences.
Which of the following is the GREATEST risk associated with poor authorization controls for retraining or fine-tuning of AI models?
Answer(s): C
Poor authorization controls can allow unauthorized or inappropriate retraining and fine-tuning changes that alter model behavior, parameters, or data inputs. This directly threatens the integrity and security of the AI model and can undermine the reliability of its outputs.
The BEST way to prevent accidental data leakage by employees into public AI systems is through:
Answer(s): D
An acceptable use policy establishes clear rules for how employees may use public AI systems, including restrictions on entering confidential, sensitive, or proprietary information. This directly addresses accidental disclosure risk by defining permitted behavior and employee responsibilities.
An audit department is considering upgrading their on-premise audit software to an AI-enabled cloud version hosted by the vendor.Which of the following poses the GREATEST risk in this situation?
Unknown cloud server locations create significant data residency, privacy, legal, and regulatory risks because audit data may be stored or processed in jurisdictions with different protection requirements. Knowing where the vendor hosts the data is essential for evaluating compliance obligations and third-party risk.
A company uses an AI solution to screen job applicants.Which of the following is the BEST way for the organization to support the AI solution?
Providing sufficient transparency about the main factors driving an AI-assisted hiring decision supports explainability, accountability, and stakeholder trust. Users do not need full technical access to every model parameter, but they should be able to understand the key reasons behind the decision.
Post your Comments and Discuss ISACA AAIA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AAIA content, but please register or login to continue.