An organization plans to procure an AI model from a third-party supplier for a critical business function. Which of the following is MOST important to evaluate during supplier vetting?
Answer(s): A
AI model procurement for critical business functions requires that the selected model be fit for purpose. An AI model that does not align with the specific use case creates performance, compliance, and risk management failures regardless of its technical sophistication.Why A is Correct: ISACA AAIR procurement guidance emphasizes use case alignment as the primary vetting criterion. A model optimized for one domain may perform poorly, introduce bias, or generate inaccurate outputs in a different context. For critical business functions, misalignment directly translates to operational risk, decision errors, and potential harm. Use case fit determines whether all other evaluation criteria are even relevant.Why B is Wrong: Dataset size is a technical characteristic that may indicate breadth of training but does not determine suitability for a specific use case. A large general-purpose dataset may be less relevant than a smaller, domain-specific one.Why C is Wrong: Industry certifications validate security controls and quality management processes. While useful supplementary evidence, they do not confirm that a model performs appropriately for the organization's specific application.Why D is Wrong: Emphasis on innovation reflects vendor marketing positioning. For critical business functions, proven suitability and alignment with use cases outweighs novelty or innovation claims.
Which of the following is the BEST way to integrate AI risk management into operational procedures?
Answer(s): C
Embedding AI risk management into operations requires that risk assessment activities be integrated throughout the AI development and deployment life cycle, not applied only at discrete checkpoints. This life cycle integration ensures risks are identified and addressed at the stages where they can be most effectively mitigated.Why C is Correct: The ISACA AAIR curriculum identifies life cycle-integrated risk assessment as the most effective operational integration approach. By introducing risk assessment stages throughout development and deployment—at design, data collection, model training, testing, and deployment—organizations catch risks before they are built into the system. This proactive approach is far more effective than retrospective assessment.Why A is Wrong: Organization-wide training increases risk awareness but represents an enabler rather than an operational integration mechanism. Training alone does not embed risk practices into workflows.Why B is Wrong: Third-party audits provide periodic independent assurance but occur infrequently and reactively. They cannot substitute for continuous, integrated risk assessment throughout operations.Why D is Wrong: Requiring risk committee approval for automation changes creates a governance checkpoint at one decision point. This is narrower than integrating risk assessment across all development and deployment stages and may create bottlenecks without proportionate risk management benefit.
Which of the following BEST helps to ensure adherence to data minimization principles when using an AI model whose training dataset contains personal information?
Answer(s): D
Data minimization is a privacy principle requiring that personal data be processed only to the extent necessary for the specified purpose. When training AI models, this means reducing the identifiability of personal data while preserving its statistical utility for model training.Why D is Correct: According to ISACA AAIR data privacy guidance, pseudonymization directly supports data minimization by replacing identifying attributes with artificial identifiers, allowing the model to train on statistically representative data without processing full personal identifiers. This satisfies minimization requirements under frameworks like GDPR while maintaining training data utility—the specific challenge of AI model development with personal data.Why A is Wrong: Data Loss Prevention prevents unauthorized transmission of data but does not reduce the amount of personal information contained in training datasets. DLP addresses data exfiltration risk, not data minimization compliance.Why B is Wrong: Role-based access control restricts who can access the training data but does not reduce the volume or identifiability of personal information in the dataset. RBAC addresses access risk, not data minimization.Why C is Wrong: Data encryption protects data confidentiality in storage and transit but does not remove or obfuscate personal identifiers from training data. Encrypted personal data is still personal data under privacy law.
Which of the following is the GREATEST risk when an organization lacks clearly defined accountability mechanisms for AI outputs and decisions?
AI systems make decisions that can affect individuals, organizations, and society. When no individual or function is clearly accountable for those decisions, the organization cannot demonstrate due diligence, remedy harms, or mount a coherent legal defense when challenged.Why D is Correct: The ISACA AAIR framework identifies legal liability as the greatest organizational risk from absent accountability mechanisms. When AI outputs cause harm—discriminatory lending decisions, unsafe autonomous vehicle actions, inaccurate medical diagnoses—the absence of documented accountability makes it impossible to demonstrate responsible governance to courts, regulators, and affected parties. This creates maximum legal exposure across contract, tort, and regulatory law.Why A is Wrong: Intellectual property exposure is a significant risk in AI contexts (particularly around training data and model weights) but is not primarily caused by absent accountability mechanisms. IP risk arises from access controls and contractual protections.Why B is Wrong: Ineffective model training is a technical quality issue. While accountability for model development may influence training quality, ineffective training is not the primary risk from absent accountability for outputs and decisions.Why C is Wrong: Reduced availability is an operational resilience concern. Accountability gaps do not directly cause availability failures, which are driven by architectural and operational factors.
Which of the following is the PRIMARY benefit of tailoring AI governance to an organization's culture and risk tolerance?
Answer(s): B
AI governance frameworks that are disconnected from organizational culture and risk tolerance face adoption resistance and produce policies that are either too restrictive or too permissive. Tailored governance is more likely to be embraced by stakeholders and produce risk policies calibrated to the organization's actual risk appetite.Why B is Correct: The ISACA AAIR Study Guide emphasizes that governance tailored to culture and risk tolerance produces two primary benefits: stakeholders are more likely to accept and follow governance policies that reflect their own values and operational realities, and the resulting policies are appropriately calibrated to actual risk appetite rather than generic standards. Together, these produce more effective, sustainable governance.Why A is Wrong: Model explainability is a technical property of individual AI systems, not a governance tailoring outcome. Regulatory compliance may improve with tailored governance but is a compliance benefit, not the primary benefit of cultural alignment.Why C is Wrong: Automation of risk assessment and accountability clarity are process improvements that may result from better governance design but are not the primary benefit of cultural and risk tolerance alignment.Why D is Wrong: Training programs and reskilling are workforce development activities. While governance reform may highlight training needs, skills development is an enabling activity rather than the primary benefit of culturally tailored governance.
Which of the following poses the GREATEST challenge related to the protection of intellectual property generated by AI solutions?
Traditional intellectual property law was designed for human-created works. AI-generated content sits in a legal grey zone because current copyright frameworks in most jurisdictions do not clearly establish who—if anyone—holds copyright in outputs created autonomously by AI systems.Why C is Correct: According to ISACA AAIR, the lack of regulatory clarity around AI-generated content copyright is the greatest IP challenge because it creates fundamental uncertainty about ownership, transferability, and enforceability of rights in AI outputs. Without clear legal status, organizations cannot confidently assert ownership, license AI-generated materials, or prevent competitors from copying outputs. This uncertainty pervades commercial agreements, licensing strategies, and competitive protection.Why A is Wrong: Zero-data retention policies actually protect intellectual property by ensuring vendor systems do not retain proprietary input data. This represents a protective measure, not a challenge.Why B is Wrong: Training material customization for confidential data handling is a workforce education challenge. While important for data protection, it does not represent the primary IP challenge from AI-generated content.Why D is Wrong: Low-risk use cases like administrative tasks present minimal IP concerns because the outputs are typically not commercially significant or protectable. The IP challenge is greatest for creative, analytical, and proprietary outputs.
Which of the following is the PRIMARY benefit of incorporating new AI-specific controls?
AI systems introduce new categories of risk—model drift, adversarial attacks, algorithmic bias, hallucination—that conventional IT controls were not designed to address. AI-specific controls must complement existing controls to create comprehensive coverage across both traditional and emerging risk domains.Why C is Correct: The ISACA AAIR curriculum identifies the holistic, comprehensive coverage of both conventional governance exposures and emerging AI vulnerabilities as the primary benefit of AI-specific controls. By designing controls that address AI-unique risks while integrating with existing governance structures, organizations achieve end-to-end risk management without creating coverage gaps between the old and new control environments.Why A is Wrong: Compliance reporting prioritization is a governance administration activity. While AI-specific controls may clarify compliance requirements, identifying and prioritizing reporting requirements is not the primary purpose of implementing new controls.Why B is Wrong: Cost reduction through control consolidation is an efficiency benefit that may result from control rationalization but is not the primary benefit of incorporating AI-specific controls. Adding necessary controls may actually increase costs in the short term.Why D is Wrong: Accelerating deployment through efficient pre-deployment analysis is an operational efficiency benefit. The primary governance purpose of AI-specific controls is comprehensive risk coverage, not deployment speed.
An organization embeds AI into existing processes without integrating AI risk practices into enterprise governance. Which of the following should a risk practitioner regard as the GREATEST organizational risk?
When AI is deployed without governance integration, no formal structure exists to assign control ownership, coordinate risk management activities, or align AI decision-making with organizational objectives. This structural void produces divergent, fragmented, and potentially conflicting risk management efforts.Why C is Correct: According to ISACA AAIR, unclear ownership is the greatest organizational risk from AI operating outside governance structures. Without designated owners, controls may be applied inconsistently across business units, different teams may implement conflicting approaches, and no one is responsible for ensuring AI activities align with enterprise objectives. This governance vacuum creates unmanaged risks and organizational incoherence.Why A is Wrong: Regulatory compliance documentation gaps are significant but are a downstream symptom of poor governance rather than the root organizational risk. Documentation failures can be remediated more easily than fundamental ownership gaps.Why B is Wrong: Technical-business alignment is an important concern but represents a strategic planning challenge rather than the greatest organizational risk from absent governance. Alignment can be achieved through business case processes without full governance integration.Why D is Wrong: Executive approval difficulty is an organizational change management challenge. It reflects organizational politics rather than a structural risk from absent governance. Approval processes function independently of AI governance integration.
Post your Comments and Discuss ISACA AAIR exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AAIR content, but please register or login to continue.