A CISO has been tasked with providing key performance indicators (KPIs) on the organization's newly launched AI chatbot. Which of the following are the BEST metrics for the CISO to recommend?
Answer(s): B
Error rate and bias detection directly measure the security, reliability, and risk posture of the AI chatbot, which are the most relevant concerns for a CISO when monitoring AI system performance and potential exposure.
A global organization has experienced multiple incidents of staff copying confidential data into public chatbots and acting on the model outputs. Which of the following is MOST important to reduce short-term risk when launching an AI security awareness initiative?
Answer(s): A
Role-based and scenario-driven AI security training mapped to policy and job functions most effectively reduces short-term risk by directly addressing unsafe behaviors, reinforcing correct usage in real contexts, and enabling staff to immediately apply secure practices when interacting with AI tools.
A large financial services organization is integrating a third-party AI solution into its critical fraud detection system. Which of the following is the BEST way for the organization to reduce risk associated with AI vendor and supply chain dependencies?
Contractual requirements for evidence of secure development practices directly address vendor and supply chain risk by ensuring security controls, assurance mechanisms, and accountability are embedded throughout the AI solution’s lifecycle before and after integration.
Which of the following actions BEST enables the evaluation of bias during an AI impact assessment?
Evaluating whether the training data represents all relevant end-user groups directly enables the identification of potential bias, as biased or underrepresented data is a primary source of unfair or discriminatory AI outcomes during impact assessments.
Which of the following reviews MUST be conducted as part of an AI impact assessment?
An AI impact assessment must include identification of environmental and societal consequences to evaluate potential harm, ethical implications, and broader impacts of AI use on individuals, communities, and society before deployment.
Post your Comments and Discuss ISACA AAISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AAISM content, but please register or login to continue.