The ISACA AAIR Questions & Practice Test are Available On-Demand
Valid AAIR Exam Dumps Ensure you a HIGH SCORE
NEW QUESTION # 25
A risk practitioner learns that a credit-scoring AI system is exhibiting bias that cannot be eliminated through further training. Which of the following is the risk practitioner's BEST recommendation?
- A. Take the system out of production to avoid harm and potential legal liability.
- B. Apply compensating controls that generate offsetting biases in the opposite direction.
- C. Request a risk acceptance from senior management.
- D. Source vendors for a new credit-scoring AI solution.
Answer: A
Explanation:
Credit scoring AI systems are subject to anti-discrimination regulations that prohibit using models that produce biased outcomes affecting protected classes. When bias cannot be eliminated through technical means, continuing to operate the system creates ongoing legal violations and harm to affected individuals.
Why B is Correct: According to ISACA AAIR risk treatment guidance and legal compliance obligations, removing a biased credit-scoring system from production is the appropriate response when bias cannot be technically remediated. Continuing to operate a system known to produce discriminatory credit decisions violates anti-discrimination laws (such as the Equal Credit Opportunity Act), exposes the organization to regulatory enforcement, and causes ongoing harm to affected borrowers. Risk avoidance through system withdrawal is the appropriate treatment when the risk cannot be adequately mitigated.
Why A is Wrong: Requesting senior management risk acceptance for confirmed legal violations is inappropriate because organizations cannot accept risks involving known regulatory breaches. Senior management cannot legitimately authorize continued discriminatory lending practices.
Why C is Wrong: Sourcing a replacement system is a necessary future action but takes time to procure, validate, and deploy. In the interim, the biased system should not continue operating. Removing the system from production should precede replacement planning.
Why D is Wrong: Applying compensating controls to generate offsetting biases compounds the discriminatory problem rather than resolving it. Deliberately introducing additional bias-even in the opposite direction-creates an unpredictably biased model that does not produce fair outcomes.
NEW QUESTION # 26
An organization has deployed an AI-powered customer service chatbot. Which of the following BEST helps to ensure the chatbot maintains high accuracy in interpreting and answering customer inquiries?
- A. Calculating precision and recall scores and increasing model temperature
- B. Measuring intent-classification error rates and refining training datasets
- C. Introducing explainable AI techniques and conducting periodic code reviews
- D. Adopting vendor-recommended thresholds and conducting benchmarking
Answer: B
Explanation:
Chatbot accuracy in customer service depends on correctly identifying customer intent and generating appropriate responses. Both intent classification accuracy and training data quality directly determine chatbot performance over time.
Why D is Correct: According to ISACA AAIR model performance management guidance, measuring intent- classification error rates provides precise diagnostic information about where the chatbot misunderstands customer inquiries, while refining training datasets based on those errors continuously improves classification accuracy. This closed-loop approach-measure specific errors, improve the underlying data that drives them- is the most effective mechanism for sustained high accuracy.
Why A is Wrong: Increasing model temperature increases output randomness and diversity, which is counterproductive for accuracy in customer service contexts where consistent, precise answers are required.
Precision and recall provide useful metrics but increased temperature actively undermines accuracy.
Why B is Wrong: Vendor benchmarking compares performance against generic standards. Customer service chatbots must be optimized for the specific organization's terminology, products, and customer base-generic thresholds may not capture the accuracy requirements of a specific deployment.
Why C is Wrong: Explainable AI techniques improve decision transparency but do not directly enhance classification accuracy. Code reviews address software quality, not the model's ability to accurately interpret customer intent.
NEW QUESTION # 27
Risk practitioners use automated tools to generate potential AI risk scenarios. Which of the following represents the GREATEST risk from that approach?
- A. Emerging adversarial attack vectors may be overlooked.
- B. Likelihood and impact scoring may be more complex.
- C. Impacts from model changes may be underestimated.
- D. Scenarios may not account for all process interdependencies.
Answer: D
Explanation:
Automated risk scenario generation tools operate based on programmed logic, historical data, and pattern recognition. They may excel at generating scenarios based on known risks and documented processes but struggle to account for complex organizational interdependencies that are not fully captured in their data inputs.
Why D is Correct: The ISACA AAIR risk scenario development guidance identifies the failure to account for process interdependencies as the greatest risk from automated scenario generation. AI systems do not operate in isolation-they are embedded in complex organizational ecosystems where failures cascade through interconnected processes, systems, and stakeholders. Automated tools may miss these interdependencies, producing scenarios that are technically accurate in isolation but miss the most consequential cascade effects.
Why A is Wrong: Complexity in likelihood and impact scoring is a risk quantification challenge that affects scenario prioritization but does not result in missing scenarios entirely. Complex scoring can be managed through additional analytical methods.
Why B is Wrong: Emerging adversarial attack vectors are a potential blind spot for any tool or analyst working from historical data, but this is a known limitation of retrospective approaches that can be supplemented with threat intelligence. It does not represent the distinctive risk of automated scenario generation.
Why C is Wrong: Underestimating model change impacts is a scenario calibration issue that represents a less severe risk than missing entire categories of scenarios arising from unmodeled interdependencies.
NEW QUESTION # 28
Which of the following is MOST important to evaluate when selecting a vendor for a third-party large language model (LLM)?
- A. Whether the vendor's service level agreements (SLAs) align with corporate strategy
- B. How the vendor selects machine learning (ML) methods
- C. How the vendor handles data during model training and inference
- D. Whether the vendor offers subscription-based service options
Answer: C
Explanation:
Third-party LLMs process organizational data-including sensitive and proprietary information-during both training and inference. The vendor's data handling practices determine whether the organization's data remains private, secure, and compliant with legal obligations.
Why D is Correct: According to ISACA AAIR third-party risk guidance, data handling practices are the most critical evaluation criterion for AI vendors. How the vendor uses input data-whether for model training, analytics, or retention-directly determines data privacy risk, intellectual property exposure, and regulatory compliance. Vendors who train on customer input data without restriction create significant privacy and confidentiality risks.
Why A is Wrong: SLA alignment with corporate strategy addresses availability and performance obligations.
While important, these commercial terms do not address the fundamental data risk created by vendor data handling practices.
Why B is Wrong: ML method selection reflects technical sophistication but does not determine data risk. The risk profile is driven by data governance, not algorithmic choice.
Why C is Wrong: Subscription models represent commercial and procurement considerations. Pricing structure has no bearing on data privacy risk or the organization's risk exposure from vendor data practices.
NEW QUESTION # 29
Which AI security by design option BEST mitigates targeted model poisoning and supply chain tampering?
- A. Adversarial resilience and data integrity controls
- B. Frequent data refreshes with checksums
- C. Use data tokenization for sensitive fields
- D. Frequent model retraining and bias monitoring
Answer: A
Explanation:
Model poisoning attacks target the training data or model parameters to degrade performance or introduce malicious behavior. Supply chain tampering introduces compromised components at vendor or integration stages. Security by design principles require embedding defenses against these threats from the earliest design stages.
Why C is Correct: According to ISACA AAIR security by design guidance, adversarial resilience and data integrity controls address both model poisoning and supply chain tampering at their root. Adversarial resilience training prepares the model to resist maliciously crafted inputs. Data integrity controls- cryptographic signing, provenance tracking, integrity verification-detect tampering in training data and model artifacts across the supply chain. Together, these form the most comprehensive defense against both attack categories.
Why A is Wrong: Data refreshes with checksums detect post-hoc data corruption but do not build adversarial resilience into the model itself. Checksums verify file integrity but cannot prevent poisoning attacks that maintain file integrity while altering data content.
Why B is Wrong: Frequent retraining and bias monitoring address performance drift and fairness but do not specifically protect against deliberate tampering. A retrained model may still be trained on poisoned data if integrity controls are absent.
Why D is Wrong: Data tokenization protects sensitive field values from unauthorized access (a privacy control) but does not address model poisoning or supply chain tampering, which can occur without accessing or exposing the sensitive field values themselves.
NEW QUESTION # 30
Which of the following BEST helps to ensure AI model outputs can be reproduced in other environments?
- A. Implementing AI-specific change management processes
- B. Maintaining continuous post-deployment performance monitoring
- C. Capturing and archiving complete snapshots of training datasets
- D. Requiring manual review of outputs for stability and accuracy
Answer: C
Explanation:
AI model reproducibility-the ability to recreate identical or near-identical outputs in different environments-depends on having access to the exact training data, model weights, and configurations used to produce a given model version. Training dataset snapshots are foundational to this capability.
Why B is Correct: The ISACA AAIR model documentation and auditability guidance identifies capturing and archiving complete training dataset snapshots as essential for reproducibility. To reproduce a model's outputs in another environment, the development team must be able to reconstruct the exact training conditions- including the precise dataset used. Without archived snapshots, datasets evolve and the original training conditions become impossible to recreate.
Why A is Wrong: Manual review of outputs validates accuracy for a specific deployment but does not address reproducibility across environments. Manual review cannot substitute for the technical artifacts needed to recreate a model.
Why C is Wrong: Continuous performance monitoring detects behavioral changes in production but does not enable reproduction of the model in alternative environments. Monitoring is forward-looking, while reproducibility is about reconstructing past conditions.
Why D is Wrong: AI-specific change management processes control how models are modified and deployed but do not capture the training artifacts needed for environmental reproduction. Change management governs transitions; reproducibility requires data preservation.
NEW QUESTION # 31
A manufacturing organization has implemented an autonomous navigation system for warehouse operations.
Which of the following should a risk practitioner regard as the MOST significant concern?
- A. The organization uses outside contractors to address the lack of in-house AI knowledge.
- B. The system is unable to learn from complex situations not encountered during training.
- C. The system is used to accelerate just-in-time warehouse processes.
- D. The deep neural network used by the system contains datasets with proprietary information.
Answer: B
Explanation:
Autonomous navigation systems in physical environments like warehouses operate in complex, dynamic spaces where unexpected situations arise regularly. Systems trained on limited scenarios may behave unpredictably-or dangerously-when confronted with conditions outside their training distribution.
Why A is Correct: The ISACA AAIR guidance on autonomous systems identifies the inability to generalize beyond training scenarios as the most significant concern because it creates direct physical safety risks. In a warehouse, an autonomous system that cannot adapt to novel situations-unexpected obstacles, unusual layouts, human workers in unexpected locations-may collide with equipment or personnel, causing injury or property damage. This operational safety risk is the highest priority concern.
Why B is Wrong: Proprietary datasets in the neural network represent an intellectual property and data privacy concern. While relevant, it is a data governance issue that does not create the same magnitude of physical safety risk.
Why C is Wrong: Using AI to accelerate just-in-time processes is an intended operational use. Process acceleration is the value proposition, not a risk concern. The risk lies in how reliably and safely that acceleration is achieved.
Why D is Wrong: Reliance on outside contractors reflects a workforce capability gap but represents a manageable governance risk through appropriate vendor oversight. It does not create the direct physical safety exposure of a system that cannot handle novel situations.
NEW QUESTION # 32
Which of the following is the MOST important consideration when determining mitigation controls for an AI system?
- A. Prioritizing controls based on the complexity and computational requirements of the AI system
- B. Providing comprehensive AI risk awareness training to security and technical personnel
- C. Determining control performance baselines and reporting requirements for regulatory compliance
- D. Evaluating control effectiveness and costs against potential business losses from unmitigated AI risk
Answer: D
Explanation:
Control selection for AI systems requires balancing the effectiveness and cost of proposed controls against the potential losses or harms the controls are designed to prevent. This cost-benefit analysis ensures resources are allocated proportionately to risk reduction value.
Why C is Correct: The ISACA AAIR control selection guidance identifies the cost-benefit analysis of control effectiveness versus potential business losses as the most important mitigation control determination factor.
Implementing controls that cost more than the risk they mitigate represents inefficient risk management; failing to implement cost-effective controls that prevent large losses represents inadequate risk management.
This proportionality assessment is the foundation of risk-based control selection.
Why A is Wrong: Risk awareness training is an important enabler of effective risk management but is an organizational capability development activity rather than a control selection criterion. Training supports controls but does not determine which controls to implement.
Why B is Wrong: Control performance baselines and compliance reporting requirements are governance and compliance management activities. While necessary for control monitoring, they describe how controls are measured after selection, not how controls are selected in the first place.
Why D is Wrong: Computational complexity is a technical characteristic of the AI system that influences implementation considerations but is not the primary driver of control selection. The most computationally complex system still requires controls proportionate to its risk profile, not its technical architecture.
NEW QUESTION # 33
An organization is designing an enterprise dashboard to support governance of its AI program. Which of the following is the risk practitioner's BEST recommendation?
- A. Designate AI system uptime, availability, and infrastructure health metrics as primary performance indicators.
- B. Develop AI-specific risk heat maps based on the degree of variance from predicted model training outcomes.
- C. Aggregate diverse metrics from all AI life cycle stages to deliver a unified and actionable enterprise view.
- D. Assign dashboard responsibility to the IT function and require the inclusion of AI system availability metrics.
Answer: C
Explanation:
An enterprise AI governance dashboard must provide decision-makers with a comprehensive, integrated view of AI program health across all dimensions-risk, performance, compliance, ethics, and operations.
Fragmenting this view or focusing on narrow metrics produces an incomplete governance picture.
Why B is Correct: The ISACA AAIR governance reporting guidance recommends aggregating diverse metrics from all AI life cycle stages as the best approach for an enterprise governance dashboard. This comprehensive aggregation enables decision-makers to see the full AI risk and performance picture-from data quality in training through deployment performance, bias monitoring, security incidents, and compliance status-in a single, actionable view. This unified perspective supports informed enterprise-level governance decisions.
Why A is Wrong: Uptime and availability metrics are operational infrastructure indicators that represent only one dimension of AI governance. Focusing primarily on availability misses critical governance concerns including model fairness, accuracy, bias, and ethical compliance.
Why C is Wrong: Risk heat maps based solely on training variance are narrow technical performance indicators. A governance dashboard requires breadth across risk types and life cycle stages, not depth on one specific technical metric.
Why D is Wrong: Assigning dashboard responsibility exclusively to IT centralizes governance reporting in one function that may lack visibility into business risk, ethical compliance, and strategic alignment dimensions of AI governance. Enterprise dashboards require cross-functional input and ownership.
NEW QUESTION # 34
Which of the following BEST helps to ensure adherence to data minimization principles when using an AI model whose training dataset contains personal information?
- A. Pseudonymization
- B. Data loss prevention (DLP)
- C. Role-based access control (RBAC)
- D. Data encryption
Answer: A
Explanation:
Data minimization is a privacy principle requiring that personal data be processed only to the extent necessary for the specified purpose. When training AI models, this means reducing the identifiability of personal data while preserving its statistical utility for model training.
Why D is Correct: According to ISACA AAIR data privacy guidance, pseudonymization directly supports data minimization by replacing identifying attributes with artificial identifiers, allowing the model to train on statistically representative data without processing full personal identifiers. This satisfies minimization requirements under frameworks like GDPR while maintaining training data utility-the specific challenge of AI model development with personal data.
Why A is Wrong: Data Loss Prevention prevents unauthorized transmission of data but does not reduce the amount of personal information contained in training datasets. DLP addresses data exfiltration risk, not data minimization compliance.
Why B is Wrong: Role-based access control restricts who can access the training data but does not reduce the volume or identifiability of personal information in the dataset. RBAC addresses access risk, not data minimization.
Why C is Wrong: Data encryption protects data confidentiality in storage and transit but does not remove or obfuscate personal identifiers from training data. Encrypted personal data is still personal data under privacy law.
NEW QUESTION # 35
An organization intends to implement an AI system that poses significant societal risk and interfaces with critical infrastructure and public services. Which of the following is the BEST course of action?
- A. Conduct parallel model evaluation to quantify the impact of system operations.
- B. Restrict disclosure of model internal operations to safeguard proprietary algorithms and protect trade secrets.
- C. Conduct a comprehensive pre-launch evaluation of potential adverse impacts and compliance obligations.
- D. Engage external consultants with expertise on measuring broad societal impacts.
Answer: C
Explanation:
High-risk AI systems-particularly those affecting critical infrastructure and public services-require rigorous pre-deployment assessment to identify potential harms, regulatory obligations, and societal impacts before they affect people or essential services.
Why A is Correct: The ISACA AAIR framework, consistent with emerging AI regulations (including the EU AI Act's requirements for high-risk systems), mandates comprehensive pre-launch impact assessment for systems posing significant societal risk. This assessment must cover adverse impact scenarios, applicable compliance obligations, and mitigation measures. Acting before deployment prevents irreversible harm and demonstrates responsible governance to regulators and the public.
Why B is Wrong: External consultants can support impact assessment but cannot substitute for the organization's own comprehensive evaluation and accountability. External expertise supplements internal assessment; it does not replace the organization's obligation to assess and take responsibility.
Why C is Wrong: Restricting disclosure conflicts with regulatory transparency requirements for high-risk AI systems. Many jurisdictions require explainability and disclosure for systems affecting public services. IP protection cannot override public safety obligations.
Why D is Wrong: Parallel model evaluation is a technical testing method that quantifies operational performance. It does not constitute the comprehensive societal impact and compliance assessment required for high-risk deployment.
NEW QUESTION # 36
Which of the following is the PRIMARY reason to include contractual requirements for model updates and disclosures from third-party AI suppliers?
- A. To ensure internal trust in the model's reliability before launching AI-driven innovation efforts
- B. To ensure timely detection and mitigation of new system risks that could harm individuals
- C. To guarantee that existing availability targets will be achieved following each update
- D. To determine appropriate access to vendor staff for datasets containing sensitive information
Answer: B
Explanation:
Third-party AI suppliers introduce significant risk through model updates, changes in training data, and modifications to system behavior. Contractual disclosure requirements ensure the acquiring organization can maintain active risk oversight despite not controlling the vendor's development processes.
Why B is Correct: The ISACA AAIR framework emphasizes that third-party AI contracts must protect against harms arising from undisclosed changes. When vendors make silent updates to models, the acquiring organization cannot assess new risks before they affect users, decisions, or regulated outcomes. Timely disclosure requirements enable proactive risk detection and mitigation before individuals are harmed.
Why A is Wrong: Availability guarantees are service-level concerns addressed by SLA provisions. While important operationally, they do not address the risk management imperative of understanding what changes have been made to AI models.
Why C is Wrong: Internal trust-building is a change management consideration, not the primary purpose of contractual disclosure requirements. Contracts address risk obligations, not organizational confidence.
Why D is Wrong: Vendor staff access to sensitive datasets is a data access and privacy concern addressed through data processing agreements and access controls, not model update disclosure requirements.
NEW QUESTION # 37
An organization embeds AI into existing processes without integrating AI risk practices into enterprise governance. Which of the following should a risk practitioner regard as the GREATEST organizational risk?
- A. Inadequate regulatory compliance documentation
- B. Difficulty in obtaining business executive approval for AI innovation initiatives
- C. Overly technical focus that is not aligned with business goals
- D. Unclear ownership leading to divergent controls and conflicting objectives
Answer: D
Explanation:
When AI is deployed without governance integration, no formal structure exists to assign control ownership, coordinate risk management activities, or align AI decision-making with organizational objectives. This structural void produces divergent, fragmented, and potentially conflicting risk management efforts.
Why C is Correct: According to ISACA AAIR, unclear ownership is the greatest organizational risk from AI operating outside governance structures. Without designated owners, controls may be applied inconsistently across business units, different teams may implement conflicting approaches, and no one is responsible for ensuring AI activities align with enterprise objectives. This governance vacuum creates unmanaged risks and organizational incoherence.
Why A is Wrong: Regulatory compliance documentation gaps are significant but are a downstream symptom of poor governance rather than the root organizational risk. Documentation failures can be remediated more easily than fundamental ownership gaps.
Why B is Wrong: Technical-business alignment is an important concern but represents a strategic planning challenge rather than the greatest organizational risk from absent governance. Alignment can be achieved through business case processes without full governance integration.
Why D is Wrong: Executive approval difficulty is an organizational change management challenge. It reflects organizational politics rather than a structural risk from absent governance. Approval processes function independently of AI governance integration.
NEW QUESTION # 38
Which of the following is the PRIMARY benefit of aligning AI risk management with existing organizational governance frameworks?
- A. It emphasizes the development of specialized functional roles and clarifies AI risk responsibility boundaries.
- B. It promotes consistent enterprise-level oversight of AI activities and aligns decisioning with strategic objectives.
- C. It standardizes AI acquisition processes across organizational business units.
- D. It expedites approval processes for compliance with AI laws and regulations.
Answer: B
Explanation:
Organizational governance frameworks provide the structures, processes, and oversight mechanisms through which enterprises manage their activities and risks. Aligning AI risk management with these frameworks ensures AI activities receive the same level of strategic oversight as other organizational functions.
Why C is Correct: The ISACA AAIR curriculum identifies enterprise-level oversight and strategic alignment as the primary benefit of governance framework integration. When AI risk management operates within established governance structures, AI decisions are subject to the same approval authorities, risk escalation pathways, and strategic alignment checks that govern all major organizational decisions. This produces coherent, enterprise-aware AI governance.
Why A is Wrong: Role development and responsibility clarification are governance activities that may result from alignment, but they represent structural outputs rather than the primary benefit. The benefit is the oversight quality, not the organizational structure itself.
Why B is Wrong: Expediting compliance approvals is an efficiency benefit that may arise from better- organized governance. However, speed of approval is not the primary purpose of framework alignment-the purpose is quality and consistency of oversight.
Why D is Wrong: Standardizing acquisition processes is a procurement function benefit. While governance alignment may improve procurement consistency, standardization is a narrow operational benefit compared to the strategic oversight value of full governance integration.
NEW QUESTION # 39
Which risk treatment is MOST appropriate when an organization's AI system presents residual risk within tolerance and impacts non-critical functions?
- A. Enhance monitoring to detect deviations
- B. Recommend increasing the tolerance threshold.
- C. Document a formal risk acceptance.
- D. Implement periodic vulnerability scans.
Answer: C
Explanation:
Risk treatment decisions are driven by two factors: whether the residual risk falls within or outside tolerance, and the criticality of the affected function. When both conditions-risk within tolerance AND non-critical function impact-are met, formal risk acceptance is the appropriate and proportionate treatment.
Why A is Correct: According to ISACA AAIR risk treatment guidance, documented formal risk acceptance is the appropriate response when residual risk is within defined tolerance for non-critical functions. Risk acceptance acknowledges the identified exposure, documents the organization's conscious decision to accept it, and establishes accountability for that decision. This proportionate response avoids over-investing in controls for risk that the organization has determined is acceptable.
Why B is Wrong: Recommending increases to tolerance thresholds is a governance manipulation rather than a risk treatment. Adjusting thresholds upward to accommodate risk does not address the risk; it merely reclassifies it as acceptable. This approach undermines risk governance integrity.
Why C is Wrong: Enhancing monitoring to detect deviations represents additional control investment that may be disproportionate for risk that is already within tolerance affecting non-critical functions. Enhanced monitoring is more appropriate when risk is near the tolerance boundary or when trends indicate potential future breach.
Why D is Wrong: Periodic vulnerability scanning is a security assurance activity that identifies technical weaknesses. It represents an ongoing control measure rather than the appropriate risk treatment decision for a residual risk that is already within tolerance.
NEW QUESTION # 40
After which of the following events is it MOST important to update risk ratings?
- A. Addition of new metrics tracked by automated monitoring
- B. Discovery of discriminatory outputs from an AI system
- C. Vulnerability patch deployment for an AI system
- D. Creation of a new AI risk oversight committee
Answer: B
Explanation:
Risk ratings must be maintained as current assessments of organizational risk exposure. Events that materially change the risk profile-particularly those indicating active harm or regulatory violations-require immediate risk rating updates to ensure governance responses are calibrated to the current risk reality.
Why A is Correct: According to ISACA AAIR risk monitoring and review guidance, the discovery of discriminatory outputs from an AI system represents a material change in risk exposure that requires immediate risk rating updates. Discriminatory outputs indicate active harm to individuals, regulatory violations, and significant legal and reputational exposure. This event fundamentally changes the risk profile from a potential to an actual harm, requiring escalated risk ratings and treatment responses.
Why B is Wrong: Adding new monitoring metrics improves risk detection capability but does not change the underlying risk levels. New metrics may subsequently detect risks requiring rating updates, but their addition alone is an operational change, not a risk level change.
Why C is Wrong: Vulnerability patch deployment reduces risk by closing specific security gaps, which may lower risk ratings but is less urgent than updating ratings to reflect active harm discovery. Patching is a remediation activity; discriminatory outputs represent ongoing harm requiring immediate escalation.
Why D is Wrong: Creating an oversight committee improves governance capability but does not change the risk profile of AI systems. Governance structure changes affect the organization's ability to manage risk; they do not affect the risk levels themselves.
NEW QUESTION # 41
An organization deploys an AI credit scoring model trained on historical financial data that underrepresents certain demographic groups. Which of the following is the risk practitioner's BEST recommendation to mitigate this risk?
- A. Define specific inclusivity goals and expand data to a broader range of sources.
- B. Implement reporting for model drift and anomalous model decisions.
- C. Use unsupervised learning to identify hidden or complex discriminatory patterns in the dataset.
- D. Notify stakeholders that the model may not always reflect standard loan approval thresholds.
Answer: A
Explanation:
Bias in AI models often originates from training data that does not represent the full population the model will serve. Underrepresentation of demographic groups in training data causes the model to perform poorly for those groups, producing discriminatory outcomes in high-stakes decisions like credit scoring.
Why B is Correct: The ISACA AAIR bias and fairness guidance identifies expanding training data coverage as the most effective mitigation for representation bias. Defining specific inclusivity goals ensures the data expansion targets the identified gaps, while broadening data sources introduces representative examples from underrepresented groups. This addresses the root cause-training data deficiency-rather than symptoms.
Why A is Wrong: Model drift reporting detects changes in model behavior over time but does not address existing representational bias embedded in the current model. Monitoring an already-biased model cannot remediate the bias.
Why C is Wrong: Notifying stakeholders of potential inaccuracy is a transparency measure but does not reduce harm to affected individuals. Disclosure of bias without remediation is insufficient under anti- discrimination regulations.
Why D is Wrong: Unsupervised learning can identify hidden patterns but cannot introduce the missing representative data needed to train an unbiased model. Discovering discriminatory patterns in existing data does not resolve the underlying data coverage gap.
NEW QUESTION # 42
Which of the following would be of GREATEST concern to a risk practitioner reviewing the testing and validation of an AI-driven technical support system?
- A. Inaccurate outputs resulting from model drift
- B. Excessive dependence on manual sampling
- C. Infrequent incorporation of updated training datasets
- D. Insufficient encryption of data at rest and in transit
Answer: A
Explanation:
AI-driven technical support systems rely on accurate, current knowledge to resolve user issues. Model drift causes the system to diverge from real-world conditions, producing inaccurate outputs that erode user trust, increase escalations, and potentially cause harm if incorrect technical guidance is followed.
Why A is Correct: According to ISACA AAIR validation guidance, inaccurate outputs from model drift represent the greatest risk in a technical support AI because they directly compromise the system's core function-providing correct technical guidance. Inaccurate outputs lead to unresolved issues, potential system damage from wrong instructions, and reputational harm. Unlike the other options, drift-driven inaccuracy affects every user interaction and cannot be remediated without model updates.
Why B is Correct Context: Infrequent training dataset updates are a contributing cause of model drift and are a serious concern, but they are an input factor rather than the manifest risk itself. The concern is the resulting inaccuracy.
Why C is Wrong: Encryption is a security control for data in storage and transit. While important for confidentiality, it does not affect the accuracy of AI outputs or the system's ability to provide correct technical guidance.
Why D is Wrong: Excessive manual sampling is a testing methodology concern that may reduce testing coverage efficiency. However, it represents a process inefficiency rather than a direct risk to output quality- the model's accuracy is the greater concern.
NEW QUESTION # 43
......
AAIR Exam Practice Questions prepared by ISACA Professionals: https://www.actualtorrent.com/AAIR-questions-answers.html