An organization uses an AI image generation platform to create promotional materials. An IS auditor identifies that the platform includes copyrighted images in its training data. Which of the…

Question

Options

• AImplement a manual review process to ensure no copyrighted images are used in generated
• BUse a platform that certifies the provenance and licensing of its training data.
• CLabel all AI-generated images to disclaim the possibility of third-party content.
• DSuspend the use of the platform until the training data is sanitized.

• A
  21% (8)
• B
  64% (25)
• C
  10% (4)
• D
  5% (2)

Explanation

The best recommendation is B-using a platform that certifies the provenance and licensing of its training data-because it addresses the root cause systematically and sustainably. Certified provenance ensures the organization can demonstrate legal compliance and that training data is properly licensed, which is the core governance concern. Option A (manual review of generated images) is reactive and impractical at scale; it doesn't fix the underlying licensing issue with the training data itself. Option C (labeling AI outputs as potentially containing third-party content) is a disclosure measure, not a remediation-it does not resolve the legal exposure. Option D (suspending the platform) is overly disruptive and should be a last resort, not the primary recommendation. Auditors prioritize sustainable, risk-mitigating controls over operational shutdowns.

No community discussion yet for this question.