nerdexam
Isaca

AAIA · Question #40

When an IS auditor is reviewing results from an AI system, which of the following would cause the GREATEST risk?

The correct answer is B. System output not being checked for inconsistencies. System output not being checked for inconsistencies (B) poses the greatest risk because errors, biases, or anomalies in AI-generated results can flow unchallenged into business decisions, potentially causing significant harm. Without output validation, there is no control to catc

AI Risk Management and Controls

Question

When an IS auditor is reviewing results from an AI system, which of the following would cause the GREATEST risk?

Options

  • AInability to identify where an AI system is housed
  • BSystem output not being checked for inconsistencies
  • CCascading failures of AI system outputs
  • DDifficulty of documenting AI algorithm processes

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    56% (14)
  • C
    28% (7)
  • D
    8% (2)

Explanation

System output not being checked for inconsistencies (B) poses the greatest risk because errors, biases, or anomalies in AI-generated results can flow unchallenged into business decisions, potentially causing significant harm. Without output validation, there is no control to catch wrong or harmful recommendations. Not knowing where the system is housed (A) is a governance and asset management issue. Cascading failures (C) are serious but are typically visible and trigger response. Difficulty documenting algorithms (D) is a transparency and explainability concern. Unchecked outputs represent the most direct and ongoing operational risk to decision quality and organizational safety.

Topics

#AI output validation#AI risk management#Audit controls#Data integrity

Community Discussion

No community discussion yet for this question.

Full AAIA Practice