Which of the following controls would MOST effectively mitigate worst-case service disruption scenarios affecting an AI-based application system?

Question

Options

• APerforming periodic tabletop exercises
• BImplementing a kill chain process in the event of disruption
• CUpdating key risk indicators (KRIs) regularly
• DIncluding a range of AI disruption scenarios in the disaster recovery plan (DRP)

• A
  9% (4)
• B
  22% (10)
• C
  4% (2)
• D
  64% (29)

Explanation

Including a range of AI disruption scenarios in the disaster recovery plan (DRP) (D) is the most effective control because the DRP is the authoritative, tested document that defines how the organization will respond to and recover from worst-case scenarios. By incorporating AI-specific disruption scenarios-such as model failure, adversarial attacks, or data pipeline collapse-the organization ensures that recovery procedures, roles, and resources are pre-defined before a crisis occurs. Tabletop exercises (A) are valuable for testing the DRP but are not the primary mitigation control. A kill chain process (B) is a security concept focused on attack sequences, not recovery. Updating KRIs (C) supports ongoing monitoring and early warning but does not define recovery actions for worst-case scenarios.

No community discussion yet for this question.