nerdexam
Isaca

AAISM · Question #131

A financial organization relies on AI-based identity verification and fraud detection services. Which of the following BEST integrates AI security risk into the business continuity plan (BCP)?

The correct answer is C. Including AI model supporting infrastructure in disaster recovery scenarios. A business continuity plan must account for the full dependency chain needed to restore critical operations. AI-based identity verification and fraud detection rely on supporting infrastructure-compute resources, data pipelines, model registries, and APIs-not just the model…

AI Security Assurance and Resilience

Question

A financial organization relies on AI-based identity verification and fraud detection services. Which of the following BEST integrates AI security risk into the business continuity plan (BCP)?

Options

  • AUsing explainable AI to document decision paths
  • BPeriodic retraining using pre-labeled data
  • CIncluding AI model supporting infrastructure in disaster recovery scenarios
  • DDuplicating AI microservices across multiple availability zones

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    15% (4)
  • C
    74% (20)
  • D
    7% (2)

Explanation

A business continuity plan must account for the full dependency chain needed to restore critical operations. AI-based identity verification and fraud detection rely on supporting infrastructure-compute resources, data pipelines, model registries, and APIs-not just the model itself. Including this infrastructure in disaster recovery scenarios ensures the organization can restore AI capabilities within defined recovery time objectives. Option A (explainable AI) improves transparency but does not address recovery. Option B (retraining) is a model maintenance activity. Option D (duplicating microservices) is one specific technical tactic but is narrower and less comprehensive than formally incorporating AI infrastructure into BCP scenarios.

Topics

#Business Continuity Plan#Disaster Recovery#AI Infrastructure#Operational Resilience

Community Discussion

No community discussion yet for this question.

Full AAISM Practice