An organization's CIO provided the AI steering committee with a list of AI technologies in use and tasked them with categorizing the technologies by risk. Which of the following should the committee d

The correct answer is C. Ensure the AI technologies are included in the asset inventory. Before any risk categorization activity can be valid or complete, you must first confirm that all AI technologies are formally recorded in the asset inventory. Risk management cannot be applied to assets that are not officially recognized. Grouping similar products (A) and assess

AI Security Risk Management

Question

An organization's CIO provided the AI steering committee with a list of AI technologies in use and tasked them with categorizing the technologies by risk. Which of the following should the committee do FIRST?

Options

ABegin grouping similar AI products and solutions together
BIdentify vulnerabilities related to the technologies in use
CEnsure the AI technologies are included in the asset inventory
DAssess risk levels based on risk appetite and regulatory requirements

How the community answered

(42 responses)

A
2% (1)
B
5% (2)
C
86% (36)
D
7% (3)

Explanation

Before any risk categorization activity can be valid or complete, you must first confirm that all AI technologies are formally recorded in the asset inventory. Risk management cannot be applied to assets that are not officially recognized. Grouping similar products (A) and assessing risk levels (D) are subsequent steps that depend on having a verified, complete list. Identifying vulnerabilities (B) also requires a confirmed asset baseline. Ensuring assets are in the inventory (C) is foundational - it guarantees that the risk categorization exercise is comprehensive and authoritative, leaving no unmanaged AI systems outside the governance process.

Topics

#AI Asset Management#AI Inventory#Risk Management Foundation#AI Governance

Community Discussion

No community discussion yet for this question.

Full AAISM Practice