nerdexam
Isaca

AAISM · Question #163

An organization is evaluating a SaaS-based HR system that uses AI for resume vetting. Which control is MOST important?

The correct answer is A. Inclusion of diverse and representative training data. When AI is used to make or influence hiring decisions, the MOST critical concern is fairness and non-discrimination. Biased or unrepresentative training data will cause the system to systematically disadvantage candidates from underrepresented groups - creating legal, ethical…

AI Security Risk Management

Question

An organization is evaluating a SaaS-based HR system that uses AI for resume vetting. Which control is MOST important?

Options

  • AInclusion of diverse and representative training data
  • BAvailability of backups
  • CVendor conformity assessments
  • DEncryption and isolation of customer data

How the community answered

(40 responses)
  • A
    70% (28)
  • B
    5% (2)
  • C
    18% (7)
  • D
    8% (3)

Explanation

When AI is used to make or influence hiring decisions, the MOST critical concern is fairness and non-discrimination. Biased or unrepresentative training data will cause the system to systematically disadvantage candidates from underrepresented groups - creating legal, ethical, and reputational risk. Ensuring diverse and representative training data (A) directly addresses this. Backups (B) are a general availability control unrelated to AI-specific risk. Vendor conformity assessments (C) are important governance steps but secondary. Encryption and data isolation (D) protect privacy but do not address the accuracy and fairness of the AI's decisions.

Topics

#AI Bias#Training Data Fairness#HR AI Systems#AI Risk Mitigation

Community Discussion

No community discussion yet for this question.

Full AAISM Practice