nerdexam
Isaca

AAISM · Question #182

A financial organization is concerned about AI data poisoning. Which control BEST mitigates this risk?

The correct answer is C. Using training data from multiple sources. Data poisoning attacks involve an adversary corrupting training data to manipulate model behavior. Using training data from multiple independent sources is the most direct technical mitigation: it ensures no single compromised source can dominate the training signal, and…

AI Security Risk Management

Question

A financial organization is concerned about AI data poisoning. Which control BEST mitigates this risk?

Options

  • AImplementing a break-glass policy
  • BTransparency with customers about data sources
  • CUsing training data from multiple sources
  • DDelivering AI-specific security awareness training

How the community answered

(15 responses)
  • A
    13% (2)
  • B
    7% (1)
  • C
    73% (11)
  • D
    7% (1)

Explanation

Data poisoning attacks involve an adversary corrupting training data to manipulate model behavior. Using training data from multiple independent sources is the most direct technical mitigation: it ensures no single compromised source can dominate the training signal, and anomalous patterns in one source are diluted by clean data from others. A break-glass policy governs emergency access, not data integrity. Customer transparency is an ethical practice, not a technical control. Security awareness training reduces human error but does not protect the data pipeline itself.

Topics

#AI Data Poisoning#Threat Mitigation#Training Data Security#AI Risk Management

Community Discussion

No community discussion yet for this question.

Full AAISM Practice