nerdexam
Isaca

AAISM · Question #201

A programmer suspects an AI system is inferring sensitive user information. What is the BEST action?

The correct answer is A. Inform the governance panel. A suspected privacy violation involving AI inference of sensitive data is a governance and compliance issue, not just a technical one. The AI governance panel (or ethics/privacy committee) has the authority to formally investigate, assess regulatory implications, and mandate…

AI Security Strategy and Governance

Question

A programmer suspects an AI system is inferring sensitive user information. What is the BEST action?

Options

  • AInform the governance panel
  • BSuggest fine-tuning
  • CConduct a code review
  • DAlert the CIO

How the community answered

(18 responses)
  • A
    83% (15)
  • B
    11% (2)
  • C
    6% (1)

Explanation

A suspected privacy violation involving AI inference of sensitive data is a governance and compliance issue, not just a technical one. The AI governance panel (or ethics/privacy committee) has the authority to formally investigate, assess regulatory implications, and mandate remediation. Alerting the CIO (D) skips the appropriate governance channel and may not trigger a structured response. Suggesting fine-tuning (B) is a technical response to a governance problem - the root cause must be confirmed first. A code review (C) is useful but is a technical investigation within the programmer's own scope, lacking the organizational authority needed to address a potential privacy breach.

Topics

#AI Governance#Data Privacy#Incident Reporting#Ethical AI

Community Discussion

No community discussion yet for this question.

Full AAISM Practice