nerdexam
Isaca

AAISM · Question #231

When implementing a generative AI system, which of the following approaches will BEST prevent misalignment between the corporate risk appetite and tolerance?

The correct answer is D. Establishing and monitoring acceptable levels of AI system risk. AAISM governance guidance specifies that alignment between AI system adoption and organizational risk appetite is achieved by defining and monitoring acceptable levels of system risk. This ensures that generative AI operations remain within boundaries approved by leadership and c

AI Security Risk Management

Question

When implementing a generative AI system, which of the following approaches will BEST prevent misalignment between the corporate risk appetite and tolerance?

Options

  • AEnsuring effective AI key performance indicators (KPIs)
  • BPerforming an AI impact assessment
  • CCreating and maintaining an AI risk register
  • DEstablishing and monitoring acceptable levels of AI system risk

How the community answered

(30 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    7% (2)
  • D
    80% (24)

Explanation

AAISM governance guidance specifies that alignment between AI system adoption and organizational risk appetite is achieved by defining and monitoring acceptable levels of system risk. This ensures that generative AI operations remain within boundaries approved by leadership and compliance frameworks. While KPIs track performance, they do not ensure alignment with risk tolerance. AI impact assessments help identify risks but do not maintain continuous oversight. A risk register records risks but does not dynamically enforce acceptable thresholds. The most effective governance approach is to establish and monitor acceptable AI system risk

Topics

#AI Risk Management#Risk Appetite and Tolerance#Risk Monitoring#Generative AI Security

Community Discussion

No community discussion yet for this question.

Full AAISM Practice