nerdexam
Isaca

AAISM · Question #248

Which of the following is MOST important to monitor in order to ensure the effectiveness of an organization's AI vendor management program?

The correct answer is A. Vendor compliance with AI-related requirements. The AAISM framework specifies that the primary metric of effectiveness in vendor management is the vendor's compliance with AI-related requirements defined in contracts and governance frameworks. This provides measurable assurance that vendors adhere to agreed-upon privacy…

AI Security Strategy and Governance

Question

Which of the following is MOST important to monitor in order to ensure the effectiveness of an organization's AI vendor management program?

Options

  • AVendor compliance with AI-related requirements
  • BVendor reviews of external AI threat reports
  • CVendor results in compliance training programs
  • DVendor participation in industry AI research

How the community answered

(39 responses)
  • A
    87% (34)
  • B
    8% (3)
  • C
    3% (1)
  • D
    3% (1)

Explanation

The AAISM framework specifies that the primary metric of effectiveness in vendor management is the vendor's compliance with AI-related requirements defined in contracts and governance frameworks. This provides measurable assurance that vendors adhere to agreed-upon privacy, security, and ethical standards. Reviews of threat reports, training results, or research participation are supplemental and may support continuous improvement, but they do not establish compliance accountability. Governance requires a direct focus on whether contractual and regulatory obligations are being fulfilled. Therefore, vendor compliance with AI requirements is the most important monitoring focus.

Topics

#AI Vendor Management#Compliance Monitoring#Program Effectiveness#Third-party Risk

Community Discussion

No community discussion yet for this question.

Full AAISM Practice