nerdexam
Isaca

AAISM · Question #260

Which of the following BEST describes the role of risk documentation in an AI governance program?

The correct answer is B. Outlining the acceptable levels of risk for AI-related initiatives. In AAISM governance guidance, risk documentation is described as the structured record that defines the organization's risk appetite and tolerance levels for AI initiatives. By outlining acceptable levels of risk, documentation ensures decision-makers can approve, monitor, and…

AI Security Strategy and Governance

Question

Which of the following BEST describes the role of risk documentation in an AI governance program?

Options

  • AProviding a record of past AI-related incidents for audits
  • BOutlining the acceptable levels of risk for AI-related initiatives
  • COffering detailed analyses of technical risk and vulnerabilities
  • DDemonstrating governance, risk, and compliance (GRC) for external stakeholders

How the community answered

(50 responses)
  • A
    8% (4)
  • B
    88% (44)
  • C
    2% (1)
  • D
    2% (1)

Explanation

In AAISM governance guidance, risk documentation is described as the structured record that defines the organization's risk appetite and tolerance levels for AI initiatives. By outlining acceptable levels of risk, documentation ensures decision-makers can approve, monitor, and adjust AI projects within defined boundaries. While it may also serve audit functions, technical analysis, or communication to stakeholders, its primary role is to formalize risk acceptance thresholds and integrate them into governance and decision-making. This aligns directly with the governance requirement to align AI adoption with organizational risk appetite.

Topics

#AI Governance#Risk Documentation#Risk Appetite#Risk Management

Community Discussion

No community discussion yet for this question.

Full AAISM Practice