nerdexam
Isaca

AAISM · Question #56

A newly hired programmer suspects that the organization's AI solution is inferring users' sensitive information and using it to advise future decisions. Which of the following is the programmer's…

The correct answer is D. Inform the governance panel. The concern here is a potential privacy violation and ethical/legal risk related to sensitive data inference - a governance-level issue, not purely a technical one. The governance panel (D) is the appropriate body to address AI ethics, privacy compliance, and policy decisions…

AI Security Strategy and Governance

Question

A newly hired programmer suspects that the organization's AI solution is inferring users' sensitive information and using it to advise future decisions. Which of the following is the programmer's BEST course of action?

Options

  • AConduct a code review
  • BAlert the CIO to the risk
  • CSuggest fine-tuning the AI solution
  • DInform the governance panel

How the community answered

(32 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    13% (4)
  • D
    78% (25)

Explanation

The concern here is a potential privacy violation and ethical/legal risk related to sensitive data inference - a governance-level issue, not purely a technical one. The governance panel (D) is the appropriate body to address AI ethics, privacy compliance, and policy decisions. A code review (A) might reveal how the system works but doesn't escalate the risk appropriately. Alerting the CIO (B) skips the proper governance channel and may be premature for a suspicion. Fine-tuning the AI (C) is a technical action that doesn't address the underlying privacy concern or involve decision-makers with authority to act on it.

Topics

#AI Governance#Ethical AI#Data Privacy#Reporting Procedures

Community Discussion

No community discussion yet for this question.

Full AAISM Practice