Which of the following should be of GREATEST concern to an IS auditor reviewing controls around an artificial intelligence (AI) system in an organization?

The correct answer is C. Basic assumptions and formulas used to develop the decision logic were not documented. The greatest concern for an IS auditor would be the lack of documentation for the basic assumptions and formulas used to develop the AI system's decision logic. This absence can lead to issues with transparency, accountability, and the ability to audit or validate the system's ou

Submitted by weili_xi· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

Options

AContracted developers have access to the knowledge base for maintenance purposes
BDevelopment of the knowledge base was outsourced to vendors
CBasic assumptions and formulas used to develop the decision logic were not documented
DThe policy and procedure guide and its decision logic were reviewed once annually

How the community answered

(36 responses)

A
17% (6)
B
6% (2)
C
50% (18)
D
28% (10)

Explanation

The greatest concern for an IS auditor would be the lack of documentation for the basic assumptions and formulas used to develop the AI system's decision logic. This absence can lead to issues with transparency, accountability, and the ability to audit or validate the system's outputs. Proper documentation is critical for ensuring that the system operates as intended and that its decisions can be explained and justified if questioned.

Topics

#AI system controls#System documentation#Audit risk#Decision logic

Community Discussion

No community discussion yet for this question.

Full CISA Practice