CISA · Question #605
A global company has been using a publicly available AI tool to obtain information about global laws and regulations that could impact the business. Which of the following should be of MOST concern…
The correct answer is A. Accuracy and quality of the data provided by the AI tool. The greatest concern is the accuracy and quality of information provided by a publicly available AI tool. Generative AI tools are known to hallucinate - producing confident but factually incorrect outputs - and may have outdated training data. Relying on an AI tool for global…
Question
A global company has been using a publicly available AI tool to obtain information about global laws and regulations that could impact the business. Which of the following should be of MOST concern to an IS auditor?
Options
- AAccuracy and quality of the data provided by the AI tool
- BWhether the organization is using a paid version of the AI tool
- CVersion and provider of the AI tool being utilized
- DWhether the tool is utilized by competitors in the same industry
How the community answered
(27 responses)- A74% (20)
- B7% (2)
- C4% (1)
- D15% (4)
Explanation
The greatest concern is the accuracy and quality of information provided by a publicly available AI tool. Generative AI tools are known to hallucinate - producing confident but factually incorrect outputs - and may have outdated training data. Relying on an AI tool for global legal and regulatory guidance without verifying accuracy could lead the organization to make compliance decisions based on incorrect information, resulting in legal exposure or regulatory violations. Whether the organization uses a paid version (B), the specific provider or version (C), or whether competitors use it (D) are secondary concerns that do not address the core risk of acting on potentially inaccurate legal information.
Topics
Community Discussion
No community discussion yet for this question.