PECB
ISO-IEC-42001-LEAD-AUDITOR · Question #192
An organization defines its AIMS scope but excludes externally hosted AI systems without justification. What is the auditor's best conclusion?
The correct answer is C. Nonconformity due to improper scope definition. Clause 4.3 requires the scope to consider externally provided processes and AI services. Exclusion without justification undermines the effectiveness of the AIMS.
Context of the Organization
Question
An organization defines its AIMS scope but excludes externally hosted AI systems without justification. What is the auditor's best conclusion?
Options
- AAcceptable, because outsourced systems are out of scope
- BAcceptable if documented
- CNonconformity due to improper scope definition
- DOpportunity for improvement only
How the community answered
(33 responses)- A3% (1)
- B9% (3)
- C85% (28)
- D3% (1)
Explanation
Clause 4.3 requires the scope to consider externally provided processes and AI services. Exclusion without justification undermines the effectiveness of the AIMS.
Topics
#AIMS scope#scope definition#outsourced AI systems#Clause 4
Community Discussion
No community discussion yet for this question.