PECB
ISO-IEC-42001-LEAD-AUDITOR · Question #204
An organization claims its AI system is 搇ow risk?but provides no documented risk assessment. How should an auditor respond?
The correct answer is C. Raise a nonconformity. Risk classification must be supported by documented assessment. Absence of evidence is evidence of nonconformity.
Risk Management
Question
An organization claims its AI system is 搇ow risk?but provides no documented risk assessment. How should an auditor respond?
Options
- AAccept the claim if no incidents occurred
- BRequest verbal clarification
- CRaise a nonconformity
- DDefer judgment until surveillance audit
How the community answered
(20 responses)- A5% (1)
- B5% (1)
- C75% (15)
- D15% (3)
Explanation
Risk classification must be supported by documented assessment. Absence of evidence is evidence of nonconformity.
Topics
#risk assessment documentation#audit evidence#nonconformity#Clause 6
Community Discussion
No community discussion yet for this question.