ISO-IEC-42001-LEAD-AUDITOR · Question #48
Scenario 3 (continued): ArBank is a financial institution located in Brussels, Belgium, which offers a diverse range of banking and investment services to its clients. To ensure the continual…
The correct answer is C. Yes, she conducted observations of the AIMS life cycle and evaluated the tools used to monitor its. Audrey conducted a technical assessment because she observed the AIMS lifecycle (development, deployment) and evaluated monitoring tools, as required: ISO/IEC 42001 Clause 9.2.2 ("Conducting Audits") mandates that auditors must assess the full lifecycle and technical…
Question
Scenario 3 (continued):
ArBank is a financial institution located in Brussels, Belgium, which offers a diverse range of banking and investment services to its clients. To ensure the continual improvement of its operations, ArBank has implemented a quality management system QMS based on ISO 9001 and an artificial intelligence management system AIMS based on the requirements of ISO/IEC 42001. Audrey, an experienced auditor, led an internal audit focused on the AIMS within ArBank. She assessed the chatbots integrated into the bank's website and mobile app, analyzing communications using big data technology to identify potential noncompliance, fraud, or unethical conduct. Instead of relying solely on the information provided by the chatbots, Audrey sought out evidence that would either confirm or challenge the validity of the data, ensuring her conclusions were based on reliable and accurate information. Her review of selected chatbot interactions confirmed they met their intended purpose. For the specific context of ArBank's operations, Audrey utilized an Al system to assess the efficiency of the bank's digital infrastructure, focusing on tasks critical to the Finance Department. This Al system was able to analyze the functionality of chatbots integrated into ArBank's website and mobile app to determine if it adheres to ISO/IEC 42001 requirements and internal policies governing customer service in the banking sector. In addition, Audrey conducted a deeper assessment of the bank's AIMS. Her evaluation included observing different stages of the AIMS life cycle, from development to deployment, to ensure that roles and responsibilities were clearly defined and aligned with ArBank's operational goals. She also evaluated the tools used to monitor and measure the performance of the AIMS. Audrey continued the audit process by auditing ArBank's outsourced operations. Upon checking the contractual agreements between the two parties, Audrey decided that there was no need to gather audit evidence regarding the contractual agreement. She reviewed the company's processes for monitoring the quality of outsourced operations, determined whether appropriate governance processes are in place with regard to the engagement of outsourced persons or organizations, and reviewed and evaluated the company's plans in case of expected or unexpected termination of the outsourcing agreement. Based on the scenario above, answer the following question:
Based on Scenario 3, did Audrey perform a technical assessment during the audit?
Options
- AYes, she performed a general assessment of ArBank's customer service performance
- BNo, she only reviewed contractual agreements with outsourced service providers
- CYes, she conducted observations of the AIMS life cycle and evaluated the tools used to monitor its
- DNo, only the certification body should perform technical assessments
How the community answered
(53 responses)- A13% (7)
- B4% (2)
- C74% (39)
- D9% (5)
Explanation
Audrey conducted a technical assessment because she observed the AIMS lifecycle (development, deployment) and evaluated monitoring tools, as required: ISO/IEC 42001 Clause 9.2.2 ("Conducting Audits") mandates that auditors must assess the full lifecycle and technical effectiveness of AI systems. The Lead Auditor Manual notes: "Technical assessments during AIMS audits must include evaluating controls for AI system monitoring, performance, and lifecycle stages."
Topics
Community Discussion
No community discussion yet for this question.