Isaca ISACA Advanced in AI Audit (AAIA) AAIA Question # 34 Topic 4 Discussion
AAIA Exam Topic 4 Question 34 Discussion:
Question #: 34
Topic #: 4
An organization is reviewing its existing data governance framework after implementing an AI-based document repository solution. Which of the following should be the PRIMARY consideration?
The PRIMARY consideration is data classification (B), because the AI-based repository handles different types of documents that may contain sensitive, confidential, regulated, or public information. Proper classification ensures correct application of access controls, retention rules, encryption requirements, and privacy protections.
Retention (A) is important but flows from proper classification. Data enrichment (C) and qualitative data collection (D) are not foundational governance controls. AAIA emphasizes classification as the first step in robust AI data governance.
[References:, ISACA, AAIA Exam Content Outline – Domain 1: Privacy and Data Governance Programs., , ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit