Following a model exfiltration attack, multiple AI systems may require restoration. Prioritization must be based on objective criteria that reflect the potential business impact of continued unavailability. Systems supporting critical business functions must be restored before those supporting non-critical functions.

Why A is Correct: According to ISACA AAIR business continuity guidance for AI, the primary criterion for restoration priority is the AI system ' s criticality to business requirements. Systems that support mission-critical functions—patient care, financial transaction processing, safety operations—represent the highest restoration priority because their unavailability causes the greatest operational harm. This risk-based prioritization framework is consistent with standard business continuity management principles applied to the AI context.

Why B is Wrong: Team member expertise affects restoration capacity and speed but should not drive prioritization decisions. Priority is determined by business impact, not by where the team has the most technical capability. Resource allocation follows priority, not the reverse.

Why C is Wrong: Vulnerability testing and patch costs are operational considerations that may influence restoration timelines but should not override business criticality in determining priority. Cost-based prioritization could lead to restoring cheaper but less critical systems first.

Why D is Wrong: Dataset availability affects the feasibility and timeline of model retraining but is a logistical consideration rather than the primary basis for restoration priority. Critical systems should be prioritized even if their restoration is technically more complex.