Isaca ISACA Advanced in AI Risk AAIR Question # 16 Topic 2 Discussion
AAIR Exam Topic 2 Question 16 Discussion:
Question #: 16
Topic #: 2
An aviation operator is integrating AI into flight operations and maps existing controls to identified AI risk. Which of the following is the risk practitioner ' s BEST course of action?
A.
Integrate flight operation risk scenarios into the organizational risk register.
B.
Establish AI system targets for latency and throughput capacity.
C.
Perform a control gap assessment between current and desired AI control environments.
D.
Prioritize available upgrades to existing controls over new control implementation.
Within the ISACA Advanced in AI Risk framework, program management connects risk identification, control selection, treatment, monitoring, resilience, third-party oversight, and reporting to enterprise risk objectives. Once controls are mapped to AI risks, a control gap assessment determines whether existing measures are sufficient and identifies the difference between current and required control states. Performance targets or automatic upgrades should not precede that assessment. This makes option C, Perform a control gap assessment between current and desired AI control environments, the strongest answer. The other choices describe narrower technical, operational, performance, or administrative considerations and do not address the primary risk-management objective in the scenario as directly. A risk practitioner should select the response that most effectively reduces the stated exposure while preserving appropriate oversight, traceability, and alignment with organizational risk tolerance and business requirements.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit