Isaca ISACA Advanced in AI Risk AAIR Question # 17 Topic 2 Discussion
AAIR Exam Topic 2 Question 17 Discussion:
Question #: 17
Topic #: 2
A risk practitioner is performing a business impact analysis (BIA) of potential service disruptions to an organization’s AI-powered operational processes. Which of the following is MOST important to address in the BIA?
A.
Effects of AI system outages on core operations and associated recovery time targets
B.
AI development life cycle records and evidence of change control in place
C.
General risk classification criteria and effective replacement cost of AI assets
D.
Incident response procedures that account for the tendency of AI incidents to scale quickly
Within the ISACA Advanced in AI Risk framework, program management connects risk identification, control selection, treatment, monitoring, resilience, third-party oversight, and reporting to enterprise risk objectives. A business impact analysis focuses on how disruption affects critical operations and on recovery requirements such as recovery time objectives. Development records, asset classification, and incident procedures are related controls but are not the primary purpose of a BIA. This makes option A, Effects of AI system outages on core operations and associated recovery time targets, the strongest answer. The other choices describe narrower technical, operational, performance, or administrative considerations and do not address the primary risk-management objective in the scenario as directly. A risk practitioner should select the response that most effectively reduces the stated exposure while preserving appropriate oversight, traceability, and alignment with organizational risk tolerance and business requirements.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit