Isaca ISACA Advanced in AI Risk AAIR Question # 24 Topic 3 Discussion
AAIR Exam Topic 3 Question 24 Discussion:
Question #: 24
Topic #: 3
A risk practitioner learns that an organization's AI inventory includes separate listings of AI systems, models, and datasets. Which of the following is the risk practitioner's BEST recommendation to improve AI governance?
A.
Map interdependencies between AI assets continuously.
B.
Include information about model training frequency.
C.
Automate inventory reconciliation steps.
D.
Assign inventory oversight to the AI risk committee.
An AI inventory that lists systems, models, and datasets separately without showing how they relate to each other creates significant governance blind spots. Understanding interdependencies is critical for comprehensive risk assessment and impact analysis.
Why A is Correct: The ISACA AAIR framework emphasizes that AI governance requires understanding how AI components interact. Mapping interdependencies reveals which datasets feed which models, which systems depend on which models, and how failures cascade across the AI ecosystem. Continuous mapping ensures this understanding remains current as the AI landscape evolves, enabling accurate risk assessment, change impact analysis, and incident response.
Why B is Wrong: Training frequency is a useful operational metric but represents a single attribute addition to inventory records. It does not address the fundamental governance gap of disconnected asset listings.
Why C is Wrong: Automating reconciliation improves inventory maintenance efficiency but does not resolve the architectural problem of separate, unlinked asset listings. An automated process applied to siloed data still produces siloed results.
Why D is Wrong: Assigning oversight to a committee addresses governance accountability but does not improve the quality or utility of the inventory itself. Oversight without integrated data still leaves governance gaps.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit