Isaca ISACA Advanced in AI Risk AAIR Question # 50 Topic 6 Discussion
AAIR Exam Topic 6 Question 50 Discussion:
Question #: 50
Topic #: 6
Which of the following is the MOST important vendor assurance measure when an organization plans to engage multiple AI vendors for critical model components?
A.
Verifying documentation of data provenance and integrity
B.
Centralizing AI risk oversight and mitigation responsibilities within IT teams
C.
Mandating vendor use of proprietary development tools
D.
Analyzing the representativeness of vendor training datasets
Within the ISACA Advanced in AI Risk framework, program management connects risk identification, control selection, treatment, monitoring, resilience, third-party oversight, and reporting to enterprise risk objectives. When multiple vendors provide critical model components, assurance depends on evidence of provenance and integrity so the organization can trace the origin and handling of data and artifacts. Tool mandates or centralized IT ownership do not establish trustworthiness. This makes option A, Verifying documentation of data provenance and integrity, the strongest answer. The other choices describe narrower technical, operational, performance, or administrative considerations and do not address the primary risk-management objective in the scenario as directly. A risk practitioner should select the response that most effectively reduces the stated exposure while preserving appropriate oversight, traceability, and alignment with organizational risk tolerance and business requirements.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit