AAIR AI Risk Governance And Framework Integration — All Questions With Answers

Question 1mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

You are integrating AI risk into the NIST Risk Management Framework (RMF). Which step requires an explicit evaluation of AI model lineage and data provenance to satisfy the 'Govern' function?

Question 2hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When configuring the Microsoft Purview AI hub for risk management, which setting must be enabled to ensure AI prompt logs are captured for enterprise risk reporting?

Question 3mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A retail company uses an AI model for dynamic pricing. The model's risk score recently exceeded the 'Moderate' threshold. As per the AI Governance framework, what is the mandatory next step?

Question 4easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the primary objective of a 'post-implementation review' in the AI Risk Governance lifecycle?

Question 5hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A firm is using a 'Red Teaming' exercise for its AI model. How does this fit into the AI Risk Governance framework?

Question 6hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

You are configuring the NIST AI Risk Management Framework (AI RMF) 'Govern' function for a high-risk autonomous system. Which activity specifically fulfills the 'Govern' function's requirement for establishing accountability?

Question 7mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which governance mechanism is most effective for ensuring that AI ethical risks are addressed during the 'Design' phase of the AI Lifecycle?

Question 8hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

The organization is updating its 'AI Risk Management Policy'. Which THREE components are essential to ensure it aligns with the 'Manage' function of the NIST AI RMF?

Question 9mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

When assessing the organizational readiness for AI risk governance, which TWO areas must be evaluated to ensure the framework is sustainable?

Question 10hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

You are mapping AI risks to the NIST AI RMF. Which step is essential when documenting the 'Map' function for a high-risk autonomous system?

Question 11mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

A firm is establishing an AI Governance Committee. Which TWO groups should be represented to ensure comprehensive oversight?

Question 12easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A financial institution is integrating AI risk into its ERM framework. Which action most effectively aligns AI risk appetite with enterprise risk appetite?

Question 13mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

During a board meeting, the Chief Risk Officer needs to present AI model performance trends. Which metric is most critical for board-level reporting?

Question 14hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

When integrating AI risk into existing ERM, which THREE aspects of an AI model lifecycle must be audited to ensure compliance?

Question 15mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which TWO of the following governance actions should a Chief Risk Officer (CRO) implement to align AI risk with the COSO Enterprise Risk Management (ERM) framework?

Question 16hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE components must be included in an AI Risk Register to satisfy ISO/IEC 42001 requirements?

Question 17easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A board of directors requests a dashboard view of AI model drift. Which metric is most appropriate for a board-level risk report?

Question 18mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A financial firm is integrating AI risk into its ERM. The Chief Risk Officer asks for a mapping between the NIST AI Risk Management Framework (RMF) and the existing COSO ERM framework. Which action most effectively facilitates this alignment?

Question 19easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A multinational corporation is establishing an AI Risk Governance Committee. Who should chair this committee to ensure alignment with enterprise-wide risk appetite?

Question 20hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

During a board-level review, a bank needs to demonstrate the effectiveness of its AI Risk Governance. Which metric should be presented to the board to align with the 'Accountability' principle of the AI RMF?

Question 21hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

The AI Governance Committee is defining the roles for AI Risk oversight. Which TWO functions are essential for the 'Three Lines of Defense' model in AI Risk?

Question 22hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is integrating AI risk into its existing ISO 31000 framework. How should the 'Risk Assessment' process be modified to account for AI-specific 'black box' issues?

Question 23mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

When reporting AI risks to the Board of Directors, which THREE elements should be included to ensure informed decision-making?

Question 24easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which document is the primary reference for defining an organization's AI Risk Governance structure?

Question 25mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A manufacturing firm is adopting a 'Privacy by Design' approach for AI. How does this integrate with the AI Risk Governance framework?

Question 26mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE factors are essential to consider when determining the 'AI Risk Appetite' for an enterprise?

Question 27hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

In the context of AI model risk management, what is the role of an 'AI Model Inventory' within the governance framework?

Question 28mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is using a centralized AI Governance structure. What is the biggest risk of this approach compared to a decentralized one?

Question 29mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A company is deploying an AI system that interacts with human users. According to the AI RMF, what should be the focus of the 'Map' function in the risk governance process?

Question 30easymulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which TWO of the following are considered 'High-Risk' AI use cases that require enhanced oversight by the Governance Committee?

Question 31hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is revising its AI Governance to include 'Human-in-the-loop' (HITL) requirements. Why is this a critical risk mitigation strategy?

Question 32mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When integrating AI risk into the corporate GRC (Governance, Risk, and Compliance) platform, what is the best practice for handling 'AI Model Drift' alerts?

Question 33hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE components must be included in an AI Model 'Control Framework' to ensure effective risk mitigation?

Question 34mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A bank's AI Governance policy requires a 'bias test' for all customer-facing models. What is the most important element to document in the audit trail?

Question 35hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization discovers that an AI model has learned a bias from training data. Per the AI Risk framework, what should be the immediate priority of the Governance function?

Question 36easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Why is 'AI Literacy' for the board of directors a key component of AI Governance?

Question 37mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

When designing an AI Risk Reporting dashboard for senior management, which TWO of the following should be visualized?

Question 38hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE items should be included in an AI 'Risk Assessment' report for a new project?

Question 39mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A firm adopts the 'Three Lines of Defense' model for AI. What is the specific responsibility of the 'Third Line' (Internal Audit)?

Question 40mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is considering outsourcing its AI development. How should the 'AI Risk Governance' policy be adjusted for third-party vendors?

Question 41hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is evaluating 'Model Risk Management' (MRM) tools for its AI governance. What is the most critical feature to look for to ensure compliance with external regulatory requirements?

Question 42hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

In the context of the AI RMF, what is the significance of the 'Measure' function for risk management?

Question 43easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the primary role of the AI 'Data Steward' within the AI Governance framework?

Question 44easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which document defines the 'AI Risk Appetite' for an organization?

Question 45mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the key purpose of the 'Govern' function in the NIST AI RMF?

Question 46mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the primary benefit of documenting 'AI Model Lineage'?

Question 47mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When an AI model is updated (e.g., retrained on new data), what action is required from an AI Risk Governance perspective?

Question 48mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE items are necessary for a comprehensive 'AI Governance Policy'?

Question 49mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

When building an AI Governance framework, which TWO of the following are essential for ensuring enterprise adoption?

Question 50easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which department is primarily responsible for ensuring AI models comply with data protection regulations like GDPR?

Question 51hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is using 'AI Model Monitoring' to track 'Concept Drift'. Why is this a risk governance issue?

Question 52easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the goal of an AI 'Model Inventory'?

Question 53hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When deploying a generative AI model, what 'Governance Control' is most critical for preventing the generation of harmful/inappropriate content?

Question 54hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE activities are part of the 'AI Risk Management' lifecycle?

Question 55easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the first step in performing an AI Risk Assessment?

Question 56mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

In the context of the Three Lines of Defense, which function constitutes the 'Second Line'?

Question 57hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the 'Accountability' principle in the NIST AI RMF intended to address?

Question 58mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the primary risk associated with 'Shadow AI' in an organization?

Question 59mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

How should an 'AI Ethics Committee' interact with the 'AI Risk Governance' body?

Question 60mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE factors should be evaluated when reviewing an AI model for 'Fairness'?

Question 61mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A firm is integrating AI into its ERM (Enterprise Risk Management). What is the primary benefit of a 'Common Risk Taxonomy' for AI?

Question 62hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Why is 'Model Validation' (distinct from testing) essential in an AI Governance framework?

Question 63easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which of the following is an example of an 'AI Risk' in a customer-facing service?

Question 64mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When reporting to the Board, what is the best way to present 'AI Risk'?

Question 65mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Your organization is integrating AI risks into the existing COSO Enterprise Risk Management (ERM) framework. Which action best ensures that AI-specific model drift risk is formally addressed within the 'Review and Revision' component?

Question 66mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A board of directors requests a dashboard to monitor AI risk exposure. Which metric provides the most effective board-level oversight regarding AI regulatory compliance?

Question 67easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is establishing an AI Risk Committee. Which stakeholder is most critical to include to ensure alignment between enterprise risk appetite and technical AI capabilities?

Question 68mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

You are mapping existing ISO 31000 risk management processes to an AI-specific application. Which step is most crucial to ensure 'Risk Treatment' is appropriately scaled for AI?

Question 69hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When reporting AI risk to the board, which approach best demonstrates 'Risk Culture' maturity?

Question 70easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which document should a practitioner review to determine the organization's threshold for acceptable AI model bias?

Question 71mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

In the context of AI Supply Chain risk, what is the primary governance objective when evaluating a vendor's AI model transparency?

Question 72hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

You are auditing the integration of AI risk into the Enterprise Risk Management (ERM) system. Which finding indicates a failure in the governance structure?

Question 73mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

The board requires a new reporting structure for AI risk. Which TWO of the following should be included in the quarterly AI Risk Report to effectively communicate risk posture?

Question 74hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

You are integrating AI governance into the existing Corporate Governance framework. Which THREE of the following activities are essential to ensure the Board of Directors maintains adequate oversight?

Question 75hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A multinational bank has assigned its AI governance responsibilities across the Three Lines of Defense. The second line has drafted an AI risk appetite statement, but the board wants assurance that the first line's AI use cases remain within that appetite. Which activity should the second line perform to provide this assurance while preserving its independence?

Question 76mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A retail insurer is mapping its new generative AI claims assistant against the NIST AI Risk Management Framework. The Chief Risk Officer wants the framework functions to be traceable to existing enterprise risk processes. Which mapping approach best integrates the AI RMF functions with the insurer's ERM framework?

Question 77mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A global bank has adopted the NIST AI Risk Management Framework (AI RMF) and wants to ensure that its AI risk governance is integrated with its existing enterprise risk management (ERM) processes. The Chief Risk Officer asks the AI governance lead to identify the primary mechanism for achieving this integration. Which action best accomplishes this?

Question 78hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A healthcare organization is implementing the NIST AI Risk Management Framework (AI RMF) and wants to ensure that its AI governance structure addresses the 'Govern' function's requirement for clear roles and responsibilities. The Chief AI Officer proposes several actions. Which action best satisfies the requirement for accountability and oversight?

Question 79easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A retail company is developing an AI governance framework based on the NIST AI Risk Management Framework (AI RMF). The Chief Risk Officer wants to ensure that the framework includes a process for continuously monitoring AI risks and updating controls. Which AI RMF function primarily addresses this need?

Question 80hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

A financial services firm is integrating the NIST AI Risk Management Framework (AI RMF) into its existing governance structure. The AI governance lead is tasked with ensuring that the 'Govern' function is properly implemented. Which two actions are essential for establishing effective AI risk governance? (Choose two.)

Question 81mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A multinational corporation is aligning its AI risk governance with the NIST AI Risk Management Framework (AI RMF). The Chief Risk Officer wants to ensure that the organization's risk appetite for AI is clearly articulated and integrated into decision-making. Which action best supports this objective?

Question 1mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

You are integrating AI risk into the NIST Risk Management Framework (RMF). Which step requires an explicit evaluation of AI model lineage and data provenance to satisfy the 'Govern' function?

Question 2hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When configuring the Microsoft Purview AI hub for risk management, which setting must be enabled to ensure AI prompt logs are captured for enterprise risk reporting?

Question 3mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A retail company uses an AI model for dynamic pricing. The model's risk score recently exceeded the 'Moderate' threshold. As per the AI Governance framework, what is the mandatory next step?

Question 4easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the primary objective of a 'post-implementation review' in the AI Risk Governance lifecycle?

Question 5hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A firm is using a 'Red Teaming' exercise for its AI model. How does this fit into the AI Risk Governance framework?

Question 6hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

You are configuring the NIST AI Risk Management Framework (AI RMF) 'Govern' function for a high-risk autonomous system. Which activity specifically fulfills the 'Govern' function's requirement for establishing accountability?

Question 7mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which governance mechanism is most effective for ensuring that AI ethical risks are addressed during the 'Design' phase of the AI Lifecycle?

Question 8hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

The organization is updating its 'AI Risk Management Policy'. Which THREE components are essential to ensure it aligns with the 'Manage' function of the NIST AI RMF?

Question 9mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

When assessing the organizational readiness for AI risk governance, which TWO areas must be evaluated to ensure the framework is sustainable?

Question 10hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

You are mapping AI risks to the NIST AI RMF. Which step is essential when documenting the 'Map' function for a high-risk autonomous system?

Question 11mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

A firm is establishing an AI Governance Committee. Which TWO groups should be represented to ensure comprehensive oversight?

Question 12easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A financial institution is integrating AI risk into its ERM framework. Which action most effectively aligns AI risk appetite with enterprise risk appetite?

Question 13mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

During a board meeting, the Chief Risk Officer needs to present AI model performance trends. Which metric is most critical for board-level reporting?

Question 14hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

When integrating AI risk into existing ERM, which THREE aspects of an AI model lifecycle must be audited to ensure compliance?

Question 15mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which TWO of the following governance actions should a Chief Risk Officer (CRO) implement to align AI risk with the COSO Enterprise Risk Management (ERM) framework?

Question 16hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE components must be included in an AI Risk Register to satisfy ISO/IEC 42001 requirements?

Question 17easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A board of directors requests a dashboard view of AI model drift. Which metric is most appropriate for a board-level risk report?

Question 18mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A financial firm is integrating AI risk into its ERM. The Chief Risk Officer asks for a mapping between the NIST AI Risk Management Framework (RMF) and the existing COSO ERM framework. Which action most effectively facilitates this alignment?

Question 19easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A multinational corporation is establishing an AI Risk Governance Committee. Who should chair this committee to ensure alignment with enterprise-wide risk appetite?

Question 20hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

During a board-level review, a bank needs to demonstrate the effectiveness of its AI Risk Governance. Which metric should be presented to the board to align with the 'Accountability' principle of the AI RMF?

Question 21hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

The AI Governance Committee is defining the roles for AI Risk oversight. Which TWO functions are essential for the 'Three Lines of Defense' model in AI Risk?

Question 22hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is integrating AI risk into its existing ISO 31000 framework. How should the 'Risk Assessment' process be modified to account for AI-specific 'black box' issues?

Question 23mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

When reporting AI risks to the Board of Directors, which THREE elements should be included to ensure informed decision-making?

Question 24easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which document is the primary reference for defining an organization's AI Risk Governance structure?

Question 25mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A manufacturing firm is adopting a 'Privacy by Design' approach for AI. How does this integrate with the AI Risk Governance framework?

Question 26mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE factors are essential to consider when determining the 'AI Risk Appetite' for an enterprise?

Question 27hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

In the context of AI model risk management, what is the role of an 'AI Model Inventory' within the governance framework?

Question 28mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is using a centralized AI Governance structure. What is the biggest risk of this approach compared to a decentralized one?

Question 29mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A company is deploying an AI system that interacts with human users. According to the AI RMF, what should be the focus of the 'Map' function in the risk governance process?

Question 30easymulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which TWO of the following are considered 'High-Risk' AI use cases that require enhanced oversight by the Governance Committee?

Question 31hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is revising its AI Governance to include 'Human-in-the-loop' (HITL) requirements. Why is this a critical risk mitigation strategy?

Question 32mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When integrating AI risk into the corporate GRC (Governance, Risk, and Compliance) platform, what is the best practice for handling 'AI Model Drift' alerts?

Question 33hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE components must be included in an AI Model 'Control Framework' to ensure effective risk mitigation?

Question 34mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A bank's AI Governance policy requires a 'bias test' for all customer-facing models. What is the most important element to document in the audit trail?

Question 35hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization discovers that an AI model has learned a bias from training data. Per the AI Risk framework, what should be the immediate priority of the Governance function?

Question 36easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Why is 'AI Literacy' for the board of directors a key component of AI Governance?

Question 37mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

When designing an AI Risk Reporting dashboard for senior management, which TWO of the following should be visualized?

Question 38hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE items should be included in an AI 'Risk Assessment' report for a new project?

Question 39mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A firm adopts the 'Three Lines of Defense' model for AI. What is the specific responsibility of the 'Third Line' (Internal Audit)?

Question 40mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is considering outsourcing its AI development. How should the 'AI Risk Governance' policy be adjusted for third-party vendors?

Question 41hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is evaluating 'Model Risk Management' (MRM) tools for its AI governance. What is the most critical feature to look for to ensure compliance with external regulatory requirements?

Question 42hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

In the context of the AI RMF, what is the significance of the 'Measure' function for risk management?

Question 43easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the primary role of the AI 'Data Steward' within the AI Governance framework?

Question 44easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which document defines the 'AI Risk Appetite' for an organization?

Question 45mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the key purpose of the 'Govern' function in the NIST AI RMF?

Question 46mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the primary benefit of documenting 'AI Model Lineage'?

Question 47mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When an AI model is updated (e.g., retrained on new data), what action is required from an AI Risk Governance perspective?

Question 48mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE items are necessary for a comprehensive 'AI Governance Policy'?

Question 49mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

When building an AI Governance framework, which TWO of the following are essential for ensuring enterprise adoption?

Question 50easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which department is primarily responsible for ensuring AI models comply with data protection regulations like GDPR?

Question 51hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is using 'AI Model Monitoring' to track 'Concept Drift'. Why is this a risk governance issue?

Question 52easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the goal of an AI 'Model Inventory'?

Question 53hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When deploying a generative AI model, what 'Governance Control' is most critical for preventing the generation of harmful/inappropriate content?

Question 54hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE activities are part of the 'AI Risk Management' lifecycle?

Question 55easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the first step in performing an AI Risk Assessment?

Question 56mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

In the context of the Three Lines of Defense, which function constitutes the 'Second Line'?

Question 57hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the 'Accountability' principle in the NIST AI RMF intended to address?

Question 58mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

What is the primary risk associated with 'Shadow AI' in an organization?

Question 59mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

How should an 'AI Ethics Committee' interact with the 'AI Risk Governance' body?

Question 60mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

Which THREE factors should be evaluated when reviewing an AI model for 'Fairness'?

Question 61mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A firm is integrating AI into its ERM (Enterprise Risk Management). What is the primary benefit of a 'Common Risk Taxonomy' for AI?

Question 62hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Why is 'Model Validation' (distinct from testing) essential in an AI Governance framework?

Question 63easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which of the following is an example of an 'AI Risk' in a customer-facing service?

Question 64mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When reporting to the Board, what is the best way to present 'AI Risk'?

Question 65mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Your organization is integrating AI risks into the existing COSO Enterprise Risk Management (ERM) framework. Which action best ensures that AI-specific model drift risk is formally addressed within the 'Review and Revision' component?

Question 66mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A board of directors requests a dashboard to monitor AI risk exposure. Which metric provides the most effective board-level oversight regarding AI regulatory compliance?

Question 67easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

An organization is establishing an AI Risk Committee. Which stakeholder is most critical to include to ensure alignment between enterprise risk appetite and technical AI capabilities?

Question 68mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

You are mapping existing ISO 31000 risk management processes to an AI-specific application. Which step is most crucial to ensure 'Risk Treatment' is appropriately scaled for AI?

Question 69hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

When reporting AI risk to the board, which approach best demonstrates 'Risk Culture' maturity?

Question 70easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

Which document should a practitioner review to determine the organization's threshold for acceptable AI model bias?

Question 71mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

In the context of AI Supply Chain risk, what is the primary governance objective when evaluating a vendor's AI model transparency?

Question 72hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

You are auditing the integration of AI risk into the Enterprise Risk Management (ERM) system. Which finding indicates a failure in the governance structure?

Question 73mediummulti select

Read the full AI Risk Governance And Framework Integration explanation →

The board requires a new reporting structure for AI risk. Which TWO of the following should be included in the quarterly AI Risk Report to effectively communicate risk posture?

Question 74hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

You are integrating AI governance into the existing Corporate Governance framework. Which THREE of the following activities are essential to ensure the Board of Directors maintains adequate oversight?

Question 75hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A multinational bank has assigned its AI governance responsibilities across the Three Lines of Defense. The second line has drafted an AI risk appetite statement, but the board wants assurance that the first line's AI use cases remain within that appetite. Which activity should the second line perform to provide this assurance while preserving its independence?

Question 76mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A retail insurer is mapping its new generative AI claims assistant against the NIST AI Risk Management Framework. The Chief Risk Officer wants the framework functions to be traceable to existing enterprise risk processes. Which mapping approach best integrates the AI RMF functions with the insurer's ERM framework?

Question 77mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A global bank has adopted the NIST AI Risk Management Framework (AI RMF) and wants to ensure that its AI risk governance is integrated with its existing enterprise risk management (ERM) processes. The Chief Risk Officer asks the AI governance lead to identify the primary mechanism for achieving this integration. Which action best accomplishes this?

Question 78hardmultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A healthcare organization is implementing the NIST AI Risk Management Framework (AI RMF) and wants to ensure that its AI governance structure addresses the 'Govern' function's requirement for clear roles and responsibilities. The Chief AI Officer proposes several actions. Which action best satisfies the requirement for accountability and oversight?

Question 79easymultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A retail company is developing an AI governance framework based on the NIST AI Risk Management Framework (AI RMF). The Chief Risk Officer wants to ensure that the framework includes a process for continuously monitoring AI risks and updating controls. Which AI RMF function primarily addresses this need?

Question 80hardmulti select

Read the full AI Risk Governance And Framework Integration explanation →

A financial services firm is integrating the NIST AI Risk Management Framework (AI RMF) into its existing governance structure. The AI governance lead is tasked with ensuring that the 'Govern' function is properly implemented. Which two actions are essential for establishing effective AI risk governance? (Choose two.)

Question 81mediummultiple choice

Read the full AI Risk Governance And Framework Integration explanation →

A multinational corporation is aligning its AI risk governance with the NIST AI Risk Management Framework (AI RMF). The Chief Risk Officer wants to ensure that the organization's risk appetite for AI is clearly articulated and integrated into decision-making. Which action best supports this objective?