AI Risk Governance And Framework Integration

You are mapping AI risks to the NIST AI RMF. Which step is essential when documenting the 'Map' function for a high-risk autonomous system?

The AI Governance Committee is defining the roles for AI Risk oversight. Which TWO functions are essential for the 'Three Lines of Defense' model in AI Risk?

What is the first step in performing an AI Risk Assessment?

You are integrating AI governance into the existing Corporate Governance framework. Which THREE of the following activities are essential to ensure the Board of Directors maintains adequate oversight?

A firm adopts the 'Three Lines of Defense' model for AI. What is the specific responsibility of the 'Third Line' (Internal Audit)?

When reporting AI risk to the board, which approach best demonstrates 'Risk Culture' maturity?

Which THREE items should be included in an AI 'Risk Assessment' report for a new project?

What is the primary benefit of documenting 'AI Model Lineage'?

Which TWO of the following governance actions should a Chief Risk Officer (CRO) implement to align AI risk with the COSO Enterprise Risk Management (ERM) framework?

Which TWO of the following are considered 'High-Risk' AI use cases that require enhanced oversight by the Governance Committee?

Which THREE items are necessary for a comprehensive 'AI Governance Policy'?

In the context of the Three Lines of Defense, which function constitutes the 'Second Line'?

When integrating AI risk into existing ERM, which THREE aspects of an AI model lifecycle must be audited to ensure compliance?

A firm is establishing an AI Governance Committee. Which TWO groups should be represented to ensure comprehensive oversight?

An organization is establishing an AI Risk Committee. Which stakeholder is most critical to include to ensure alignment between enterprise risk appetite and technical AI capabilities?

Which THREE factors are essential to consider when determining the 'AI Risk Appetite' for an enterprise?

When designing an AI Risk Reporting dashboard for senior management, which TWO of the following should be visualized?

What is the goal of an AI 'Model Inventory'?

A multinational bank has assigned its AI governance responsibilities across the Three Lines of Defense. The second line has drafted an AI risk appetite statement, but the board wants assurance that the first line's AI use cases remain within that appetite. Which activity should the second line perform to provide this assurance while preserving its independence?

Which of the following is an example of an 'AI Risk' in a customer-facing service?

Which document should a practitioner review to determine the organization's threshold for acceptable AI model bias?

A manufacturing firm is adopting a 'Privacy by Design' approach for AI. How does this integrate with the AI Risk Governance framework?

In the context of the AI RMF, what is the significance of the 'Measure' function for risk management?

An organization discovers that an AI model has learned a bias from training data. Per the AI Risk framework, what should be the immediate priority of the Governance function?

What is the primary risk associated with 'Shadow AI' in an organization?

A retail insurer is mapping its new generative AI claims assistant against the NIST AI Risk Management Framework. The Chief Risk Officer wants the framework functions to be traceable to existing enterprise risk processes. Which mapping approach best integrates the AI RMF functions with the insurer's ERM framework?

Which THREE components must be included in an AI Model 'Control Framework' to ensure effective risk mitigation?

A multinational corporation is aligning its AI risk governance with the NIST AI Risk Management Framework (AI RMF). The Chief Risk Officer wants to ensure that the organization's risk appetite for AI is clearly articulated and integrated into decision-making. Which action best supports this objective?

Which department is primarily responsible for ensuring AI models comply with data protection regulations like GDPR?

In the context of AI model risk management, what is the role of an 'AI Model Inventory' within the governance framework?

A retail company is developing an AI governance framework based on the NIST AI Risk Management Framework (AI RMF). The Chief Risk Officer wants to ensure that the framework includes a process for continuously monitoring AI risks and updating controls. Which AI RMF function primarily addresses this need?

Which document defines the 'AI Risk Appetite' for an organization?

Which THREE activities are part of the 'AI Risk Management' lifecycle?

A multinational corporation is establishing an AI Risk Governance Committee. Who should chair this committee to ensure alignment with enterprise-wide risk appetite?

Why is 'AI Literacy' for the board of directors a key component of AI Governance?

An organization is using 'AI Model Monitoring' to track 'Concept Drift'. Why is this a risk governance issue?

Which document is the primary reference for defining an organization's AI Risk Governance structure?

When deploying a generative AI model, what 'Governance Control' is most critical for preventing the generation of harmful/inappropriate content?

When building an AI Governance framework, which TWO of the following are essential for ensuring enterprise adoption?

An organization is evaluating 'Model Risk Management' (MRM) tools for its AI governance. What is the most critical feature to look for to ensure compliance with external regulatory requirements?

How should an 'AI Ethics Committee' interact with the 'AI Risk Governance' body?

During a board-level review, a bank needs to demonstrate the effectiveness of its AI Risk Governance. Which metric should be presented to the board to align with the 'Accountability' principle of the AI RMF?

The board requires a new reporting structure for AI risk. Which TWO of the following should be included in the quarterly AI Risk Report to effectively communicate risk posture?

What is the key purpose of the 'Govern' function in the NIST AI RMF?

Why is 'Model Validation' (distinct from testing) essential in an AI Governance framework?

A firm is integrating AI into its ERM (Enterprise Risk Management). What is the primary benefit of a 'Common Risk Taxonomy' for AI?

An organization is considering outsourcing its AI development. How should the 'AI Risk Governance' policy be adjusted for third-party vendors?

Which THREE components must be included in an AI Risk Register to satisfy ISO/IEC 42001 requirements?

During a board meeting, the Chief Risk Officer needs to present AI model performance trends. Which metric is most critical for board-level reporting?

An organization is integrating AI risk into its existing ISO 31000 framework. How should the 'Risk Assessment' process be modified to account for AI-specific 'black box' issues?

An organization is using a centralized AI Governance structure. What is the biggest risk of this approach compared to a decentralized one?

A bank's AI Governance policy requires a 'bias test' for all customer-facing models. What is the most important element to document in the audit trail?

When reporting to the Board, what is the best way to present 'AI Risk'?

What is the 'Accountability' principle in the NIST AI RMF intended to address?

In the context of AI Supply Chain risk, what is the primary governance objective when evaluating a vendor's AI model transparency?

You are auditing the integration of AI risk into the Enterprise Risk Management (ERM) system. Which finding indicates a failure in the governance structure?

A board of directors requests a dashboard view of AI model drift. Which metric is most appropriate for a board-level risk report?

A healthcare organization is implementing the NIST AI Risk Management Framework (AI RMF) and wants to ensure that its AI governance structure addresses the 'Govern' function's requirement for clear roles and responsibilities. The Chief AI Officer proposes several actions. Which action best satisfies the requirement for accountability and oversight?

An organization is revising its AI Governance to include 'Human-in-the-loop' (HITL) requirements. Why is this a critical risk mitigation strategy?

When an AI model is updated (e.g., retrained on new data), what action is required from an AI Risk Governance perspective?

A board of directors requests a dashboard to monitor AI risk exposure. Which metric provides the most effective board-level oversight regarding AI regulatory compliance?

What is the primary role of the AI 'Data Steward' within the AI Governance framework?

Your organization is integrating AI risks into the existing COSO Enterprise Risk Management (ERM) framework. Which action best ensures that AI-specific model drift risk is formally addressed within the 'Review and Revision' component?

A financial institution is integrating AI risk into its ERM framework. Which action most effectively aligns AI risk appetite with enterprise risk appetite?

A company is deploying an AI system that interacts with human users. According to the AI RMF, what should be the focus of the 'Map' function in the risk governance process?

You are mapping existing ISO 31000 risk management processes to an AI-specific application. Which step is most crucial to ensure 'Risk Treatment' is appropriately scaled for AI?

A global bank has adopted the NIST AI Risk Management Framework (AI RMF) and wants to ensure that its AI risk governance is integrated with its existing enterprise risk management (ERM) processes. The Chief Risk Officer asks the AI governance lead to identify the primary mechanism for achieving this integration. Which action best accomplishes this?

When integrating AI risk into the corporate GRC (Governance, Risk, and Compliance) platform, what is the best practice for handling 'AI Model Drift' alerts?

When reporting AI risks to the Board of Directors, which THREE elements should be included to ensure informed decision-making?

Which THREE factors should be evaluated when reviewing an AI model for 'Fairness'?

A financial firm is integrating AI risk into its ERM. The Chief Risk Officer asks for a mapping between the NIST AI Risk Management Framework (RMF) and the existing COSO ERM framework. Which action most effectively facilitates this alignment?

A financial services firm is integrating the NIST AI Risk Management Framework (AI RMF) into its existing governance structure. The AI governance lead is tasked with ensuring that the 'Govern' function is properly implemented. Which two actions are essential for establishing effective AI risk governance? (Choose two.)