AI Risk Program Management

You are the AI risk lead at a mid-sized insurer. The Chief Risk Officer asks you to establish a formal AI risk taxonomy that will be used consistently across all business units for identifying, assessing, and reporting AI risks. Which action best ensures the taxonomy will be adopted and remain useful over time?

A firm is using the NIST AI Risk Management Framework to document its AI risk program. Which approach best ensures that AI risk metrics are dynamic?

Which TWO documents are essential to include in the AI Risk Project 'Review Pack'?

Which TWO factors should be included in an AI risk appetite statement?

Which document is essential for defining the roles and responsibilities within an AI Risk Program?

When integrating AI risk into the broader ERM (Enterprise Risk Management) framework, which approach is most effective?

When documenting an AI Risk Program, what should be included in the 'AI Asset Register'?

In the context of AI risk management, what does the 'Human-in-the-Loop' (HITL) concept primarily aim to achieve?

Which TWO stakeholders are most important to engage when establishing an AI risk appetite?

Which role is primarily responsible for ensuring that AI-generated content adheres to intellectual property risk policies?

An enterprise is establishing an AI Governance Committee. Which organizational structure best ensures that risk management is integrated into the AI development lifecycle?

An organization discovers that their AI model exhibits bias toward a specific demographic. What is the most important step in the Incident Response process?

A retail bank's AI risk committee is defining how third-party foundation model providers should be governed across 40 planned use cases. Legal notes that several providers reserve the right to change model versions with limited notice, and business units want to avoid re-approval delays for every update. Which approach BEST balances risk oversight with delivery speed?

A fintech company is preparing its annual AI risk report for the board. The Chief Risk Officer wants the report to demonstrate that the AI risk program is operating effectively, not merely listing AI use cases. Which two elements most directly provide evidence of an effective operating AI risk program? (Choose two.)

What is 'Shadow AI'?

Which TWO aspects of 'Data Governance' are critical for AI risk management?

In a cross-functional AI governance meeting, the Data Science team wants to deploy a new model, but the Legal team is concerned about data privacy. How should the AI Risk Manager resolve this?

When defining KPIs for an AI Governance program, which metric is most predictive of long-term model robustness?

When considering the 'Risk of Bias' in an AI system, which THREE components should be audited?

When addressing 'Explainability' as an AI risk, which approach is most effective for a non-technical stakeholder?

When drafting a vendor management policy for AI, what is the most important clause to include?

When assessing the risk of AI-generated content, which factor is the most important for calculating 'Impact'?

Which of the following is an example of an 'AI Risk Metric'?

What is the primary responsibility of a 'Model Owner' in an AI risk framework?

A company is scaling its AI initiatives across five business units. What is the most effective way to ensure consistent risk measurement?

You are analyzing the risk of a generative AI implementation. Which metric most effectively measures 'model transparency' for a risk dashboard?

When implementing an AI Risk Management program, which THREE components are necessary for effective monitoring?

The AI Risk Governance Committee is defining the risk appetite for a new generative AI chatbot. Which THREE factors must be considered to align with organizational risk tolerance?

Which THREE factors should be considered when assessing the 'Risk Level' of an AI application?

Which THREE roles should have oversight authority in the AI Risk Program?

Your organization is implementing an AI Risk Register. Which approach provides the most effective cross-functional coordination for identifying bias in a new HR recruitment AI?

Which THREE components are necessary for effective cross-functional AI risk coordination?

A company is utilizing a third-party LLM service. Which risk is specifically heightened by this arrangement?

Why is 'Data Lineage' important in an AI risk management program?

You are defining KPIs for an AI project in a regulated industry. Which metric best captures model reliability over time?

What is the primary reason for maintaining an 'AI Model Inventory'?

Which TWO items are considered 'AI Infrastructure' risks?

Which metric is useful for measuring the 'Efficiency' of an AI risk program?

A hospital network deploys a clinical decision support model that recommends sepsis protocols. During a risk assessment, the AI risk manager identifies that clinicians frequently override the model's recommendations when they conflict with bedside judgment. Which risk treatment strategy is most appropriate for this situation?

Which TWO items are considered 'AI Model Artifacts' that should be kept for audit purposes?

When designing an AI Risk Committee, which TWO of the following roles are essential for ensuring a holistic view of risk?

You are auditing an AI project. Which finding suggests a failure in AI risk management governance?

Which TWO tasks are part of the 'AI Risk Assessment' process?

Which document is the most appropriate starting point for an AI Risk assessment for a new machine learning project?

Which action should be taken if a model's performance consistently falls outside the 'Risk Appetite' threshold?

Which activity is a foundational requirement for building a sustainable AI risk program?

When drafting an AI risk policy, which element must be defined to provide clear guidance on acceptable AI outcomes?

An enterprise is establishing its AI Governance Committee. Which stakeholder is most critical to include to ensure alignment between AI technical capabilities and the organization's enterprise risk appetite?

Which phase of the AI lifecycle is most critical for initial risk mitigation?

An organization is integrating AI risk into its enterprise risk management (ERM) framework. What is the first step in this integration process?

You are the AI risk lead at a health insurer. A vendor-supplied claims-triage model that scores prior-authorization requests is scheduled to go live in 30 days. Internal audit asks how the organization will detect silent performance drift once the model is operating, given that the vendor will not expose training data or model weights. Which control is MOST appropriate to establish before go-live?

A project lead argues that AI model performance metrics alone are sufficient for risk management. Why is this incorrect?

Which THREE actions should be taken when integrating AI risk into the broader ERM (Enterprise Risk Management) framework?

You are establishing an AI risk appetite framework using the NIST AI RMF. Which action best ensures alignment between AI innovation velocity and organizational risk tolerance?

When setting up an AI risk monitoring dashboard, what is the most important consideration for ensuring executive buy-in?

Which stage of the AI lifecycle should risk management activities begin?

An organization is updating its risk appetite statement for AI. Which specific element should be addressed to manage the 'hallucination' risk of LLMs?

When coordinating AI risk across a global organization, why is it critical to include local legal counsel in the AI steering committee?

What is the primary purpose of an 'AI Risk Dashboard' for executive leadership?

Which documentation is necessary to provide to auditors for an AI system?

An organization is establishing an AI governance framework. Which approach is most effective for aligning AI risk appetite with enterprise-wide risk management (ERM)?

You are managing AI supply chain risk. Which control is most critical for third-party AI models?

To ensure cross-functional coordination, you are designing a workflow for AI incident reporting. Which group should be the first point of contact upon detecting an AI model bias issue?

Which TWO strategies are recommended for 'Mitigating' AI model bias?

If an AI model relies on an open-source library that is found to have a security vulnerability, who is responsible for managing this risk?

Which of the following is a key component of 'AI Risk Governance'?

When establishing KPIs for an AI program, what is the risk of focusing solely on 'Model Accuracy'?

What is 'Bias' in the context of AI risk?

When coordinating between Legal and Data Science teams, what is the best way to handle 'Explainability' requirements?

When setting KPIs for an AI risk program, which metric is a leading indicator of potential model bias?

When performing an AI risk assessment, which question is most appropriate to ask?

In a retail company, which AI risk is most likely to cause direct financial loss?

Which TWO factors should be documented in an AI Model Card?

Which THREE areas should be covered in an AI risk management program?

A retail company's AI governance committee is drafting its charter. The committee wants to define clear decision rights so that disputes over AI risk acceptance do not stall deployment decisions. Which element is most essential to include in the charter?

Which THREE types of 'Bias' need to be managed in an AI project?

A cross-functional committee is evaluating the deployment of a high-impact AI model. Which TWO factors are critical to include in the initial AI risk assessment to ensure comprehensive coverage?

Which of the following is a key objective of an AI Risk Management Program?

A global bank's AI risk committee is defining key risk indicators (KRIs) for its portfolio of customer-facing AI systems. The committee wants KRIs that provide early warning of emerging risk rather than lagging confirmation of past failures. Which KRI design best meets this objective?

Which TWO types of documentation are critical for AI Transparency requirements?

Which TWO metrics are most appropriate for measuring the effectiveness of an AI Risk Program?

Which of the following is a classic example of 'AI Hallucination' that needs monitoring?

Why is it critical to have 'Human-in-the-Loop' (HITL) for high-risk AI decisions?

Which TWO teams should be involved in the initial risk review for an AI chatbot?

When an AI model fails in production, what is the 'Post-Mortem' goal?

Which team is usually responsible for the 'Technical Implementation' of risk controls in an AI model?

In an AI risk program, how should 'Residual Risk' be treated?