AAIR AI Risk Governance And Framework Integration Practice Question
The organization is updating its 'AI Risk Management Policy'. Which THREE components are essential to ensure it aligns with the 'Manage' function of the NIST AI RMF?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A defined mechanism for reporting and remediating non-compliant AI systems.
The 'Manage' function involves implementing controls. Essential components include clear policies on prioritization, documented operational procedures, and a process for ongoing monitoring and improvement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The marketing budget for upcoming AI product launches.
Why it's wrong here
This is business financial information, irrelevant to AI risk policy.
- ✓
A defined mechanism for reporting and remediating non-compliant AI systems.
Why this is correct
This ensures that policy violations are identified and fixed.
- ✗
A list of all employees who have access to the source code repository.
Why it's wrong here
This is an access control list, not a policy component.
- ✓
Criteria for prioritizing AI risks based on impact and likelihood (Risk-based prioritization).
Why this is correct
Prioritization is essential to focus resources on the highest-risk models.
- ✓
Procedures for documenting model performance monitoring and recalibration cycles.
Why this is correct
This addresses the requirement to manage risks through the model lifecycle.
About these practice questions
This AAIR question is part of Courseiva's 199-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official ISACA exam blueprint
This AAIR practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AAIR exam.