AAIR AI Risk Governance And Framework Integration Practice Question
Your organization is integrating AI risks into the existing COSO Enterprise Risk Management (ERM) framework. Which action best ensures that AI-specific model drift risk is formally addressed within the 'Review and Revision' component?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Integrating model performance metrics into the quarterly enterprise risk assessment and management review processes.
The COSO ERM framework's 'Review and Revision' component requires assessing whether the risk management practices remain effective as the risk landscape changes. Integrating AI model performance monitoring into established periodic risk reviews ensures the organization adapts to evolving model behaviors.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Integrating model performance metrics into the quarterly enterprise risk assessment and management review processes.
Why this is correct
This aligns with the requirement to review risk management performance against evolving risks.
- ✗
Establishing automated triggers within the CI/CD pipeline to halt deployment if drift exceeds threshold.
Why it's wrong here
This is an operational control, not an ERM framework review activity.
- ✗
Mapping AI model inventory to the IT asset register in the CMDB.
Why it's wrong here
This is a governance and inventory task, not a 'Review and Revision' activity.
- ✗
Assigning a Data Scientist to the Board Risk Committee.
Why it's wrong here
While potentially helpful, this is an organizational structure change rather than a process integration step.
About these practice questions
This AAIR question is part of Courseiva's 199-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official ISACA exam blueprint
This AAIR practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AAIR exam.