AI Governance And Program Management

When onboarding an AI startup vendor, what is the best strategy to manage 'Model Drift'?

In the context of the EU AI Act, what is the 'Provider's' obligation regarding conformity assessments for high-risk AI systems?

What is the primary role of an 'AI Ethics Board' in an organization's governance structure?

An organization is using RAG (Retrieval-Augmented Generation). What is the primary governance concern for the retrieved documents?

Which department should own the 'AI Ethics Policy'?

Which THREE actions should be included in an AI incident response plan?

Which TWO factors are critical when assessing the risk of a new Generative AI use case?

Which THREE factors increase 'AI Model Risk'?

Which TWO aspects of 'Transparency' are most important for AI stakeholders?

A company is adopting the ISO/IEC 42001 AI management system standard. What is the primary purpose of the 'Context of the Organization' clause?

How does 'Continuous Monitoring' differ from 'Point-in-Time Auditing'?

Which mechanism best ensures 'Auditability' of AI decision-making?

An organization is deploying an AI application that processes PII. The governance policy requires a formal AI impact assessment. Which activity is the most critical first step before model training begins?

A security manager is integrating AI governance into the existing NIST AI RMF framework. Which action best ensures alignment between AI security controls and business risk appetite?

Which team should lead the definition of 'AI Acceptable Use' policies?

When establishing an AI steering committee, which reporting cadence is most effective for ensuring board-level oversight of residual AI risk?

A multinational bank is deploying a proprietary LLM. Which approach provides the most robust assurance for model supply chain security?

Which metric is most appropriate for reporting the 'AI Security Posture' to the board?

When managing shadow AI, which strategy is most effective at the enterprise level?

What does 'Model Explainability' (XAI) primarily support in governance?

Which TWO components are essential for a robust AI Governance framework?

What is the primary function of an 'AI Steering Committee'?

An AI project is failing to meet its security requirements. Which governance process should be triggered to address this?

Which THREE activities should be included in an AI Security Governance Program to effectively manage model supply chain risks?

During an internal audit of the AI program, it is found that the organization lacks a 'Model Inventory'. What is the most immediate risk to the AI security program?

Which TWO areas should be covered by an AI procurement policy?

Which scenario best illustrates an 'AI Security Incident'?

An AI security team needs to ensure that internal AI tools comply with the organization's 'Human-in-the-Loop' policy. Which architectural control best enforces this governance requirement?

When assessing a third-party AI provider, which document is most essential for due diligence?

Which control is most effective against 'Prompt Injection' attacks?

Which TWO reporting formats are effective for executive AI oversight?

An enterprise is defining its 'AI System Inventory'. Which metadata attribute is most critical for assessing legal and regulatory risk?

When drafting an AI policy, how should the organization address 'Human-in-the-Loop' (HITL) requirements?

What is the primary role of 'Model Versioning' in AI governance?

A board of directors requests a summary of AI risk exposure. Which metric provides the most relevant insight into AI security program maturity?

Which TWO activities ensure 'AI Safety' in development?

Which document outlines the 'Roles and Responsibilities' for AI security?

Which document should define the organization's stance on AI transparency and explainability?

An organization is updating its AI governance policy for high-risk systems. Which TWO requirements should be mandated to ensure accountability and forensic capability?

Which THREE factors are critical when establishing an AI risk reporting structure for executive leadership?

Which phase of the AI Lifecycle is most critical for 'Bias Detection'?

Which THREE items should be included in an 'AI Inventory'?

An AI security lead is configuring a 'Model Risk Management' (MRM) framework. What is the main objective of a 'Model Validation' report?

When conducting an AI audit, what should be the primary focus of the 'Data Governance' review?

Which TWO aspects of 'Compliance' must be addressed by an AI governance program?

What is the benefit of 'AI Model Watermarking' for governance?

A company is performing an 'AI Impact Assessment' (AIA). Which domain is the most critical for identifying 'Privacy' risks?

An AI security manager is implementing an AI governance framework using the NIST AI RMF. Which action best demonstrates the 'Govern' function for a new generative AI deployment?

An AI security program manager is assessing AI risks. Which tool provides the most centralized oversight for AI model compliance?

When a model fails in production, what is the first step in the 'Incident Response' process?

Which THREE activities help manage 'AI Lifecycle' risk?

Which metric should be used to track 'Data Quality' for AI training?

What is the primary risk associated with 'Data Poisoning' in an AI governance program?

A firm is drafting a policy for 'AI Use in Marketing'. Which element is most important to include to ensure alignment with existing data protection regulations?

What is the goal of an 'AI Security Awareness Program'?

Which THREE documents are vital for an AI audit trail?

Who is ultimately responsible for the outcomes of an AI system deployed by a business unit?

When evaluating AI 'Bias', which concept must be governed first?

How should an organization classify AI systems for governance?

A company is developing an internal LLM-based tool. Which activity is required for 'Accountability'?

Which TWO strategies are recommended for 'Human-in-the-Loop' governance?

When designing a secure AI development lifecycle (SDLC), which of the following is an essential governance activity during the 'Model Deployment' phase?

Which THREE security controls are effective against 'Data Leakage' in AI?

Which THREE metrics should be monitored for 'Model Performance' and security?

Which activity is part of 'Ongoing AI Monitoring'?

What is 'AI Risk Appetite'?

An organization is implementing 'Red Teaming' for AI. What is the main governance objective?