AAISM AI Governance And Program Management Practice Question
Which THREE activities should be included in an AI Security Governance Program to effectively manage model supply chain risks?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verifying the integrity and origin of pre-trained models via digital signatures.
Managing supply chain risks requires provenance, dependency scanning, and license verification to ensure security and compliance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Verifying the integrity and origin of pre-trained models via digital signatures.
Why this is correct
Digital signatures ensure that the model has not been tampered with by third parties.
- ✓
Automating the review of model license agreements to ensure compliance with open-source policies.
Why this is correct
License compliance is a core component of supply chain governance.
- ✗
Conducting monthly performance benchmarking of model inference speed.
Why it's wrong here
Performance benchmarking does not mitigate supply chain security risks.
- ✗
Increasing the budget for AI model research and development.
Why it's wrong here
Budget increases are not a risk mitigation activity.
- ✓
Maintaining a Software Bill of Materials (SBOM) for all AI model components and dependencies.
Why this is correct
An SBOM is essential for tracking security vulnerabilities in the supply chain.
About these practice questions
Courseiva writes every AAISM question from scratch — 205 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official ISACA exam blueprint
This AAISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AAISM exam.