Describe AI Risk Management Frameworks, Tools, and Techniques. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A healthcare organization is adopting an AI system for patient triage. The risk manager wants to use a framework that emphasizes a socio-technical approach, considering not only the technology but also the people, processes, and organizational context. Which framework is specifically designed with this socio-technical perspective for AI risk management?

   • AGDPR
   • BCIS Controls
   • CNIST AI Risk Management Framework (AI RMF)
   • DISO/IEC 27001
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary focus of the ISO/IEC 42001 standard in the context of AI risk management?

   • AProviding a management system standard for organizations to demonstrate responsible AI governance and risk management.
   • BDefining technical performance benchmarks for AI algorithms in specific applications.
   • CCertifying individual AI models as safe for deployment.
   • DSpecifying data privacy requirements for AI training datasets.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An organization is integrating AI risk management with its cybersecurity program. They have identified that AI-specific risks, such as bias and model drift, are not adequately covered by their current cybersecurity risk assessments. They want to use a framework that provides specific guidance for AI risks while also aligning with the NIST CSF. Which approach is most effective?

   • AUse the NIST AI RMF to identify and assess AI risks, then map them to the CSF functions for integrated treatment
   • BExpand the existing CSF risk assessment to include AI risks without using the AI RMF
   • CRun separate risk assessments for AI and cybersecurity without sharing results
   • DReplace the CSF with the AI RMF for all risk management
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An organization is using an AI system for credit scoring. The risk team needs to ensure that the model's decisions are explainable to regulators. They are considering tools that can provide insights into how the model makes decisions. Which type of tool is most appropriate for this requirement?

   • AModel interpretability tools
   • BData loss prevention tools
   • CRisk assessment templates
   • DMonitoring systems
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization is integrating its AI risk management activities with its existing cybersecurity risk management program, which is based on the NIST Cybersecurity Framework (CSF). They want to ensure that AI risks are addressed in a way that aligns with the CSF's functions. Which approach best supports this integration?

   • AMap AI risks to the CSF functions (Govern, Identify, Protect, Detect, Respond, Recover) and incorporate them into existing risk registers and processes
   • BReplace the CSF with the NIST AI RMF for all risk management
   • COnly use the AI RMF and ignore the CSF
   • DCreate a completely separate and isolated risk management process for AI
   Reveal Solution Discussion Select an answer first