AI Governance and Frameworks CRAGE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the role of change management in implementing an AI governance framework?

   • ATo help employees adapt to new processes and embrace the governance framework
   • BTo replace the need for technical controls
   • CTo automate the enforcement of governance policies
   • DTo ensure that AI models are trained on the latest data
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In an organization's AI governance structure, which stakeholder group is typically responsible for setting the overall AI strategy and ensuring that AI initiatives align with the organization's mission and risk appetite?

   • ABoard of directors
   • BIT support staff
   • CCompliance team
   • DData scientists
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A multinational bank is deploying an AI system that approves consumer loan applications. The bank operates in the European Union and also serves customers in other regions. The compliance team must ensure the system meets regulatory expectations for high-risk AI, including human oversight and risk management. Which framework combination should the bank adopt as the foundation of its AI governance program?

   • AUse the EU AI Act as the binding regulatory baseline and map NIST AI RMF practices to its requirements for risk management and human oversight.
   • BRely on the bank's existing enterprise risk management framework without adding AI-specific controls.
   • CAdopt only the OECD AI Principles because they are internationally recognized and cover all necessary governance areas.
   • DImplement NIST AI RMF exclusively because it is the most comprehensive framework for AI risk management.
   Reveal Solution Discussion Select an answer first
5. 34expert · medium

   A company has an AI system that recommends personalized marketing offers. The system's recommendations sometimes produce biased outcomes for certain customer segments. The company must comply with both the EU AI Act and the NIST AI RMF. The risk team is deciding how to prioritize risk mitigation. Which approach best aligns with both frameworks?

   • AConduct a risk assessment that maps the bias risk to the EU AI Act's requirements and uses NIST AI RMF's risk management functions to prioritize mitigation.
   • BDefer risk mitigation until the EU AI Act is fully enforced.
   • CFocus only on NIST AI RMF because it provides more detailed risk management guidance.
   • DFocus only on the EU AI Act requirements because they are legally binding.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A global pharmaceutical company is developing an AI system to assist in drug discovery. The company operates in multiple countries, including the EU, the US, and countries with no AI-specific regulations. The system uses patient data, raising privacy concerns. The company wants to develop an AI governance policy that is compliant with the EU AI Act, aligns with NIST AI RMF, and addresses ethical considerations. The policy must also be practical for teams in different regions. Which approach should the company take?

   • ADevelop a single global policy based on the strictest regulatory requirements (EU AI Act) and apply it uniformly
   • BUse OECD AI Principles as the global policy and rely on self-assessment
   • CAdopt NIST AI RMF as the global policy and ignore the EU AI Act
   • DDevelop separate policies for each region based on local regulations
   Reveal Solution Discussion Select an answer first