Audit Readiness CRAGE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary role of the compliance or legal team in preparing for an AI audit?

   • ATo interpret regulatory requirements and ensure that audit criteria align with them.
   • BTo write the code for the AI system.
   • CTo market the AI system to customers.
   • DTo deploy the AI model to production.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A hospital is preparing for an audit of its AI-based patient triage system. The audit will assess compliance with healthcare regulations and the hospital's internal AI ethics policy. The hospital has a data science team, an IT department, a legal/compliance office, and clinical staff who use the system. The audit readiness effort is stalled because each department believes another is responsible for providing evidence. What is the most effective way to resolve this?

   • AAsk the legal/compliance office to collect all evidence, as they are ultimately responsible for regulatory compliance.
   • BLet the IT department handle the audit, as they manage the systems and can access all logs.
   • CConvene a cross-functional working group with a designated audit readiness lead who has authority to assign tasks and track progress.
   • DHave the data science team provide all evidence, as they developed the system and understand it best.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A government agency uses an AI system for benefits eligibility. New regulations are expected to take effect next year that will require additional fairness metrics and documentation. The agency wants to remain audit-ready. What is the most effective approach?

   • AEstablish a cross-functional working group to track regulatory changes and update the audit readiness plan accordingly
   • BAssume the current practices will be sufficient and make no changes
   • CConduct a one-time review of the current AI system and document the results
   • DWait until the regulations take effect and then conduct a gap analysis
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which stakeholder is typically responsible for providing evidence of model development and validation during an AI audit?

   • AEnd users of the AI system
   • BData scientists and machine learning engineers
   • CExternal auditors
   • DMarketing team
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A university is preparing for an audit of its AI-based admissions system. The audit will assess compliance with data protection regulations. The university has a data protection officer (DPO), an IT team, and the AI development team. Which stakeholder is primarily responsible for defining the audit criteria?

   • AThe data protection officer, in collaboration with legal and compliance teams
   • BThe AI development team, because they built the system
   • CThe external auditor, because they will conduct the audit
   • DThe IT team, because they manage the systems
   Reveal Solution Discussion Select an answer first