Audit Readiness CRAGE Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A large enterprise is preparing for a regulatory audit of its AI systems. The audit will require evidence from multiple departments, including data science, IT, legal, and business units. The company has a decentralized structure, and each department has its own documentation practices. The audit is in six weeks. What is the most effective way to ensure audit readiness?

   • AFocus on the data science department because they own the AI models
   • BEstablish an audit readiness task force with representatives from each department and a clear escalation path
   • CHire an external consultant to gather all evidence independently
   • DAsk each department to submit their documentation directly to the auditor
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A logistics company is preparing for an audit of its AI route optimization system. The auditor has requested evidence of model performance monitoring and incident response. The company has logs scattered across different systems and no central repository. What is the most effective way to organize the evidence?

   • ACreate a centralized evidence repository with indexed folders and version control
   • BWait for the auditor to specify exactly which logs they need
   • CProvide the auditor with direct access to all individual systems
   • DSummarize the logs in a single spreadsheet and share it with the auditor
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the first step in performing a gap analysis for AI governance?

   • AIdentifying the current state of governance practices and comparing them to desired criteria.
   • BImmediately implementing remediation actions.
   • CDeleting all existing governance documentation.
   • DHiring external consultants.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Why is it important to maintain organized documentation of audit evidence?

   • ATo prevent any external review of the audit process.
   • BTo make the audit report longer and more detailed.
   • CTo ensure that evidence is easily accessible and can be traced to support audit findings.
   • DTo increase the storage cost of the audit process.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is a key characteristic of a reliable audit log?

   • AIt is tamper-evident and cannot be easily altered without detection.
   • BIt is accessible only to the AI model itself.
   • CIt is automatically deleted after 24 hours.
   • DIt only records successful operations.
   Reveal Solution Discussion Select an answer first