ISO/IEC 42001 Alignment CRAGE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following is a key component of an ISO/IEC 42001 implementation roadmap?

   • ACreating a single document that contains all possible AI risks.
   • BEnsuring that all AI systems are decommissioned during implementation.
   • CFocusing only on technical AI model improvements.
   • DDefining roles, responsibilities, and timelines for each implementation activity.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which principle is most important when aligning an AI governance framework with ISO/IEC 42001?

   • APrioritizing the creation of a separate, standalone AI governance framework that operates independently of other business processes.
   • BFocusing exclusively on technical AI model validation to ensure high accuracy.
   • CEnsuring that governance processes are risk-based and integrated into the organization's overall management system.
   • DEnsuring that all AI decisions are made by automated systems without human intervention.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of the ISO/IEC 42001 standard?

   • ATo replace all existing AI governance frameworks with a single global regulatory requirement for AI development.
   • BTo define technical performance benchmarks for AI algorithms to ensure they achieve maximum accuracy on standardized datasets.
   • CTo certify individual AI models as safe and unbiased before they are deployed in production environments.
   • DTo provide a framework for establishing, implementing, maintaining, and continually improving an AI management system within an organization.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A healthcare organization has completed a gap analysis against ISO/IEC 42001 and found that it lacks a documented AI policy, formal risk assessment procedures, and internal audit processes. The organization wants to achieve certification within 12 months. Which implementation roadmap sequence is most appropriate?

   • AConduct internal audits first to establish a baseline, then write the AI policy, then implement risk assessment procedures, and finally schedule the certification audit.
   • BDefine the AI management system scope and policy, implement risk assessment procedures, conduct internal audits, then perform a management review before the certification audit.
   • CSchedule the certification audit immediately and use the audit findings to build the AI policy and risk assessment procedures.
   • DImplement risk assessment procedures first, then define the AI policy, then conduct internal audits, and then perform a management review.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A technology company has maintained ISO/IEC 42001 certification for two years. The AI governance team notices that the risk assessment process is not being consistently applied across new AI projects, and some project teams are bypassing the documented approval workflow. What should the team do to maintain alignment with ISO/IEC 42001?

   • AInvestigate the root cause of the noncompliance, update the risk assessment process and approval workflow, and provide refresher training to project teams.
   • BRevoke ISO/IEC 42001 certification because the process is not being followed consistently.
   • CReplace the risk assessment process with a simpler checklist that requires less effort from project teams.
   • DIgnore the issue because the certification is valid for three years and the next surveillance audit is far away.
   Reveal Solution Discussion Select an answer first