AI Controls Management (e.g., Evaluation, Selection, Validation) AAIR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A retail company is selecting controls for its AI-based inventory forecasting system. The risk assessment shows that overstocking leads to high holding costs, while understocking leads to lost sales. The company has a moderate risk appetite and wants to avoid excessive control complexity. Which control selection is most balanced?

   • ADeploy a full automated optimization system that continuously adjusts inventory levels without human input
   • BImplement a threshold-based alert that triggers human review when forecast error exceeds a predefined limit
   • CRely on the existing enterprise resource planning system's default controls
   • DConduct a quarterly manual review of all inventory decisions
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the first step in a structured process for selecting AI controls?

   • AConduct a risk assessment to identify and prioritize AI-related risks
   • BDocument the control decisions and communicate them to stakeholders
   • CEvaluate the effectiveness of existing controls
   • DImplement the selected controls immediately
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary input for a continuous control improvement feedback loop?

   • AThe AI model's training data
   • BPerformance metrics and emerging risks
   • CThe organization's marketing strategy
   • DThe initial risk assessment
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A healthcare provider is integrating AI controls into a patient diagnosis support system. The system is already in production, and the risk team has identified a new control that should have been implemented during development. The control requires changes to the model's input data pipeline. The provider faces a conflict between implementing the control quickly to reduce risk and avoiding disruption to clinical operations. What is the best approach?

   • AImplement the control in a staging environment, validate it thoroughly, then deploy it during a planned maintenance window with a rollback plan
   • BImplement the control only in the model's monitoring phase to avoid pipeline changes
   • CDocument the control as a known gap and defer implementation until the next major system upgrade
   • DDeploy the control immediately to production to reduce risk as soon as possible
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   To whom should AI control decisions be communicated to ensure effective governance?

   • AAll relevant stakeholders, including development, risk, and compliance teams
   • BOnly the AI development team
   • COnly external auditors
   • DOnly senior management
   Reveal Solution Discussion Select an answer first