AI Controls Management (e.g., Evaluation, Selection, Validation) AAIR Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   When evaluating an AI control for potential adoption, which criterion focuses on whether the control achieves its intended risk-reduction objective without introducing excessive operational burden?

   • AEfficiency
   • BCompleteness
   • CEffectiveness
   • DAlignment with risk appetite
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A government agency is evaluating a control that redacts personally identifiable information (PII) from AI-generated summaries before they are released to the public. The agency's risk appetite is very low for privacy breaches, but the control must not significantly delay the release of time-sensitive information. Which evaluation criterion should be weighted most heavily?

   • AEase of integration with existing document management systems
   • BEffectiveness in preventing PII leakage, even if it adds some processing delay
   • CCost of implementation relative to the agency's IT budget
   • DEfficiency in terms of minimal processing time to meet release deadlines
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   An energy company is evaluating controls for its AI-based grid load forecasting system. The system is critical for preventing blackouts, and the company has a very low risk appetite for forecast errors. However, the company also has a limited budget for AI risk management. Which control evaluation approach best balances these constraints?

   • ASelect the most expensive control because it is likely to be the most effective
   • BDefer control implementation until the budget increases
   • CChoose the cheapest control to stay within budget, regardless of effectiveness
   • DEvaluate controls based on their effectiveness in reducing forecast error, and select the most cost-effective option that meets the risk appetite
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which validation method involves executing the AI control under controlled conditions to verify it behaves as expected?

   • ASimulation
   • BDocumentation review
   • CIndependent review
   • DTesting
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which factor is most important to consider when selecting an AI control, according to the structured selection process?

   • AThe control's popularity in the industry
   • BThe control's cost, regardless of benefit
   • CThe control's compatibility with existing legacy systems
   • DThe control's alignment with the organization's risk appetite
   Reveal Solution Discussion Select an answer first