A healthcare provider is deploying AI for clinical decision support. The organization already has an enterprise risk management (ERM) framework and a clinical governance committee. The board wants to ensure AI initiatives are overseen without creating a duplicate, siloed governance structure. What is the most effective approach?

Assign AI oversight to the IT department, since AI is a technology initiative

Integrate AI oversight into the existing ERM and clinical governance committees, with AI-specific terms of reference

Create a new AI governance committee that reports directly to the board, separate from existing committees

Delegate all AI oversight to the data science team, as they understand the models best

A multinational corporation uses an AI system to screen job applicants. The system was developed by a vendor, and the HR department uses it. The legal department has raised concerns about potential bias. The board wants clear accountability for the system's decisions. Which allocation of accountability is most appropriate?

The vendor is accountable because they developed the algorithm

The legal department is accountable because they identified the risk

The board is accountable because they have ultimate governance responsibility

The HR department is accountable because they own the hiring process and use the system

What does assigning AI accountability involve?

Making the AI system itself accountable

Distributing responsibility equally among all employees

Allocating clear responsibility for AI decisions, risks, and impacts to specific roles

Assigning accountability only to external auditors

Which of the following best describes the relationship between AI governance and enterprise risk management?

AI governance should be a subset of the organization's overall risk governance

AI governance is independent and unrelated to ERM

ERM is a subset of AI governance

What should be included in documentation of AI roles and responsibilities?

Clear descriptions of each role, its responsibilities, and escalation paths

The source code of all AI models

A list of all AI-related incidents

Only the names of the AI developers

ISACAAdvanced in AI Risk

Domain 1Objective 3

AI Ownership, Oversight, and Accountability AAIR Practice Questions (Page 1)

Part of the AI Risk Governance and Framework Integration domain, which accounts for 37% of the AAIR exam.

29questions here

6free pages

6concepts

37%of the exam

Questions 1–5

1application · medium
A healthcare provider is deploying AI for clinical decision support. The organization already has an enterprise risk management (ERM) framework and a clinical governance committee. The board wants to ensure AI initiatives are overseen without creating a duplicate, siloed governance structure. What is the most effective approach?
Select an answer first
2application · medium
A multinational corporation uses an AI system to screen job applicants. The system was developed by a vendor, and the HR department uses it. The legal department has raised concerns about potential bias. The board wants clear accountability for the system's decisions. Which allocation of accountability is most appropriate?
Select an answer first
3foundation · easy
What does assigning AI accountability involve?
Select an answer first
4foundation · easy
Which of the following best describes the relationship between AI governance and enterprise risk management?
Select an answer first
5foundation · easy
What should be included in documentation of AI roles and responsibilities?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AAIR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “AAIR” is a trademark of its owner, used for identification only.

AI Ownership, Oversight, and Accountability AAIR Practice Questions (Page 1)

Questions 1–5

What does assigning AI accountability involve?

Which of the following best describes the relationship between AI governance and enterprise risk management?

What should be included in documentation of AI roles and responsibilities?

Keep studying — AI Risk Governance and Framework Integration