AI Policies, Procedures, and Organizational Training AAIR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why is it important to integrate AI policies with existing governance structures?

   • ATo reduce the number of policies
   • BTo ensure consistency and compliance
   • CTo eliminate the need for audits
   • DTo make policies more complex
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   An organization has completed an AI risk training program. The training evaluation shows high satisfaction scores and high test scores, but a subsequent audit finds that employees are not following the AI risk procedures in practice. What does this discrepancy most likely indicate?

   • AThe training was effective in knowledge transfer but failed to change behavior, possibly due to a lack of reinforcement or practical application.
   • BThe training content was too difficult for employees to understand.
   • CThe employees did not actually complete the training.
   • DThe training evaluation metrics were not aligned with the learning objectives.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which element is typically included in an AI procedure?

   • AMission statement
   • BMarketing strategy
   • CEscalation paths
   • DFinancial budget
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A financial services firm is establishing an AI policy framework. The board has approved a risk appetite that permits low-risk AI for internal efficiency but prohibits high-risk AI affecting customers until further review. The CISO wants all AI security controls centralized under IT, while the data protection officer insists on embedding privacy impact assessments into every AI project. Which approach best aligns the policy framework with the stated risk appetite and stakeholder requirements?

   • AAdopt a single policy that allows all AI except customer-facing models, and delegate all security and privacy decisions to the CISO.
   • BDevelop a tiered AI policy with risk-based categories, assign policy ownership to a cross-functional AI governance committee, and require privacy impact assessments for all tiers.
   • CWrite separate policies for each department, letting each business unit define its own risk thresholds and controls.
   • DCreate a single AI policy that sets a uniform risk threshold for all AI use cases, with IT owning all security controls.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   During AI policy development, which activity is essential for ensuring stakeholder alignment?

   • APublishing the policy without review to save time
   • BFocusing only on technical requirements
   • CCopying a policy from another organization
   • DConsulting with relevant business and technical stakeholders
   Reveal Solution Discussion Select an answer first