AI-Related Strategies, Policies, and Procedures AAISM Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A manufacturing company wants to use AI to optimize its supply chain. The company has a legacy IT environment, limited AI expertise, and a strict budget. The board wants to see quick wins but also requires long-term scalability. The risk team is concerned about supply chain disruptions. What is the most balanced AI strategy?

   • AOutsource the entire AI initiative to a vendor to avoid internal capability building.
   • BFocus only on quick wins and defer any long-term strategy until later.
   • CImmediately implement a large-scale AI platform across all plants to achieve maximum efficiency.
   • DStart with a small pilot project in one plant, using a proven AI solution, while building internal expertise and a governance framework for future scaling.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   An organization has an AI policy that has not been updated in three years. During that time, new AI regulations were introduced, and the organization experienced an AI incident that revealed a gap in the policy. The board wants to ensure this does not happen again. What is the most effective continuous improvement mechanism?

   • AConduct a one-time comprehensive review of the policy and update it.
   • BFreeze the policy until the regulatory environment stabilizes.
   • CImplement a quarterly policy review process that incorporates regulatory changes, incident reports, and stakeholder feedback.
   • DAssign the AI vendor to monitor regulatory changes and update the policy.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a risk management principle that should be reflected in AI policy?

   • AAll risks should be avoided regardless of potential benefits
   • BRisk treatment options should be evaluated and selected based on the organization's risk appetite
   • CRisk acceptance decisions should be made at the lowest possible level
   • DRisk assessment should be conducted only after AI deployment
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An organization's AI strategy includes a goal to automate customer service responses. The risk management team has identified potential reputational and compliance risks. What is the most appropriate way to integrate risk management into the AI strategy?

   • ATransfer all AI risks to an insurance policy.
   • BCreate a separate risk management plan that is not linked to the AI strategy.
   • CIncorporate risk assessment and mitigation steps directly into the AI project lifecycle and strategy roadmap.
   • DDefer risk management until after the AI system is deployed.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A global software company is updating its AI policies to comply with the EU AI Act. The company also operates in countries with no specific AI regulations. What is the most effective approach to ensure compliance across all markets?

   • AAdopt only the regulations of the country where the AI is developed.
   • BApply the EU AI Act requirements as the baseline for all AI deployments worldwide.
   • CCreate separate AI policies for each country to reflect local regulations.
   • DWait for global AI regulations to be finalized before updating policies.
   Reveal Solution Discussion Select an answer first