Which of the following is an example of an AI procedure?

A statement that AI must be used ethically

A step-by-step guide for conducting an AI impact assessment

A description of the organization's AI vision

A list of AI-related risks and their likelihood

A company is developing an AI strategy that includes using AI for hiring decisions. The risk team has identified potential for bias and legal liability. The company wants to proceed but also wants to manage these risks effectively. What is the most effective risk management integration?

Limit the AI's role to resume screening and have humans make all final decisions.

Defer the AI hiring initiative until regulations are clearer.

Purchase liability insurance to cover potential legal costs from biased AI decisions.

Incorporate a mandatory bias impact assessment and human-in-the-loop review for all AI hiring tools into the strategy and policies.

A global bank is establishing an AI governance structure. The bank has multiple business units, each with its own AI initiatives. The board wants to ensure consistent oversight and risk management across all units, but also wants to allow flexibility for innovation. What is the most effective governance structure?

A central AI governance office that sets standards and policies, with local AI champions in each business unit to support implementation.

A fully decentralized structure where each business unit manages its own AI governance independently.

A structure where the board directly oversees every AI project.

A fully centralized structure where all AI decisions are made by a central committee.

Why should risk management principles be integrated into AI strategy and policy?

To guarantee that AI projects are always profitable

To transfer all AI risks to third-party vendors

To proactively identify and mitigate potential harms from AI systems

To eliminate the need for ongoing monitoring of AI systems

What is the primary purpose of aligning an organization's AI strategy with its overall business goals?

To guarantee that AI projects are completed on time and within budget

To satisfy external auditors that the organization has an AI strategy

To ensure AI initiatives directly support the organization's mission and objectives

To eliminate all risks associated with AI adoption

ISACAAdvanced in AI Security Management

Domain 1Objective 2

AI-Related Strategies, Policies, and Procedures AAISM Practice Questions (Page 5)

Part of the AI Governance and Program Management domain, which accounts for 31% of the AAISM exam.

28questions here

6free pages

8concepts

31%of the exam

Questions 21–25

21foundation · easy
Which of the following is an example of an AI procedure?
Select an answer first
22expert · hard
A company is developing an AI strategy that includes using AI for hiring decisions. The risk team has identified potential for bias and legal liability. The company wants to proceed but also wants to manage these risks effectively. What is the most effective risk management integration?
Select an answer first
23expert · hard
A global bank is establishing an AI governance structure. The bank has multiple business units, each with its own AI initiatives. The board wants to ensure consistent oversight and risk management across all units, but also wants to allow flexibility for innovation. What is the most effective governance structure?
Select an answer first
24foundation · easy
Why should risk management principles be integrated into AI strategy and policy?
Select an answer first
25foundation · easy
What is the primary purpose of aligning an organization's AI strategy with its overall business goals?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AAISM

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “AAISM” is a trademark of its owner, used for identification only.