A logistics company uses an AI route optimization system. The risk assessment identified a risk of the AI making unsafe routing decisions in hazardous conditions. The company has a very low risk appetite for safety incidents. Which risk treatment option is most appropriate?

Transfer the risk by purchasing liability insurance.

Accept the risk because the company has a low risk appetite, which means they are willing to accept some risk.

Avoid the risk by discontinuing the use of AI for route optimization entirely.

Mitigate the risk by adding safety constraints and human oversight for hazardous conditions.

A company has multiple AI risks that require treatment, but limited budget and resources. The risk manager must develop a treatment plan. Which approach is most effective?

Prioritize risks based on their severity and the cost-effectiveness of treatment, and schedule treatments accordingly.

Treat all risks simultaneously to ensure comprehensive coverage.

Treat the easiest risks first to build momentum.

Defer treatment until the next budget cycle.

Why is it important to assess residual risk after implementing AI risk treatments?

To assign responsibility for the treatment actions

To ensure the remaining risk is within acceptable thresholds

To calculate the cost of the treatment measures

To identify new risks that were not previously considered

Which activity is part of the risk treatment monitoring and review process?

Conducting the initial risk identification workshop

Periodically reviewing the effectiveness of implemented controls

Defining the organization's risk appetite

Selecting the risk treatment options

What is the primary purpose of defining risk thresholds for AI systems?

To comply with external regulations

To ensure all AI risks are treated equally

To align risk acceptance with the organization's risk appetite and tolerance levels

To eliminate all risks above a certain level

ISACAAdvanced in AI Security Management

Domain 2Objective 1

AI Risk Assessment, Thresholds, and Treatment AAISM Practice Questions (Page 5)

Part of the AI Risk Management domain, which accounts for 31% of the AAISM exam.

38questions here

8free pages

10concepts

31%of the exam

Questions 21–25

21application · medium
A logistics company uses an AI route optimization system. The risk assessment identified a risk of the AI making unsafe routing decisions in hazardous conditions. The company has a very low risk appetite for safety incidents. Which risk treatment option is most appropriate?
Select an answer first
22expert · hard
A company has multiple AI risks that require treatment, but limited budget and resources. The risk manager must develop a treatment plan. Which approach is most effective?
Select an answer first
23foundation · easy
Why is it important to assess residual risk after implementing AI risk treatments?
Select an answer first
24foundation · easy
Which activity is part of the risk treatment monitoring and review process?
Select an answer first
25foundation · easy
What is the primary purpose of defining risk thresholds for AI systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AAISM

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “AAISM” is a trademark of its owner, used for identification only.