AI Risk Assessment, Thresholds, and Treatment AAISM Practice Questions (Page 8)

Questions 36–38

1. 36expert · hard

   A company is assessing AI risks for a new autonomous vehicle system. The risk team is under pressure to deliver a risk assessment quickly, but the system is complex and has many potential risks. The company has a low risk appetite for safety. What is the best approach?

   • AConduct a focused risk assessment on the most critical safety-related risks first, then expand to other risks.
   • BSkip the risk assessment and rely on the vendor's safety certifications.
   • CConduct a comprehensive risk assessment covering all possible risks, even if it takes longer.
   • DUse a generic risk assessment template from another industry to save time.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A retail company is implementing an AI fraud detection system. The risk assessment identified a high-priority risk of adversarial attacks that could bypass the system. The risk manager must develop a treatment plan. What is the most important element to include in the plan?

   • AA statement that the risk is accepted by senior management.
   • BA list of all possible adversarial attack techniques.
   • CA detailed action plan with specific controls, responsible owners, and a timeline for implementation.
   • DA budget estimate for potential losses if the risk materializes.
   Reveal Solution Discussion Select an answer first
3. 38application · medium

   An e-commerce company uses an AI recommendation engine. The risk assessment identified a risk of biased recommendations that could lead to discriminatory outcomes. The company's risk appetite is moderate, and they have a risk threshold matrix. The risk is rated as 'high likelihood, high impact.' According to the threshold matrix, high-high risks exceed the threshold and require treatment. What should the company do?

   • AAccept the risk because the company has a moderate risk appetite.
   • BTransfer the risk by purchasing cyber insurance.
   • CRe-evaluate the risk using a different method until it falls below the threshold.
   • DTreat the risk by implementing bias detection and mitigation controls.
   Reveal Solution Discussion Select an answer first