A healthcare provider is developing an AI triage system for emergency rooms. The project team has scheduled a single town hall for all stakeholders at the end of the project. The AI governance lead wants to improve engagement. What is the most effective change to the engagement strategy?

Replace the town hall with a survey sent to all staff to collect their concerns

Create a stakeholder engagement plan with tailored communication and feedback loops at each lifecycle stage

Hold the town hall earlier in the project to share the system's benefits with all stakeholders

Invite only the hospital's legal and compliance teams to review the system's risks

A global tech company is establishing an AI governance program. They have stakeholders in multiple countries, including employees, customers, and regulators. They need to comply with the EU AI Act and other emerging regulations. They want a framework that is flexible and can be adapted to different regulatory environments. Which approach is most effective?

Create separate governance programs for each country to ensure full compliance

Focus only on the EU AI Act and ignore other regulations

Adopt a single global framework and apply it uniformly across all regions

Use a core framework like ISO/IEC 42001 and supplement it with region-specific regulatory mappings

An AI governance lead is comparing the OECD AI Principles and the NIST AI RMF for a presentation. Which statement correctly contrasts the two?

The OECD AI Principles focus on technical risk, while the NIST AI RMF focuses on ethical issues

Both are legally binding international standards

The OECD AI Principles provide a detailed risk management process, while the NIST AI RMF offers high-level policy recommendations

The NIST AI RMF is a voluntary risk management framework, while the OECD AI Principles are high-level policy recommendations

A financial institution is mapping its AI practices to the EU AI Act. They have an AI system that provides investment advice to retail investors. The compliance team is unsure whether the system is high-risk. Which factor is most important in determining its classification?

The system's accuracy rate on historical data

Whether the system is used for evaluating creditworthiness or is a standalone advisory tool

The size of the institution's customer base

The institution's internal risk appetite

ISACAAdvanced in AI Security Management

Domain 1Objective 1

Stakeholder Considerations, Industry Frameworks, and Regulatory Requirements AAISM Practice Questions (Page 2)

Part of the AI Governance and Program Management domain, which accounts for 31% of the AAISM exam.

32questions here

7free pages

8concepts

31%of the exam

Questions 6–10

6application · medium
A global software company is building an AI governance program. They need a framework that provides a certifiable management system standard for AI, which will help them demonstrate compliance to customers and regulators. Which framework should they select?
Select an answer first
7application · medium
A healthcare provider is developing an AI triage system for emergency rooms. The project team has scheduled a single town hall for all stakeholders at the end of the project. The AI governance lead wants to improve engagement. What is the most effective change to the engagement strategy?
Select an answer first
8expert · hard
A global tech company is establishing an AI governance program. They have stakeholders in multiple countries, including employees, customers, and regulators. They need to comply with the EU AI Act and other emerging regulations. They want a framework that is flexible and can be adapted to different regulatory environments. Which approach is most effective?
Select an answer first
9application · medium
An AI governance lead is comparing the OECD AI Principles and the NIST AI RMF for a presentation. Which statement correctly contrasts the two?
Select an answer first
10expert · hard
A financial institution is mapping its AI practices to the EU AI Act. They have an AI system that provides investment advice to retail investors. The compliance team is unsure whether the system is high-risk. Which factor is most important in determining its classification?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AAISM

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “AAISM” is a trademark of its owner, used for identification only.

Stakeholder Considerations, Industry Frameworks, and Regulatory Requirements AAISM Practice Questions (Page 2)

Questions 6–10

A global software company is building an AI governance program. They need a framework that provides a certifiable management system standard for AI, which will help them demonstrate compliance to customers and regulators. Which framework should they select?

A healthcare provider is developing an AI triage system for emergency rooms. The project team has scheduled a single town hall for all stakeholders at the end of the project. The AI governance lead wants to improve engagement. What is the most effective change to the engagement strategy?

An AI governance lead is comparing the OECD AI Principles and the NIST AI RMF for a presentation. Which statement correctly contrasts the two?

A financial institution is mapping its AI practices to the EU AI Act. They have an AI system that provides investment advice to retail investors. The compliance team is unsure whether the system is high-risk. Which factor is most important in determining its classification?

Keep studying — AI Governance and Program Management