Which of the following is an example of a regulatory requirement that affects AI governance?

The EU AI Act's requirements for high-risk AI systems

The organization's internal code of conduct

The OECD AI Principles' recommendations

Which of the following is a key component of the NIST AI Risk Management Framework (AI RMF)?

The three lines of defense model

The five pillars of cybersecurity

The four functions: Govern, Map, Measure, and Manage

The seven principles of software engineering

A multinational retailer is building an AI governance program. They operate in the EU and the US. They have identified stakeholders including employees, customers, regulators, and suppliers. They are selecting a framework and mapping regulatory requirements. The program must be auditable and demonstrate compliance to regulators. Which approach best integrates these considerations?

Use the NIST AI RMF for risk management and rely on GDPR compliance for all regulatory needs

Create a separate governance program for each region and stakeholder group

Focus on the EU AI Act only and disregard other frameworks to avoid complexity

Adopt ISO/IEC 42001 as the core management system, map EU AI Act requirements to its controls, and maintain a stakeholder engagement plan

What is the purpose of regulatory compliance mapping in AI governance?

To eliminate the need for external audits

To identify which regulations apply to the organization's AI practices and ensure alignment

To create a new set of internal regulations

To compare the organization's AI performance with competitors

What is the purpose of a stakeholder impact assessment in AI governance?

To calculate the financial return on investment of the AI system

To determine the technical performance of the AI model

To identify which stakeholders should be excluded from the project

To evaluate the potential effects of an AI system on different groups

ISACAAdvanced in AI Security Management

Domain 1Objective 1

Stakeholder Considerations, Industry Frameworks, and Regulatory Requirements AAISM Practice Questions (Page 3)

Part of the AI Governance and Program Management domain, which accounts for 31% of the AAISM exam.

32questions here

7free pages

8concepts

31%of the exam

Questions 11–15

11foundation · easy
Which of the following is an example of a regulatory requirement that affects AI governance?
Select an answer first
12foundation · easy
Which of the following is a key component of the NIST AI Risk Management Framework (AI RMF)?
Select an answer first
13expert · hard
A multinational retailer is building an AI governance program. They operate in the EU and the US. They have identified stakeholders including employees, customers, regulators, and suppliers. They are selecting a framework and mapping regulatory requirements. The program must be auditable and demonstrate compliance to regulators. Which approach best integrates these considerations?
Select an answer first
14foundation · easy
What is the purpose of regulatory compliance mapping in AI governance?
Select an answer first
15foundation · easy
What is the purpose of a stakeholder impact assessment in AI governance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AAISM

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “AAISM” is a trademark of its owner, used for identification only.