Stakeholder Considerations, Industry Frameworks, and Regulatory Requirements AAISM Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a step in regulatory compliance mapping?

   • AHiring a third-party auditor
   • BDeleting all data used by the AI system
   • CSelecting a new AI framework
   • DIdentifying applicable regulations and requirements
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An AI governance consultant is advising a client on which framework to use for AI risk management. The client is a small startup with limited resources and needs a flexible, risk-based approach that is not overly prescriptive. Which framework is most appropriate?

   • ANIST AI RMF
   • BEU AI Act
   • COECD AI Principles
   • DISO/IEC 42001
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In an AI governance program, which of the following is an example of an external stakeholder group?

   • ARegulatory authority
   • BData science team
   • CExecutive leadership
   • DCompliance officer
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An AI governance lead is explaining the differences between major industry frameworks to the board. Which statement accurately describes a key component of the NIST AI RMF?

   • AIt is a legally binding international standard that overrides national laws
   • BIt focuses exclusively on the technical aspects of AI, such as model accuracy and robustness
   • CIt is organized around four core functions: Govern, Map, Measure, and Manage
   • DIt provides a set of mandatory controls that organizations must implement to be certified
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the goal of integrating stakeholder considerations, industry frameworks, and regulatory requirements into an AI governance program?

   • ATo create a single, cohesive approach that addresses all relevant aspects
   • BTo eliminate the need for separate risk assessments
   • CTo satisfy the requirements of a single framework
   • DTo prioritize regulatory requirements over all other considerations
   Reveal Solution Discussion Select an answer first