AAIR: Advanced in AI Risk

By Isaca · Question Mode

QuestionQ34

AI Risk Governance and Framework Integration

An organization has widely deployed generative AI tools but does not have a consistent approach for refreshing governance policies and controls. Which of the following is the risk practitioner's BEST recommendation?

Explanation

An ongoing review cadence with codified reassessment procedures makes policy and control refresh a repeatable governance process. It supports timely updates as generative-AI risks, use cases, controls, and obligations evolve.

Community Discussion

No comments yet. Be the first to start the discussion!