AAISM: Advanced in AI Security Management

By Isaca · Question Mode

QuestionQ109

AI Risk Management

An organization’s HR chatbot was found to generate fictitious employee details through a third-party API. What would be the information security team’s BEST recommendation?

Explanation

Limiting the chatbot’s communication with the third-party API reduces reliance on an external source that is producing inaccurate employee information. Input validation addresses data submitted to the chatbot, while reviewing reports or logs is detective rather than preventive.

Community Discussion

No comments yet. Be the first to start the discussion!