QuestionQ113

AI Risk Management

An audit finds that a financial organization’s third-party AI vendor does not supply documentation for model training and testing. Which of the following represents the MOST critical risk for the organization?

Explanation

Documentation of model training and testing supports transparency, explainability, validation, and accountable governance. Without it, a financial organization cannot adequately understand or substantiate the model’s behavior, limitations, and testing, creating a material risk of insufficient explainability and regulatory noncompliance. NIST AI RMF guidance specifically identifies third-party transparency, training-data knowledge, testing, documentation, and explainability as governance considerations.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!