AAISM: Advanced in AI Security Management

By Isaca · Question Mode

QuestionQ135

AI Risk Management

A sales organization uses third-party AI to monitor and score sales calls. After employees reported unexpected score decreases, an investigation found that the third-party partner had changed the AI model. What is the BEST way to address this issue?

Explanation

A contract requirement for change-control notifications ensures that the third-party provider must disclose material AI-model changes before or when they occur. This enables the organization to evaluate the impact on sales-call scoring, validate the updated model, and manage resulting risks.

Community Discussion

No comments yet. Be the first to start the discussion!