AAISM: Advanced in AI Security Management

By Isaca · Question Mode

QuestionQ74

AI Governance and Program Management

A field service organization plans to adopt an AI solution from an external vendor. Management is under pressure to implement AI rapidly to benefit from the latest technology. Which of the following is the MOST important action to take before engaging a vendor?

Explanation

AI acquisition should begin by defining the organization’s business objectives, legal and regulatory obligations, and risk tolerance. These requirements provide the criteria for selecting and governing a vendor solution that fits the organization’s context. NIST’s AI Risk Management Framework emphasizes aligning AI risk management with organizational principles, policies, strategic priorities, and legal considerations, including third-party systems.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!