CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is a key consideration for a risk practitioner to communicate to senior management that is evaluating the introduction of artificial intelligence (AI) solutions into the organization?

A Third-party AI solutions increase regulatory obligations.
B AI requires entirely new risk management processes.
C AI will result in changes to business processes.
D AI potentially introduces new types of risk.

Explanation

AI can introduce distinct or newly significant risks, such as bias, inadequate transparency, privacy impacts, security vulnerabilities, and unreliable or harmful outcomes. These risks should be identified, assessed, and managed as part of organizational risk governance; they do not inherently require wholly new risk-management processes.

Learn more

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ27

Community Discussion