Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
An organization has deployed an AI-powered customer service chatbot. Which of the following BEST helps to ensure the chatbot maintains high accuracy in interpreting and answering customer inquiries?
Chatbot accuracy in customer service depends on correctly identifying customer intent and generating appropriate responses. Both intent classification accuracy and training data quality directly determine chatbot performance over time.
Why D is Correct: According to ISACA AAIR model performance management guidance, measuring intent-classification error rates provides precise diagnostic information about where the chatbot misunderstands customer inquiries, while refining training datasets based on those errors continuously improves classification accuracy. This closed-loop approach---measure specific errors, improve the underlying data that drives them---is the most effective mechanism for sustained high accuracy.
Why A is Wrong: Increasing model temperature increases output randomness and diversity, which is counterproductive for accuracy in customer service contexts where consistent, precise answers are required. Precision and recall provide useful metrics but increased temperature actively undermines accuracy.
Why B is Wrong: Vendor benchmarking compares performance against generic standards. Customer service chatbots must be optimized for the specific organization's terminology, products, and customer base---generic thresholds may not capture the accuracy requirements of a specific deployment.
Why C is Wrong: Explainable AI techniques improve decision transparency but do not directly enhance classification accuracy. Code reviews address software quality, not the model's ability to accurately interpret customer intent.
Which of the following is the BEST governance approach for balancing risk management and operational flexibility across diverse AI applications?
AI governance across diverse applications requires frameworks flexible enough to accommodate varying risk profiles, regulatory environments, and operational contexts while maintaining consistent governance standards. Rigid or overly centralized approaches reduce operational effectiveness.
Why B is Correct: The ISACA AAIR framework advocates for adaptable governance frameworks that can be scaled and tailored to specific AI use cases. A risk-based, adaptable framework applies more rigorous controls to high-risk applications while allowing operational flexibility for lower-risk uses. This balance enables innovation while maintaining appropriate risk oversight---a core principle of proportionate AI governance.
Why A is Wrong: Single-regulation compliance focus creates compliance tunnel vision that may miss material risks not covered by that regulation. AI governance must address the full risk landscape, not just one regulatory framework.
Why C is Wrong: External consultants provide periodic independent assurance, not governance. Relying on external reviews for governance would be episodic rather than continuous, creating governance gaps between review cycles.
Why D is Wrong: Centralized decision-making creates operational bottlenecks and slows AI deployment. Effective governance delegates decision authority appropriately while maintaining oversight, rather than centralizing all decisions in a single function.
Which of the following BEST helps to ensure adherence to data minimization principles when using an AI model whose training dataset contains personal information?
Data minimization is a privacy principle requiring that personal data be processed only to the extent necessary for the specified purpose. When training AI models, this means reducing the identifiability of personal data while preserving its statistical utility for model training.
Why D is Correct: According to ISACA AAIR data privacy guidance, pseudonymization directly supports data minimization by replacing identifying attributes with artificial identifiers, allowing the model to train on statistically representative data without processing full personal identifiers. This satisfies minimization requirements under frameworks like GDPR while maintaining training data utility---the specific challenge of AI model development with personal data.
Why A is Wrong: Data Loss Prevention prevents unauthorized transmission of data but does not reduce the amount of personal information contained in training datasets. DLP addresses data exfiltration risk, not data minimization compliance.
Why B is Wrong: Role-based access control restricts who can access the training data but does not reduce the volume or identifiability of personal information in the dataset. RBAC addresses access risk, not data minimization.
Why C is Wrong: Data encryption protects data confidentiality in storage and transit but does not remove or obfuscate personal identifiers from training data. Encrypted personal data is still personal data under privacy law.
An organization has deployed generative AI tools broadly but lacks a consistent method to refresh governance policies and controls. Which of the following is the risk practitioner's BEST recommendation?
Generative AI capabilities and the associated risk landscape evolve rapidly. Governance policies and controls must be refreshed through a structured, regular process rather than reactively or only when compliance requirements change.
Why A is Correct: According to ISACA AAIR, establishing a regular review cadence with codified reassessment procedures is the most robust approach because it creates a systematic, predictable process for keeping governance current. By documenting when and how policies will be reviewed---including triggers for ad hoc review (new deployments, incidents, regulatory changes)---the organization ensures governance never stagnates regardless of external pressures.
Why B is Wrong: Regulatory alignment is an important input to governance refresh but represents a reactive, external-trigger approach. Relying primarily on regulatory signals means governance lags behind organizational AI changes not covered by new regulations.
Why C is Wrong: Centralizing authority in executive and technical leadership creates decision bottlenecks and reduces the operational agility needed to keep pace with rapidly evolving AI deployments. Distributed governance with clear escalation paths is more effective.
Why D is Wrong: Annual reviews are too infrequent for generative AI tools, which may see significant capability changes and risk profile shifts multiple times per year. Annual compliance audits cannot keep governance current in a rapidly evolving AI environment.
Which of the following is the MOST important benefit of deploying continuous monitoring and automated anomaly detection for AI models in production?
Production AI models face ongoing threats from adversarial attacks, unauthorized modifications, and parameter tampering. Continuous monitoring and automated anomaly detection provide real-time visibility into model behavior deviations that indicate security incidents or unauthorized changes.
Why C is Correct: The ISACA AAIR security monitoring guidance identifies timely detection of adversarial intrusions and unauthorized parameter changes as the most important benefit of continuous monitoring and automated anomaly detection. These security events directly threaten model integrity, potentially causing the model to make harmful decisions without the organization's knowledge. Timely detection enables rapid response before significant damage occurs---this is the highest-value security assurance outcome.
Why A is Wrong: Interpretability and transparency are model design properties that continuous monitoring supports through decision logging but cannot fundamentally improve. Transparency is achieved through model architecture and documentation choices, not monitoring.
Why B is Wrong: Strategic alignment is a governance and design objective. While monitoring can confirm outputs align with intended behavior, it cannot ensure alignment with evolving strategic goals, which requires governance review processes.
Why D is Wrong: Automated risk register and vulnerability database updates are administrative governance benefits that flow from monitoring findings. They represent a useful secondary capability but not the primary security value of continuous monitoring in production.
An organization embeds AI into existing processes without integrating AI risk practices into enterprise governance. Which of the following should a risk practitioner regard as the GREATEST organizational risk?
When AI is deployed without governance integration, no formal structure exists to assign control ownership, coordinate risk management activities, or align AI decision-making with organizational objectives. This structural void produces divergent, fragmented, and potentially conflicting risk management efforts.
Why C is Correct: According to ISACA AAIR, unclear ownership is the greatest organizational risk from AI operating outside governance structures. Without designated owners, controls may be applied inconsistently across business units, different teams may implement conflicting approaches, and no one is responsible for ensuring AI activities align with enterprise objectives. This governance vacuum creates unmanaged risks and organizational incoherence.
Why A is Wrong: Regulatory compliance documentation gaps are significant but are a downstream symptom of poor governance rather than the root organizational risk. Documentation failures can be remediated more easily than fundamental ownership gaps.
Why B is Wrong: Technical-business alignment is an important concern but represents a strategic planning challenge rather than the greatest organizational risk from absent governance. Alignment can be achieved through business case processes without full governance integration.
Why D is Wrong: Executive approval difficulty is an organizational change management challenge. It reflects organizational politics rather than a structural risk from absent governance. Approval processes function independently of AI governance integration.
Which of the following is the PRIMARY benefit of aligning AI risk management with existing organizational governance frameworks?
Organizational governance frameworks provide the structures, processes, and oversight mechanisms through which enterprises manage their activities and risks. Aligning AI risk management with these frameworks ensures AI activities receive the same level of strategic oversight as other organizational functions.
Why C is Correct: The ISACA AAIR curriculum identifies enterprise-level oversight and strategic alignment as the primary benefit of governance framework integration. When AI risk management operates within established governance structures, AI decisions are subject to the same approval authorities, risk escalation pathways, and strategic alignment checks that govern all major organizational decisions. This produces coherent, enterprise-aware AI governance.
Why A is Wrong: Role development and responsibility clarification are governance activities that may result from alignment, but they represent structural outputs rather than the primary benefit. The benefit is the oversight quality, not the organizational structure itself.
Why B is Wrong: Expediting compliance approvals is an efficiency benefit that may arise from better-organized governance. However, speed of approval is not the primary purpose of framework alignment---the purpose is quality and consistency of oversight.
Why D is Wrong: Standardizing acquisition processes is a procurement function benefit. While governance alignment may improve procurement consistency, standardization is a narrow operational benefit compared to the strategic oversight value of full governance integration.
Exam domains verified against: Official Isaca AAIR exam guide, last checked October 2026.
Establish governance structures for AI systems and integrate AI risk into existing organizational frameworks. This domain covers AI models, organizational alignment, ownership, accountability, policies, training, regulatory compliance, ethical considerations and ESG implications. Focus on how to embed AI risk governance into established programs without dismantling existing frameworks.
Manage risks across the complete AI system lifecycle from design through decommissioning. This domain addresses design, development, procurement, documentation, training, testing, validation, implementation, maintenance, and data asset management. The key is understanding how different lifecycle stages introduce distinct risk profiles and control points.
Build and operate AI risk programs at scale across the organization. This domain covers scenario identification, risk assessment, treatment strategies, controls management, metrics, monitoring, reporting, supply chain risk, incident response, business impact analysis, continuity and disaster recovery. This domain carries the highest weighting because it reflects the operational work of running an AI risk function.
Sample question from this domain above: Q5
Common questions about the exam itself
