Free Isaca AAIA Actual Exam Questions - Question 12 Discussion

I see where the risk assessment (C) angle comes from, but I'd say B makes a strong case here too. Documenting changes thoroughly ensures that updates don’t cause unexpected issues and helps keep the whole team on the same page. Without good documentation, even a solid risk assessment might not be enough to manage ongoing changes effectively. So I think B is critical for keeping control as the AI system evolves.

C feels right because spotting risks early avoids bigger issues later on.

Maybe D here. Ethics training ensures everyone understands the right way to interact with AI, which can prevent misuse or mistakes during the change process. Risk assessments are great, but if the team isn’t prepared ethically, risks could multiply no matter how well they’re identified. Plus, ethics training affects the culture long-term, which is huge for sustainable AI adoption.

I'm leaning towards C. Conducting a risk assessment seems crucial since AI can introduce unique risks that need to be managed before rolling out any changes. What do others think?