Free Isaca AAIA Actual Exam Questions - Question 4 Discussion
an organization's business objectives?
It’s A because spotting vulnerabilities helps ensure the AI won’t derail business goals.
It’s D because a clear acceptable use policy defines how AI should support business goals, making it more direct evidence than just tracking changes or listing models. Policies guide actual behavior, which is key.
A/C? A shows risk factors that might block business goals, so it’s about preventing misalignment. C just catalogs models but doesn’t prove they match the business objectives actively.
B. Change management requests actually track how the AI model evolves to stay in sync with business needs over time, which feels like solid evidence of ongoing alignment. The inventory just lists models, and vulnerability assessments focus more on risks than directly showing business fit. The policy sets rules but doesn’t prove the model is actively adjusted as objectives shift, so B seems more practical for showing real-world alignment.
Option D seems strong since an AI acceptable use policy sets clear guidelines on how the model should be used to meet business goals. Unlike inventories or vulnerability reports, the policy directly ties model usage to organizational objectives and ethical standards. It’s more proactive and foundational, ensuring everyone understands the boundaries and purposes upfront, which is a solid alignment indicator.
I’m thinking A makes sense too because vulnerability assessments show if the model risks could derail business goals, which is pretty direct proof of alignment or misalignment. So A.
This one’s tricky, but I’m going with B here. Change management requests reflect actual updates and adjustments made to the AI models to keep them in line with shifting business objectives. Unlike just having an inventory or policies, it shows active alignment efforts over time.
Good point on policy, but I think C is better since having a full AI model inventory shows what’s in
D seems right since an acceptable use policy should align AI use with business goals. Anyone else think differently?