An IS auditor is evaluating an organization’s incident management program to ensure it is sufficiently prepared to manage AI-related incidents. Which of the following is MOST important for the auditor to validate?
Select an option, then click Submit answer.
Reference / correct answer:
The program includes processes to respond to AI model drift and data integrity attacks.
Most accepted answer: A. The program includes processes to respond to AI model drift and data integrity attacks.
Community votes: A=2
Selected Answer: A A. The program includes processes to respond to AI model drift and data integrity attacks. Explanation: When assessing AI-related incident management, the core objective is ensuring that the organization can detect, contain, and respond to incidents unique to AI systems. Two of the most critical AI-specific risks are: Model drift — when the AI model’s performance degrades due to data or environment changes. Data integrity attacks — adversarial manipulation or poisoning of training or input data. A well-prepared incident management program must have clear response and remediation procedures for these AI-specific events, not just generic IT incidents. Options B, C, and D are supportive or procedural but don’t directly address AI-specific risk preparedness, which is what the question emphasizes. upvoted 1 times
Selected Answer: A A - most important, others are important too, but come secondarily. upvoted 1 times