Isaca Updated AAIR Exam Questions and Answers by kyle

Risk ratings must be maintained as current assessments of organizational risk exposure. Events that materially change the risk profile—particularly those indicating active harm or regulatory violations—require immediate risk rating updates to ensure governance responses are calibrated to the current risk reality.

Why A is Correct: According to ISACA AAIR risk monitoring and review guidance, the discovery of discriminatory outputs from an AI system represents a material change in risk exposure that requires immediate risk rating updates. Discriminatory outputs indicate active harm to individuals, regulatory violations, and significant legal and reputational exposure. This event fundamentally changes the risk profile from a potential to an actual harm, requiring escalated risk ratings and treatment responses.

Why B is Wrong: Adding new monitoring metrics improves risk detection capability but does not change the underlying risk levels. New metrics may subsequently detect risks requiring rating updates, but their addition alone is an operational change, not a risk level change.

Why C is Wrong: Vulnerability patch deployment reduces risk by closing specific security gaps, which may lower risk ratings but is less urgent than updating ratings to reflect active harm discovery. Patching is a remediation activity; discriminatory outputs represent ongoing harm requiring immediate escalation.

Why D is Wrong: Creating an oversight committee improves governance capability but does not change the risk profile of AI systems. Governance structure changes affect the organization's ability to manage risk; they do not affect the risk levels themselves.

Acceptable use policies (AUPs) govern how employees interact with organizational systems and tools. Embedding AI risk considerations into AUPs ensures that AI-related behaviors align with the organization's risk appetite and tolerance thresholds.

Why C is Correct: According to ISACA AAIR governance principles, the best justification for embedding AI risk in AUPs is maintaining consistent enterprise risk tolerance across all AI-driven decision-making. When risk tolerances are codified in AUPs, employees understand what AI behaviors are permissible, and deviation from these boundaries triggers escalation. This enterprise-wide alignment prevents individual business units from accepting risks that exceed organizational thresholds.

Why A is Wrong: Shadow AI mitigation through allow lists is a specific technical control mechanism, not the primary governance justification for AUP integration. It addresses unauthorized tool use rather than risk tolerance alignment.

Why B is Wrong: Applying uniform risk controls across diverse business functions is a compliance approach that may not be appropriate—different functions may legitimately have different risk profiles. The goal is tolerance alignment, not control uniformity.

Why D is Wrong: Assigning accountability to business unit leadership is a governance structure decision. AUPs define behavioral expectations, not organizational accountability assignments, which are addressed through RACI frameworks and policy governance.

Aligning AI initiatives with corporate values establishes ethical foundations that directly influence how models are designed, deployed, and governed. This alignment is most powerfully expressed through enhanced transparency and explainability of AI decisions.

Why D is Correct: The ISACA AAIR Study Guide identifies transparency and explainability as core benefits of value-aligned AI governance. When AI processes are formally anchored to corporate values, organizations build systems that can explain their decisions to regulators, customers, employees, and the public. This fosters trust, enables accountability, and supports compliance across all stakeholder groups—producing the most broadly impactful organizational benefit.

Why A is Wrong: This option suggests a sequential approach where ethics are retrofitted after deployment, which is actually a risk and poor practice. The formal alignment process prevents this problem rather than enabling it.

Why B is Wrong: ROI evaluation is a financial management function. While valuable, it is a narrow benefit compared to the enterprise-wide stakeholder value created by transparency and explainability.

Why C is Wrong: Obtaining executive support for training is an organizational change management benefit. While useful, it is a means to an end rather than the primary organizational benefit of value alignment.

AI systems introduce unique security threat vectors that differ fundamentally from conventional IT security scenarios. Risk scenarios must address AI-specific attacks—model poisoning, adversarial inputs, output manipulation—that conventional security frameworks do not cover.

Why A is Correct: The ISACA AAIR AI security risk scenario guidance focuses on attacks that specifically exploit AI system properties—particularly techniques that maliciously alter AI outputs. These AI-specific attack vectors (adversarial examples, model inversion, prompt injection, output manipulation) represent the most important focus for AI security risk scenario development because they target capabilities unique to AI systems and cannot be addressed by repurposing conventional IT security scenarios.

Why B is Wrong: Business unit readiness documentation is a change management and organizational capability assessment activity. It supports AI adoption planning but does not constitute AI security risk scenario development.

Why C is Wrong: Access policy development is an important security control activity but represents control design rather than risk scenario development. Access policies respond to identified risks; they are not themselves risk scenarios.

Why D is Wrong: Quantum encryption is an emerging cryptographic technology addressing future threats to classical encryption. While relevant for long-term data protection planning, it represents a specialized and forward-looking concern rather than the most important focus for current AI security risk scenarios.