ISACA Advanced in AI Audit Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  The correct answer is: ✅ A. Conducting a comprehensive risk assessment specific to AI-related changes Explanation: In an AI implementation, change management must go beyond traditional IT controls. Because AI systems are dynamic, data-driven, and can evolve with retraining or tuning, changes can introduce new ethical, operational, or regulatory risks — even if the code itself doesn’t change. Therefore, the most critical action in change management is to perform a comprehensive, AI-specific risk assessment before deployment or modification. This ensures the organization: Understands the impact of model updates (e.g., retraining, new data sources), Evaluates bias, accuracy, explainability, and compliance risks, Maintains traceability and accountability for every AI-related change