ISACA Advanced in AI Audit Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  When an AI system is subject to frequent updates after deployment (often referred to as "Online Learning" or "Continuous Integration/Continuous Deployment" for AI), the risk profile is dynamic. The model you audited on Monday may not be the same model interacting with customers on Friday. Model Drift and Hallucinations. Without continuous monitoring, these errors can go unnoticed until they cause significant reputational or legal damage. The "Shadow Update" Risk: If there is no monitoring system in place to flag shifts in output quality or safety, the organization is effectively operating "blind." Real-Time Mitigation: Continuous monitoring serves as the primary detective control.

• Chose A1

  From the perspective of prioritizing root cause risks, A is the correct answer. C should be considered a secondary risk.

• Chose C1

  The greatest risk is that frequent AI model updates occur without robust governance, resulting in unvalidated behavior changes that impact accuracy, compliance, and customer outcomes.