ISACA Advanced in AI Security Management Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Developing an effective acceptable use policy (AUP) for generative AI starts with clearly defining the scope (what tools, use cases, users, and activities are covered) and intended uses (permissible vs. prohibited scenarios). This foundational step ensures the policy is tailored to the organization's specific AI applications, risks, and objectives before consulting experts, reviewing regulations, or examining existing policies. It provides the context needed for everything else to align properly.