Exploratory Data Analysis (EDA) is critical during the initial stages of AI model development. According to the AAIA™ Study Guide, performing EDA-including identifying null values, incorrect data types, or duplicates-ensures that the data fed into the model is clean and reliable.
"Initial data frames should be subject to thorough EDA to uncover data quality issues. These issues, if not addressed early, can severely affect model training and predictive accuracy." While separating data sets (B) and visualizations (A) are important steps in later phases, C is foundational to ensure readiness for model training. Risk assessments (D) are necessary but not the first operational step.
Reference: ISACA Advanced in AI Audit™ (AAIA™) Study Guide, Section: "AI Fundamentals and Technologies," Subsection: "Exploratory Data Analysis and Preprocessing"

Detecting data drift is critical in maintaining the reliability and accuracy of AI models, especially in dynamic environments like healthcare where patient populations and data characteristics can change over time.
According to the ISACA Advanced in AI Audit™ (AAIA™) Study Guide,data drift refers to changes in the input data's statistical properties compared to the data on which the model was originally trained.
If not detected, data drift can degrade model performance and lead to erroneous predictions.
Themost effective approach to detect data driftis tocontinuously compare the statistical distributions of incoming (production) data with those of the training dataset. This allows organizations to identify deviations in data patterns, which can be early indicators that the AI model's predictions may no longer be valid or optimal.
As stated in the AAIA™ Study Guide under "AI Model Monitoring and Maintenance":
"Monitoring input data for distributional changes compared to the model's training data is an essential step in identifying data drift. Statistical tests and visualizations can help auditors and AI operators detect when the underlying data characteristics have shifted, prompting further investigation or retraining needs." While options such as retraining the model (option C) or adversarial testing (option D) are valuable for ongoing performance and robustness,they do not inherently detect data drift-they respond to or stress-test existing issues. Applying overrides (option B) is a human-in-the-loop safeguard, not a method for drift detection.
Reference:ISACA Advanced in AI Audit™ (AAIA™) Study Guide, Section: "AI Model Monitoring and Maintenance," Subsection: "Detection and Management of Data Drift"

In high-risk environments (healthcare, finance, aviation), software updates ensure that vulnerabilities are patched, new attack vectors are addressed, and integrity controls remain current.
AAIA highlights that outdated AI systems are vulnerable to:
* Integrity attacks
* Poisoning
* Model evasion
* Adversarial exploitationRegular updates ensure that both the AI software and supporting infrastructure maintain resilience.Zero-day protection (A) is a factor but not the primary reason. Speed and reduced oversight (B and C) are not valid risk-based rationales.The core purpose ismaintaining output integrity and preventing AI exploitation.
References:
AAIA Domain 2: AI Operations, Patch Management, and Integrity Controls.

Graph analytics is specifically designed to analyze complex relationships among people, entities, transactions, and systems. According to AAIA audit methodologies, graph analytics helps identify hidden or non-obvious relationships indicative of:
* Collusion
* Fraud rings
* Undisclosed conflicts of interest
* Influence networks
* Hidden ownership structures
Correlation matrices (A) only measure linear relationships. Time series (B) identifies patterns over time, not relationships. Monte Carlo simulation (D) models uncertainty but does not uncover relational structures.
Graph analytics is the strongest AI-enabled method for mapping and auditing relational risks.
References:
AAIA Domain 3: AI Tools for Audit Analytics
AAIA Domain 4: Relationship Analysis and Fraud Detection

The AAIA™ Study Guide emphasizes that regular algorithmic audits are critical for identifying unintended consequences such as the promotion of harmful or biased content. This proactive approach helps maintain trust and ensure that algorithmic decisions align with organizational values and ethical standards.
"Auditing and monitoring AI models regularly helps detect and correct bias, drift, or other unintended behavior. It is essential for high-impact AI systems like content recommendation engines." While content customization (A) and user consent (C) are helpful, they don't prevent bias propagation.
Suspension (B) may halt engagement and isn't sustainable. Therefore, D is the most balanced and strategic solution.
Reference: ISACA Advanced in AI Audit™ (AAIA™) Study Guide, Section: "AI Governance and Risk Management," Subsection: "Model Monitoring and Risk Mitigation Strategies"