AI risk assessment must be calibrated to the potential consequences of AI-driven decisions. The criticality and impact of AI-driven decisions directly determine the magnitude of risk exposure and the appropriate level of risk treatment.
Why D is Correct: According to ISACA AAIR principles, the most fundamental risk assessment consideration is the nature and impact of decisions driven by the AI system. Systems making high-stakes decisions-affecting employment, credit, healthcare, or public safety-carry significantly greater risk than those supporting low-impact tasks. Understanding decision criticality frames all other risk assessment activities and drives proportionate control selection.
Why A is Wrong: Escalation protocols are governance process elements that should be designed after understanding the risk profile. They are outputs of risk assessment, not inputs to the primary assessment consideration.
Why B is Wrong: Prior automation levels provide contextual background but do not determine the risk profile of the new AI system. The relevant risk driver is forward-looking, not historical.
Why C is Wrong: Internal expertise levels affect assessment capability but represent an organizational constraint rather than the primary risk consideration. The risk lies in the system's potential impact, not in who assesses it.

Predictive maintenance for equipment components requires continuous analysis of operational data- vibration, temperature, pressure, electrical signatures-that indicate component health over time. AI systems performing this function must process high-frequency sensor data to detect patterns that precede failure.
Why D is Correct: According to ISACA AAIR AI application guidance, real-time sensor monitoring data analysis is the core capability enabling accurate failure point prediction. By continuously analyzing sensor readings against learned patterns of pre-failure behavior, AI systems can detect early-stage degradation signals and forecast time-to-failure with precision unavailable through periodic inspection or rule-based thresholds.
Why A is Wrong: Root cause identification occurs after a defect has already manifested. For predictive maintenance-predicting failure before it occurs-post-defect analysis provides no forward-looking capability.
Why B is Wrong: Replacement product recommendation is a procurement and inventory support function. It assists in planning responses to predicted failures but is not the capability that enables the prediction itself.
Why C is Wrong: Dynamic inventory management of spare parts supports maintenance operations but is a supply chain function dependent on failure predictions, not a capability that generates those predictions.

Following a model exfiltration attack, multiple AI systems may require restoration. Prioritization must be based on objective criteria that reflect the potential business impact of continued unavailability. Systems supporting critical business functions must be restored before those supporting non-critical functions.
Why A is Correct: According to ISACA AAIR business continuity guidance for AI, the primary criterion for restoration priority is the AI system's criticality to business requirements. Systems that support mission- critical functions-patient care, financial transaction processing, safety operations-represent the highest restoration priority because their unavailability causes the greatest operational harm. This risk-based prioritization framework is consistent with standard business continuity management principles applied to the AI context.
Why B is Wrong: Team member expertise affects restoration capacity and speed but should not drive prioritization decisions. Priority is determined by business impact, not by where the team has the most technical capability. Resource allocation follows priority, not the reverse.
Why C is Wrong: Vulnerability testing and patch costs are operational considerations that may influence restoration timelines but should not override business criticality in determining priority. Cost-based prioritization could lead to restoring cheaper but less critical systems first.
Why D is Wrong: Dataset availability affects the feasibility and timeline of model retraining but is a logistical consideration rather than the primary basis for restoration priority. Critical systems should be prioritized even if their restoration is technically more complex.

A comprehensive, well-designed data pipeline establishes consistent, documented processes for data collection, preprocessing, transformation, and quality validation across training, testing, and validation stages.
This systematic approach reduces the likelihood of data errors propagating through to the final model.
Why A is Correct: According to ISACA AAIR data pipeline governance guidance, the primary benefit of a comprehensive pipeline is reducing error propagation risk. By applying consistent quality checks, validation gates, and transformation rules throughout the pipeline, errors in raw data are detected and corrected before they influence model training. This prevents data quality failures from compounding into model accuracy and bias problems-producing a higher-quality, more reliable final model.
Why B is Wrong: Governance risk sharing with external providers occurs through contractual arrangements and shared responsibility frameworks, not through data pipeline implementation. Pipeline design is an internal quality management measure.
Why C is Wrong: Automation of early-stage pipeline tasks is an operational efficiency benefit. While valuable, efficiency is a secondary benefit compared to the primary purpose of ensuring data quality and reducing error risk.
Why D is Wrong: Enhanced auditability is an important governance benefit that pipeline documentation provides but is not the primary purpose of pipeline implementation. The primary purpose is quality assurance during model development; auditability is a beneficial side effect.

Third-party AI suppliers introduce significant risk through model updates, changes in training data, and modifications to system behavior. Contractual disclosure requirements ensure the acquiring organization can maintain active risk oversight despite not controlling the vendor's development processes.
Why B is Correct: The ISACA AAIR framework emphasizes that third-party AI contracts must protect against harms arising from undisclosed changes. When vendors make silent updates to models, the acquiring organization cannot assess new risks before they affect users, decisions, or regulated outcomes. Timely disclosure requirements enable proactive risk detection and mitigation before individuals are harmed.
Why A is Wrong: Availability guarantees are service-level concerns addressed by SLA provisions. While important operationally, they do not address the risk management imperative of understanding what changes have been made to AI models.
Why C is Wrong: Internal trust-building is a change management consideration, not the primary purpose of contractual disclosure requirements. Contracts address risk obligations, not organizational confidence.
Why D is Wrong: Vendor staff access to sensitive datasets is a data access and privacy concern addressed through data processing agreements and access controls, not model update disclosure requirements.