When an AI model's accuracy declines despite stable input distributions, the most likely cause is concept drift-where the underlying relationship between inputs and the target variable changes over time. In credit scoring, this may occur when economic conditions, consumer behavior, or risk patterns shift in ways not captured in the original training data.
Why C is Correct: The ISACA AAIR model drift guidance identifies concept drift as the greatest risk in this scenario because it means the model is making credit decisions based on relationships that no longer hold in the current environment. Faulty credit decisions can lead to incorrect denials of creditworthy applicants, incorrect approvals of high-risk applicants, regulatory violations, financial losses, and harm to individuals- all high-severity consequences for a credit-scoring application.
Why A is Wrong: Technical delays in credit score updates are an operational performance concern. Delays create business friction but do not cause the fundamental accuracy problem described in the scenario.
Why B is Wrong: Underfitting from shortened training cycles is a model development quality issue. The scenario specifies stable input distributions and declining accuracy-characteristic of drift, not underfitting, which would manifest differently.
Why D is Wrong: Increased retraining costs represent a financial efficiency concern. While budgetary impacts are real, they are secondary to the risk of faulty credit decisions affecting individuals and regulatory compliance.

Temperature is a hyperparameter in language model generation that controls output randomness. Lower temperatures make the model more deterministic-concentrating probability mass on the most likely tokens and producing more consistent, predictable outputs. Higher temperatures introduce more randomness and diversity.
Why B is Correct: According to ISACA AAIR model configuration guidance, lowering model temperature is primarily used to enhance consistency and accuracy of outputs. In production applications requiring reliable, reproducible responses-such as customer service, compliance reporting, or technical documentation-lower temperature ensures the model consistently generates the most appropriate response based on its learned knowledge, reducing variability and improving output quality.
Why A is Wrong: Temperature adjustment does not directly mitigate bias. Bias in AI models is a function of training data and model architecture, not output randomness. A biased model at low temperature will consistently generate biased outputs; lowering temperature may actually make bias more persistent by reducing variation.
Why C is Wrong: Diversifying ideas and recommendations is achieved by increasing temperature, not lowering it. Higher temperature is used for creative tasks where variety is valuable; lower temperature is used for tasks requiring precision and consistency.
Why D is Wrong: Model temperature has no direct relationship to computational energy consumption. Energy use is primarily driven by model size, computation requirements, and inference frequency-not the temperature parameter.

Credit scoring AI systems make high-stakes financial decisions that directly affect individuals' access to credit. Post-implementation review for such systems must confirm that the system performs within ethical, legal, and regulatory boundaries-particularly regarding fairness and explainability.
Why B is Correct: According to ISACA AAIR post-implementation review guidance for high-stakes AI, confirming explainability and fairness is the most critical review element for credit scoring systems. Anti- discrimination laws (Equal Credit Opportunity Act, Fair Housing Act) require that credit decisions be explainable and not discriminatory. Fairness testing detects whether the system produces disparate outcomes across demographic groups, while explainability ensures individual decisions can be justified if challenged.
Why A is Wrong: Access token logging is a security audit trail mechanism. While important for access governance, it does not address the primary regulatory and ethical obligations of a credit scoring system regarding decision quality and fairness.
Why C is Wrong: Stakeholder communication of performance metrics is a governance reporting activity.
Metric communication does not confirm the system is making fair, explainable decisions-it only reports on performance indicators.
Why D is Wrong: User ease of learning and use is a user experience and adoption concern. System usability does not determine whether credit scoring decisions are accurate, fair, or legally compliant-which are the primary post-implementation concerns.

Training program effectiveness KPIs must measure behavioral change-whether training has actually altered how participants act in their work environment-rather than knowledge acquisition or adoption rates. The most meaningful behavioral signal for AI risk awareness training is whether trained users report suspicious activity.
Why B is Correct: According to ISACA AAIR training effectiveness measurement guidance, the number of AI irregularities and potential tampering incidents reported by users is the most appropriate behavioral KPI for risk awareness training effectiveness. When users report unusual AI behavior, this demonstrates they have internalized training concepts well enough to recognize anomalies and understand their obligation to report them. This behavioral change-from passive observation to active reporting-is the intended outcome of awareness training.
Why A is Wrong: Risk rating changes measure risk management process adjustments rather than individual behavioral change from training. Risk ratings reflect aggregate organizational risk, not the specific behavioral impact of an awareness training program.
Why C is Wrong: Ability to identify financial impacts is a knowledge assessment metric-it measures what users know rather than what they do differently as a result of training. Awareness training aims to change behavior, not just inform.
Why D is Wrong: AI adoption rates measure technology uptake, not risk awareness. Higher adoption could indicate confidence in AI systems but does not measure whether employees recognize and report AI risks- the specific objective of risk awareness training.

Organizational culture is primarily shaped by leadership behavior and tone at the top. In AI governance, an ethical culture cannot be mandated through documentation alone-it must be demonstrated through the actions and values of organizational leaders.
Why D is Correct: The ISACA AAIR Study Guide emphasizes that tone at the top is the most powerful driver of ethical culture. When leaders consistently model ethical behavior in AI development and usage, they create a normative environment where employees internalize values rather than merely complying with rules. This authentic leadership approach produces sustainable cultural change.
Why A is Wrong: Checklists are compliance tools that address process adherence, not cultural transformation.
A checklist culture can produce box-ticking behavior without genuine ethical commitment.
Why B is Wrong: Conference participation raises awareness but has minimal impact on day-to-day organizational behavior. External networking does not directly shape internal culture.
Why C is Wrong: Disciplinary actions represent reactive compliance enforcement. While necessary, punitive measures create a compliance-driven rather than values-driven culture, which is less robust and sustainable.