Clearly defining business needs, regulatory requirements, and risk tolerance ensures the organization selects an AI solution that aligns with its objectives and risk posture. This prevents misalignment, reduces compliance risks, and provides a structured basis for evaluating and engaging with vendors.

The AAISM framework explains that embedding unique identifiers-such as digital watermarks or model fingerprints-enables organizations to trace and verify model provenance. This technique is used for tracking ownership and intellectual property rights over models, particularly when sharing, licensing, or distributing AI systems. While identifiers may support certain security functions, their primary control objective is ownership verification, not preventing access, bias removal, or adversarial detection. The correct alignment with AAISM controls is tracking ownership.
References:
AAISM Exam Content Outline - AI Technologies and Controls (Model Provenance and Watermarking) AI Security Management Study Guide - Ownership and Accountability of Models

The most effective way to reduce the risk of hidden backdoors entering during fine-tuning via third-party components is to apply supply-chain aware threat modeling and integrity verification across data, code, models, and dependencies. This includes SBOM/MBOM review, cryptographic signing and hash verification, controlled provenance of datasets and model weights, dependency pinning, secure artifact repositories, and pre-deployment security testing (including backdoor scans and evals). Merely preferring open-source (Option B) does not guarantee integrity; learning paradigm changes (Option C) are unrelated to supply-chain risk; and disabling logs (Option D) reduces forensic visibility and increases risk.
References:
AAISM Body of Knowledge: Secure AI Supply Chain; Model Provenance, Integrity and SBOM/MBOM Controls; Pre-deployment Security Testing and Backdoor/Poisoning Evals.
AAISM Study Guide: AI Threat Modeling (Attack Surfaces in Training/Fine-tuning); Third-Party/Vendor Component Assurance; Cryptographic Integrity and Artifact Governance.

The AAISM materials highlight that one of the primary legal risks with generative AI systems is the unauthorized use of copyrighted or intellectual property-protected data drawn from internet sources. To mitigate lawsuits, the most effective recommendation is to implement filtering logic that actively excludes data flagged for intellectual property risks before ingestion or generation.
While disclosing compliance policies, appointing governance roles, or reviewing logs are supportive measures, they do not directly prevent the core liability of using restricted content. The study guide explicitly emphasizes that proactive filtering and data governance controls are the most effective safeguards against legal disputes concerning content origin.

AAISM emphasizes that the primary objective of responsible AI is to establish and maintain trust in AI-driven decisions and predictions. Trust is achieved through transparency, accountability, fairness, and governance.
While confidentiality and integrity are critical technical objectives, they are not the overarching purpose of responsible AI service provision. Autonomy and learning ability are features of AI, but without trust, adoption and compliance falter. The correct answer is that responsible AI services must focus on building trust in AI outcomes.
References:
AAISM Exam Content Outline - AI Governance and Program Management (Responsible AI Principles) AI Security Management Study Guide - Trust and Ethical AI Adoption