AAISM identifies the strongest immediate control for preventing data leakage into generative AI systems as technically restricting or blocking user entry of sensitive data.
Audits (A) are retrospective. Testing tools (C) does not prevent user error. Regulatory compliance (D) does not stop operational leakage.
References: AAISM Study Guide - Data Leakage Prevention and Input Restriction Controls.

AAISM materials emphasize that in operational AI systems, key risk indicators (KRIs) must reflect risks to performance and reliability rather than technical design factors alone. In the case of threat detection, the most relevant KRI is the frequency of system overrides by human analysts, as this indicates a lack of trust, frequent false positives, or poor detection accuracy. Training epochs, model depth, and training time are technical metrics but do not directly measure operational risk.
Analyst overrides represent a practical measure of system effectiveness and risk.

A backdoor indicates the model itself has been compromised. Reverting to a previously trusted version removes the malicious modification and restores integrity, providing the quickest and most effective way to eliminate the backdoor before further remediation steps are taken.

An AI architecture, within program governance, exists to align AI system components and lifecycle processes with business goals and policy constraints. Architecture provides the organizing structure linking strategy, capabilities, processes, data, models, controls, and assurance so that AI outcomes are traceable to business value, risk appetite, and compliance expectations. Efficiency, speed, and threat analysis are important architectural qualities, but they are not the primary purpose; the primary purpose is strategic and governance alignment so that technical choices and controls consistently realize organizational objectives.
References:* AI Security Management™ (AAISM) Body of Knowledge: AI Program Architecture - alignment of capabilities, processes, and controls to business objectives* AI Security Management™ Study Guide: Architecture-driven governance, traceability from business goals to technical and control design

AAISM positions model cards as standardized documentation artifacts that record intended use and out-of-scope use, training/evaluation data characteristics, performance metrics across groups, limitations/risks, and governance controls/owners. Their purpose is transparency and assurance, not automated tuning or synthetic data generation. Visualization (A) may appear within a card, but the core role is structured documentation for governance, risk, and compliance.