Question 91
A bank is aiming to comply with ISO/IEC 42005:2025, and is studying how to adopt the standard in light of a new AI customer service system that it would like to implement.
In addition to the risk management process the bank already has in place to assess the risks of any potential new systems, which of the following actions is the most effective in adopting the ISO/IEC 42005:2025 standard?
In addition to the risk management process the bank already has in place to assess the risks of any potential new systems, which of the following actions is the most effective in adopting the ISO/IEC 42005:2025 standard?
Question 92
CASE STUDY
A company is considering the procurement of an AI system designed to enhance the security of IT infrastructure. The AI system analyzes how users type on their laptops, including typing speed, rhythm and pressure, to create a unique user profile. This data is then used to authenticate users and ensure that only authorized personnel can access sensitive resources.
The data processed by the AI system would be classified as:
A company is considering the procurement of an AI system designed to enhance the security of IT infrastructure. The AI system analyzes how users type on their laptops, including typing speed, rhythm and pressure, to create a unique user profile. This data is then used to authenticate users and ensure that only authorized personnel can access sensitive resources.
The data processed by the AI system would be classified as:
Question 93
What is the primary objective of continuous monitoring in the lifecycle of an AI tool?
Question 94
According to the GDPR, an individual has the right to have a human confirm or replace an automated decision unless that automated decision:
Question 95
CASE STUDY
A global marketing agency is adapting a large language model ("LLM") to generate content for an upcoming marketing campaign for a client's new product: a hard hat designed for construction workers of any gender to better protect them from head injuries.
The marketing agency is accessing the LLM through an application programming interface ("API")developed by a third-party technology company. They want to generate text to be used for targeted advertising communications that highlight the benefits of the hard hat to potential purchasers. Both the marketing agency and the technology company have taken reasonable steps to address Al governance.
The marketing company has:
* Entered into a contract with the technology company with suitable representations and warranties.
* Completed an impact assessment on the LLM for this intended use.
* Built technical guidance on how to measure and mitigate bias in the LLM.
* Enabled technical aspects of transparency, explainability, robustness and privacy.
* Followed applicable regulatory requirements.
* Created specific legal statements and disclosures regarding the use of the Al on its client's advertising.
The technology company has:
* Provided guidance and resources to developers to address environmental concerns.
* Build technical guidance on how to measure and mitigate bias in the LLM.
* Provided tools and resources to measure bias specific to the LLM.
* Enabled technical aspects of transparency, explainability, robustness and privacy.
* Mapped and mitigated potential societal harms and large-scale impacts.
* Followed applicable regulatory requirements and industry standards.
* Created specific legal statements and disclosures regarding the LLM. including with respect to IP and rights to data.
The agency has taken governance actions such as:
* Conducting an impact assessment
* Providing legal disclosures
* Enabling bias mitigation and explainability
* Complying with regulatory requirements
Which of the following should be included in the marketing company's disclosures about the use of the LLM EXCEPT?
A global marketing agency is adapting a large language model ("LLM") to generate content for an upcoming marketing campaign for a client's new product: a hard hat designed for construction workers of any gender to better protect them from head injuries.
The marketing agency is accessing the LLM through an application programming interface ("API")developed by a third-party technology company. They want to generate text to be used for targeted advertising communications that highlight the benefits of the hard hat to potential purchasers. Both the marketing agency and the technology company have taken reasonable steps to address Al governance.
The marketing company has:
* Entered into a contract with the technology company with suitable representations and warranties.
* Completed an impact assessment on the LLM for this intended use.
* Built technical guidance on how to measure and mitigate bias in the LLM.
* Enabled technical aspects of transparency, explainability, robustness and privacy.
* Followed applicable regulatory requirements.
* Created specific legal statements and disclosures regarding the use of the Al on its client's advertising.
The technology company has:
* Provided guidance and resources to developers to address environmental concerns.
* Build technical guidance on how to measure and mitigate bias in the LLM.
* Provided tools and resources to measure bias specific to the LLM.
* Enabled technical aspects of transparency, explainability, robustness and privacy.
* Mapped and mitigated potential societal harms and large-scale impacts.
* Followed applicable regulatory requirements and industry standards.
* Created specific legal statements and disclosures regarding the LLM. including with respect to IP and rights to data.
The agency has taken governance actions such as:
* Conducting an impact assessment
* Providing legal disclosures
* Enabling bias mitigation and explainability
* Complying with regulatory requirements
Which of the following should be included in the marketing company's disclosures about the use of the LLM EXCEPT?