Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca AAIA Exam - Topic 3 Question 18 Discussion

Which of the following is MOST important for an IS auditor to consider when identifying AI risk in a know your customer (KYC) application within a banking organization?
D) Business disruption and financial impact
A) Intellectual property leakage and invalidation
B) Benchmarking against peer organizations
C) Incident response plan

Isaca AAIA Exam - Topic 3 Question 18 Discussion

Actual exam question for Isaca's AAIA exam
Question #: 18
Topic #: 3
[All AAIA Questions]

Which of the following is MOST important for an IS auditor to consider when identifying AI risk in a know your customer (KYC) application within a banking organization?

Show Suggested Answer Hide Answer
Suggested Answer: D

In high-stakes financial applications like KYC, the primary concern is the potential business and regulatory impact of an AI error---such as false customer rejection or failure to detect fraudulent accounts. The AAIA Study Guide emphasizes aligning AI risk assessments with business impact and regulatory exposure.

''In financial institutions, the most material risk of AI errors lies in operational disruption and regulatory fines. KYC models must be assessed for how errors can lead to compliance failures or reputational harm.''

Benchmarking (B) supports best practice alignment, and incident response (C) is part of mitigation, but D addresses the most critical consequence of AI risks in banking.


Contribute your Thoughts:

0/2000 characters
D is definitely the most critical factor. Financial impact is huge!
upvoted 0 times
...
Pedro
5 days ago
I lean towards the financial impact being crucial, especially since KYC failures can lead to significant losses, but I could be overthinking it.
upvoted 0 times
...
Twanna
10 days ago
I practiced a question similar to this where incident response was highlighted, but I wonder if it really applies here as the top priority.
upvoted 0 times
...
Cecil
15 days ago
I feel like benchmarking against peer organizations could be relevant, but it seems more like a secondary consideration compared to immediate risks.
upvoted 0 times
...
Keena
2 months ago
I think I remember discussing the importance of business disruption in KYC applications, but I'm not entirely sure if it's the most critical factor.
upvoted 0 times
...

Save Cancel