Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca AAIA Exam - Topic 3 Question 21 Discussion

The internal audit department of a large global organization is evaluating the use of an AI-based voice-to-speech tool to document interviews during audits. The tool uploads all recordings to a cloud service provider for transcription. Which of the following is the GREATEST risk?
A) Unauthorized access to sensitive data by the cloud vendor
B) Privacy concerns arising from data storage in the cloud
C) Potential data loss resulting from service downtime or failures
D) Inaccurate transcriptions impacting reliability of audit records

Isaca AAIA Exam - Topic 3 Question 21 Discussion

Actual exam question for Isaca's AAIA exam
Question #: 21
Topic #: 3
[All AAIA Questions]

The internal audit department of a large global organization is evaluating the use of an AI-based voice-to-speech tool to document interviews during audits. The tool uploads all recordings to a cloud service provider for transcription. Which of the following is the GREATEST risk?

Show Suggested Answer Hide Answer
Suggested Answer: A

Audit interviews often contain highly sensitive, proprietary, or even non-public information. Uploading these recordings to a cloud provider introduces the 'Risk of unauthorized access' by the vendor's employees or through a security breach at the vendor's site. According to ISACA, the loss of 'Confidentiality' over audit workpapers is a critical failure of professional standards. While inaccurate transcriptions (Option D) are a nuisance, they can be corrected by the auditor; however, once sensitive data is compromised by a third party, the damage is irreversible. Auditors must ensure the vendor has rigorous 'encryption' and 'at-rest' security attestations.


Contribute your Thoughts:

0/2000 characters
I lean towards unauthorized access being the greatest risk, but I guess it depends on how the vendor manages security.
upvoted 0 times
...
Mose
5 days ago
I practiced a similar question where data loss was highlighted, but I feel like inaccurate transcriptions could really undermine the audit's integrity.
upvoted 0 times
...
Benton
10 days ago
I’m not sure, but I think privacy concerns could be a major factor too, especially with sensitive data involved.
upvoted 0 times
...
Hyun
15 days ago
I remember we discussed the risks of cloud storage in class, and unauthorized access seems like a big issue.
upvoted 0 times
...

Save Cancel