Discuss Isaca AAISM Exam Topic 2 Question 3

Which of the following is the MOST important course of action prior to placing an in-house developed AI solution into production?

APerform a privacy, security, and compliance gap analysis

BDeploy a prototype of the solution

CObtain senior management sign-off

DPerform testing, evaluation, validation, and verification

Suggested Answer: D

AAISM lifecycle governance guidance specifies that before any AI solution is moved into production, it must undergo testing, evaluation, validation, and verification to ensure accuracy, resilience, security, and compliance with standards. These steps confirm that the solution performs as expected under varied conditions. Conducting gap analysis is part of compliance checks but comes earlier in design. Management sign-off provides approval but cannot substitute for assurance of technical reliability. Deploying prototypes is a testing method but not the final assurance step. The critical requirement is a complete cycle of testing, validation, and verification.

AAISM Exam Content Outline -- AI Risk Management (Lifecycle Testing and Validation)

AI Security Management Study Guide -- Production Readiness Checks

Get Premium AAISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

31 comments · newest first

Julianna 7 months ago

C is vital. Without sign-off, nothing moves forward.

Kaycee 7 months ago

I lean towards D. Validation is essential for trust.

Gary 8 months ago

A and D together make sense. Can't risk security flaws.

Alline 8 months ago

I feel like D covers everything. Testing is the foundation.

Shonda 8 months ago

C is key too. Senior management needs to be on board.

Daron 8 months ago

Definitely A! Compliance can't be overlooked.

Filiberto 8 months ago

I agree, but A is also important for privacy issues.

Earlean 8 months ago

I think D is crucial. Testing ensures it works as intended.

Suzi 9 months ago

Surprised that people overlook compliance, it's so important!

Geraldine 9 months ago

I think D is more crucial, testing is key!

Cassie 9 months ago

Definitely A, you can't skip on privacy and security!

Argelia 9 months ago

I’m leaning towards A because of the privacy concerns we talked about in class, but I can see why D could also be a strong contender.

Clay 9 months ago

I feel like getting senior management sign-off (C) is essential, but I also recall discussions about the importance of thorough testing.

Adelina 9 months ago

I remember a practice question that emphasized compliance issues, so I feel like A might be the right choice, but I’m torn between that and D.

Shawn 10 months ago

Option C is the way to go. Gotta get the big boss to sign off on it.

Tora 10 months ago

I think option D is really important because testing and validation are crucial before going live, but I’m not entirely sure if it’s the most important step.

Gearldine 10 months ago

Not sure if A is the most important, what about the actual testing?

Matthew 10 months ago

C is a must, management needs to be on board!

Lai 11 months ago

D for sure. Don't want the AI to go all Skynet on us, right?

Pamella 11 months ago

I'd say A is the way to go. Gotta cover your bases on privacy and compliance.

Lou 11 months ago

Definitely go with D. Can't have an AI solution that's a hot mess in production.

Diego 11 months ago

Option D is the most important. Gotta make sure that thing works before putting it out there!

Lajuana 12 months ago

Hmm, I'm leaning towards the privacy, security, and compliance gap analysis. Gotta make sure we're not introducing any major risks or compliance issues before we deploy, right?

Tom 12 months ago

I'd say performing the testing, evaluation, validation, and verification is the way to go. Can't just throw an untested AI solution into production, that could be a disaster waiting to happen.

Buffy 12 months ago

I'm a little unsure on this one. I know testing and validation are super important, but I'm not sure if that's the most crucial step before production. Maybe getting that senior management sign-off would be the safest bet?

Anissa 1 year ago

Okay, let's see. I'm thinking the privacy, security, and compliance gap analysis is probably the most important thing to do first. Gotta make sure we're not putting anything risky out there.

Stefania 1 year ago

Hmm, this is a tricky one. I think I'd start by looking at the options and trying to determine the most critical step before deploying an in-house AI solution.

Dierdre 6 months ago

↳ replying to Stefania

True, but without A, we might face serious issues later on.

Renea 6 months ago

↳ replying to Stefania

C seems necessary too. Senior management needs to be on board.

Pearlie 7 months ago

↳ replying to Stefania

I agree, but D is also really important. Testing can’t be overlooked.

Ludivina 10 months ago

↳ replying to Stefania

I think A is crucial. Privacy and security are top priorities.

Isaca AAISM Exam - Topic 2 Question 3 Discussion