Isaca AAISM Exam - Topic 3 Question 12 Discussion

Actual exam question for Isaca's AAISM exam

Question #: 12
Topic #: 3

A financial organization relies on AI-based identity verification and fraud detection services. Which of the following BEST integrates AI security risk into the business continuity plan (BCP)?

AUsing explainable AI to document decision paths

BPeriodic retraining using pre-labeled data

CIncluding AI model supporting infrastructure in disaster recovery scenarios

DDuplicating AI microservices across multiple availability zones

Show Suggested Answer

Suggested Answer: C

AAISM stresses that AI systems and their supporting infrastructure must be explicitly included in disaster recovery and continuity planning, since disruptions to models, feature stores, or pipelines can halt critical business functions.

Explainability (A) and retraining (B) are operational improvements, not continuity mechanisms. Multi-zone redundancy (D) improves availability but does not represent complete BCP integration.

=============================================

by Bok at Apr 05, 2026, 08:14 AM

Limited Time Offer

25%

Off

Get Premium AAISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Milly

4 days ago

Duplicating AI microservices sounds like a solid strategy, but I wonder if it really addresses the security risks effectively.

upvoted 0 times

...

Markus

9 days ago

I remember a practice question about disaster recovery, and I feel like including AI model infrastructure in those scenarios could be crucial.

upvoted 0 times

...

Daniel

14 days ago

I think using explainable AI to document decision paths is important, but I'm not sure if it's the best for integrating AI security risk into the BCP.

upvoted 0 times

...