Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca AAISM Exam - Topic 3 Question 13 Discussion

Posted by Merilyn on Apr 07, 2026 at 04:43 PM

Which of the following should be included in an AI acceptable use policy?

Suggested Answer: C

An AI acceptable use policy (AUP) sets the organizational expectations and boundaries for how AI systems may be used by employees and third parties. AAISM guidance places emphasis on ethical and legal compliance standards as core elements of an AUP to govern responsible behavior, prevent misuse, and align with regulatory and organizational principles. While data requirements, collection/storage processes, and monitoring may be covered in adjacent standards and procedures (e.g., data management policies, SOPs, and operational runbooks), the AUP's essential function is to codify permissible use anchored to ethics, legality, and organizational values.


===========

Get Premium AAISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
26 comments · newest first
JE
Jesusa 7 days ago
All options are valid, but C stands out for me.
MA
Mammie 12 days ago
D should be included. Monitoring ensures accountability.
CA
Carissa 17 days ago
I agree with C. Legal compliance is a must!
AN
Andrew 23 days ago
B is important. We need to know how data is handled.
SV
Svetlana 28 days ago
Definitely A too. Training data is key!
JE
Jeannine 1 month ago
I think C is crucial. Ethics matter!
TA
Tawna 1 month ago
I agree with A and C. Transparency is vital!
ER
Erick 1 month ago
All options are valid, but C stands out for me.
AR
Arthur 2 months ago
D is essential for accountability. We need monitoring!
PO
Portia 2 months ago
B should definitely be included. Data handling is key.
LI
Lilli 2 months ago
A is important too. Training data shapes AI.
VE
Vesta 2 months ago
I think C is crucial. Ethics matter!
WA
Wade 2 months ago
Totally agree, all of these should be included!
LA
Lashandra 2 months ago
Wait, are we really considering all these? Sounds complicated.
BR
Brunilda 3 months ago
I think D should be mandatory, we need oversight!
ED
Edelmira 3 months ago
B is super important too, can't overlook that.
KA
Kaitlyn 3 months ago
Definitely need A and C in there!
YV
Yvonne 3 months ago
I’m surprised they don’t mention user privacy more.
SU
Sue 3 months ago
Totally agree with all of these!
CE
Celestina 4 months ago
Wait, why is D even a thing?
KR
Kris 5 months ago
B is super important too!
SA
Salena 5 months ago
Definitely need A and C in there.
IZ
Izetta 6 months ago
I’m a bit confused about the training data requirements. I think it could be important, but I’m not sure if it’s as critical as the others.
MA
Marsha 6 months ago
I feel like we practiced a question similar to this, and monitoring requirements were emphasized. So, D might be key.
BU
Buck 6 months ago
I’m not entirely sure, but I remember something about data collection processes being crucial too. Maybe option B?
GL
Glen 6 months ago
I think we discussed that ethical and legal compliance standards are really important, so I’d lean towards option C.
0/2000 characters

Save Cancel