Isaca AAISM Exam - Topic 3 Question 8 Discussion

Actual exam question for Isaca's AAISM exam

Question #: 8
Topic #: 3

[All AAISM Questions]

Which of the following is the GREATEST risk inherent to implementing generative AI?

ALack of employee training

BUnidentified asset vulnerabilities

CInadequate return on investment (ROI)

DPotential intellectual property violations

Show Suggested Answer

Suggested Answer: D

The AAISM framework identifies intellectual property (IP) violations as the most significant inherent risk in deploying generative AI. These systems often rely on large-scale internet data for training, which may inadvertently contain copyrighted or proprietary material. This creates legal and reputational exposure when outputs reproduce or reference protected content. While employee training gaps, asset vulnerabilities, and ROI concerns are relevant risks, they are not inherent to generative models themselves. The greatest inherent risk tied directly to generative AI adoption is the possibility of violating intellectual property rights.

AAISM Study Guide -- AI Risk Management (Generative AI Risks and Legal Exposure)

ISACA AI Security Management -- Copyright and IP Concerns in Generative AI

by Val at Nov 24, 2025, 03:12 PM

Limited Time Offer

25%

Off

Get Premium AAISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dorethea

9 hours ago

I’m not so sure about B) being the greatest. What about the training aspect?

upvoted 0 times

...

Alaine

6 days ago

ROI is important, but I’d say C) is less critical than the others.

upvoted 0 times

...

Fausto

11 days ago

Really? I’m surprised people aren’t worried about D) Potential IP violations.

upvoted 0 times

...

Audrie

16 days ago

I think A) Lack of employee training is the biggest risk. Can't overlook that!

upvoted 0 times

...

Serina

21 days ago

Haha, inadequate ROI? That's the least of my worries with this new AI stuff!

upvoted 0 times

...

Cornell

26 days ago

Lack of employee training is a big one. If people don't know how to use it properly, that could be a disaster.

upvoted 0 times

...

Jacklyn

1 month ago

Potential IP violations are a huge concern. We need to be really careful about that.

upvoted 0 times

...

Gwen

1 month ago

I think the greatest risk is unidentified asset vulnerabilities. You can't protect against what you don't know about.

upvoted 0 times

...

Jesusita

1 month ago

I’m not confident about this, but I feel like inadequate ROI could be a major issue too. If companies invest in AI and don’t see returns, that could really hurt them.

upvoted 0 times

...

Mariann

2 months ago

I’m leaning towards unidentified asset vulnerabilities being the greatest risk. It’s hard to manage what you can’t see, right?

upvoted 0 times

...

Elsa

2 months ago

I remember a practice question that focused on employee training, and I feel like that's also a significant risk. If employees aren't trained, it could lead to a lot of issues.

upvoted 0 times

...

Cristal

2 months ago

Employee training is key. If our team doesn't know how to use this technology properly, we could end up with all kinds of problems. I think that's the biggest risk we need to address.

upvoted 0 times

...

Viva

2 months ago

I think the greatest risk might be potential intellectual property violations, but I'm not entirely sure. It seems like a big concern with AI-generated content.

upvoted 0 times

...

Maddie

2 months ago

I'm leaning towards inadequate ROI. Implementing generative AI can be really expensive, and if we don't see the benefits, it's not going to be worth it. We need to make sure we're getting a good return on our investment.

upvoted 0 times

...

Marguerita

2 months ago

Definitely B) Unidentified asset vulnerabilities. That's a big one!

upvoted 0 times

...

Winfred

3 months ago

ROI matters, but I feel B is more pressing. Security should come first.

upvoted 0 times

...

Trina

3 months ago

A is critical too. Without proper training, employees might misuse the AI.

upvoted 0 times

...

Willard

3 months ago

Hmm, I'm not sure. Intellectual property violations could be a huge issue if we're not careful about how we use this technology. We need to make sure we're not infringing on anyone's rights.

upvoted 0 times

...

Lauran

3 months ago

I think the biggest risk is unidentified asset vulnerabilities. Generative AI can create all kinds of new content, and we need to be really careful about how that could impact our systems and data.

upvoted 0 times

...