Isaca AAISM Exam - Topic 3 Question 8 Discussion

Actual exam question for Isaca's AAISM exam

Question #: 8
Topic #: 3

[All AAISM Questions]

Which of the following is the GREATEST risk inherent to implementing generative AI?

ALack of employee training

BUnidentified asset vulnerabilities

CInadequate return on investment (ROI)

DPotential intellectual property violations

Show Suggested Answer

Suggested Answer: D

The AAISM framework identifies intellectual property (IP) violations as the most significant inherent risk in deploying generative AI. These systems often rely on large-scale internet data for training, which may inadvertently contain copyrighted or proprietary material. This creates legal and reputational exposure when outputs reproduce or reference protected content. While employee training gaps, asset vulnerabilities, and ROI concerns are relevant risks, they are not inherent to generative models themselves. The greatest inherent risk tied directly to generative AI adoption is the possibility of violating intellectual property rights.

AAISM Study Guide -- AI Risk Management (Generative AI Risks and Legal Exposure)

ISACA AI Security Management -- Copyright and IP Concerns in Generative AI

by Val at Nov 24, 2025, 03:12 PM

Limited Time Offer

25%

Off

Get Premium AAISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kenda

11 days ago

C is important, but if we can't secure our assets, nothing else matters.

upvoted 0 times

...

Herminia

17 days ago

I lean towards D. The legal implications can be devastating.

upvoted 0 times

...

Cherry

22 days ago

I agree, but D is also a huge concern. Intellectual property violations can ruin a company.

upvoted 0 times

...

Tricia

27 days ago

I think B is the biggest risk. Unidentified vulnerabilities can lead to major issues.

upvoted 0 times

...

Dorethea

2 months ago

I’m not so sure about B) being the greatest. What about the training aspect?

upvoted 0 times

...

Alaine

2 months ago

ROI is important, but I’d say C) is less critical than the others.

upvoted 0 times

...

Fausto

2 months ago

Really? I’m surprised people aren’t worried about D) Potential IP violations.

upvoted 0 times

...

Audrie

2 months ago

I think A) Lack of employee training is the biggest risk. Can't overlook that!

upvoted 0 times

...

Serina

2 months ago

Haha, inadequate ROI? That's the least of my worries with this new AI stuff!

upvoted 0 times

...

Cornell

2 months ago

Lack of employee training is a big one. If people don't know how to use it properly, that could be a disaster.

upvoted 0 times

...

Jacklyn

3 months ago

Potential IP violations are a huge concern. We need to be really careful about that.

upvoted 0 times

...

Gwen

3 months ago

I think the greatest risk is unidentified asset vulnerabilities. You can't protect against what you don't know about.

upvoted 0 times

...

Jesusita

3 months ago

I’m not confident about this, but I feel like inadequate ROI could be a major issue too. If companies invest in AI and don’t see returns, that could really hurt them.

upvoted 0 times

...

Mariann

3 months ago

I’m leaning towards unidentified asset vulnerabilities being the greatest risk. It’s hard to manage what you can’t see, right?

upvoted 0 times

...

Elsa

3 months ago

I remember a practice question that focused on employee training, and I feel like that's also a significant risk. If employees aren't trained, it could lead to a lot of issues.

upvoted 0 times

...

Cristal

3 months ago

Employee training is key. If our team doesn't know how to use this technology properly, we could end up with all kinds of problems. I think that's the biggest risk we need to address.

upvoted 0 times

...

Viva

4 months ago

I think the greatest risk might be potential intellectual property violations, but I'm not entirely sure. It seems like a big concern with AI-generated content.

upvoted 0 times

...

Maddie

4 months ago

I'm leaning towards inadequate ROI. Implementing generative AI can be really expensive, and if we don't see the benefits, it's not going to be worth it. We need to make sure we're getting a good return on our investment.

upvoted 0 times

...

Marguerita

4 months ago

Definitely B) Unidentified asset vulnerabilities. That's a big one!

upvoted 0 times

...

Winfred

4 months ago

ROI matters, but I feel B is more pressing. Security should come first.

upvoted 0 times

...

Trina

4 months ago

A is critical too. Without proper training, employees might misuse the AI.

upvoted 0 times

...

Willard

5 months ago

Hmm, I'm not sure. Intellectual property violations could be a huge issue if we're not careful about how we use this technology. We need to make sure we're not infringing on anyone's rights.

upvoted 0 times

...

Lauran

5 months ago

I think the biggest risk is unidentified asset vulnerabilities. Generative AI can create all kinds of new content, and we need to be really careful about how that could impact our systems and data.

upvoted 0 times

Jesusita

1 day ago

Yes, the potential for data breaches is huge with generative AI.

upvoted 0 times

...

Ryan

6 days ago

I totally agree! Unidentified asset vulnerabilities can lead to major issues.

upvoted 0 times

...