Which of the following should be considered when determining the feasibility of the audit?
Feasibility of the audit depends greatly on the auditee's willingness and cooperation in providing access to documents, staff, systems, and sites.
ISO/IEC 17021-1:2015 Clause 9.1.1 mentions that the audit process feasibility depends on the auditee's willingness to support the audit activities.
Similarly, ISO 19011:2018 Clause 5.4 outlines that: ''Feasibility considerations include the auditee's cooperation and the availability of access to information and personnel.''
===========
A financial institution uses an AI system to approve loan applications. Recently, there have been complaints that the system disproportionately denies loans to applicants from certain minority groups. Which core element should the institution prioritize to address these complaints?
The most relevant core principle here is Fairness and Non-Discrimination. This principle aims to ensure that AI systems do not create or perpetuate bias, especially in high-stakes decision-making areas such as financial services.
According to ISO/IEC 42001:2023 -- Clause 6.1.2 and Annex A (A.8.2.4), organizations must evaluate and manage risks related to bias, discrimination, and ethical implications of AI decisions.
In the PECB Lead Auditor Guide, Fairness is cited as critical in sectors like finance, hiring, healthcare, and where decisions may adversely impact protected groups.
PECB Lead Auditor Guide -- Domain 1: ''Core Principles of Trustworthy AI''
===========
During an audit, the auditor employed data analytic technology to identify anomalies and unusual patterns in the decision-making processes of an AI system used by a financial institution to approve or reject loan applications. Which data analytic technology did the auditor use?
The auditor used Data Mining.
Data mining involves exploring large datasets to identify patterns, anomalies, or relationships.
ISO/IEC 20546:2019 Clause 3.5 defines data mining as: ''The process of discovering patterns, correlations, anomalies, and associations within large datasets.''
In ISO/IEC 42001:2023, auditors are encouraged in Clause 9.2.2 to use appropriate technological tools to analyze AI system behavior, including using big data technologies for pattern recognition during audits.
===========
Which control in Annex A of ISO 42001:2023 focuses on the need for stakeholder engagement in AI system development?
Annex A -- Control A.5.2.2: Stakeholder Consultation explicitly requires organizations to consult with relevant stakeholders (such as users, impacted communities, regulators, etc.) during the development and operation of AI systems.
This control emphasizes the importance of engaging stakeholders to identify expectations, values, ethical concerns, and social impact risks associated with the AI system.
Stakeholder engagement supports transparency, ethical alignment, and social acceptability of AI solutions.
PECB Lead Auditor Guide -- Domain 2: ''Governance and Control Requirements for Ethical AI''
===========
Scenario 4 (continued):
BioNovaPharm, a German biopharmaceutical company, has implemented an artificial intelligence management system AIMS based on ISO/IEC 42001 to optimize various aspects of drug discovery, including analyzing extensive biological data, identifying potential drug candidates, and streamlining clinical trial processes. After having the AIMS in place for over a year, the company contracted a certification body and is now undergoing an AIMS audit to obtain certification against ISO/IEC 42001.
Adopting a risk-based approach, the audit team focused on risk throughout their activities. The level of detail outlined in the audit plan corresponded to the scope and complexity of the audit. The team employed a ranking system for detailed audit procedures, prioritizing those with the highest risk.
Once the stage 1 audit began, the audit team started reviewing the auditee's documented information. To assess whether BioNovaPharm complies with the legal and regulatory requirements related to incident communication, the audit team examined evidence provided by the company's external legal office. The evidence confirmed that BioNovaPharm applies the requirements of the EU Al Act, which mandates that providers of high-risk Al systems report serious incidents to relevant authorities.
Following the completion of the stage 1 audit, John, an audit team member, documented the stage 1 audit outputs, including the observations of the audit team that could result in nonconformities during the on-site audit. However, the audit team leader, Emma, who was overseeing the audit activities, observed that John failed to document significant observations related to the lack of transparency in the Al decision-making processes of BioNovaPharm. Considering that Emma observed John's lack of competence in undertaking some
audit activities, a disciplinary note was recorded for John.
Based on Scenario 4, is the decision of the top management representative not to provide the additional evidence requested by the audit team justifiable?
Verbal evidence alone is considered less reliable.
ISO/IEC 42001 Clause 9.2.2 states that ''auditors shall corroborate interviews with documented information or other tangible evidence whenever possible.''
The ISO 19011:2018 Guidelines for Auditing Management Systems (adopted for auditing principles) Clause 6.5.6 also clearly specifies: ''Interview results should be verified with other forms of evidence because interviews alone are insufficient.''
===========
Brian Thompson
6 days agoStephanie Parker
18 days agoKevin Turner
1 month agoEric Bailey
2 months agoCharles Miller
1 month agoAshley Rodriguez
1 month agoGeorge Gonzalez
2 months agoCharles Thomas
2 months agoDavid Rogers
2 months agoLaurel
2 months agoShayne
3 months agoDesiree
3 months agoSon
3 months agoLouann
3 months agoGladys
4 months agoVashti
4 months agoWilda
4 months agoEstrella
4 months agoCyril
5 months agoFelton
5 months agoKanisha
5 months agoDanica
5 months agoLilli
6 months agoMaybelle
6 months agoLuis
6 months agoCharlesetta
6 months agoDomonique
6 months agoArleen
7 months agoZona
7 months agoFrederic
7 months agoYoulanda
7 months agoWenona
8 months agoHubert
8 months agoSkye
8 months agoDesmond
9 months agoGianna
9 months agoRodolfo
9 months agoVincent
9 months agoAdolph
9 months agoTracie
11 months agoRyan
1 year agoRana
1 year agoCarma
1 year agoFairy
1 year ago