情報システム監査人は、組織のインシデント管理プログラムがAI関連インシデントへの対応に十分備えられているかを評価しています。監査人が検証すべき最も重要な項目は次のうちどれですか?
正解:C
AI-related incidents often differ significantly from traditional IT incidents due to their dependence on data, model behavior, and algorithm performance. According to the AAIA™ Study Guide, incident management programs must include capabilities specifically tailored to AI, such as detecting and mitigating model drift and safeguarding against data poisoning or integrity attacks.
"AI incident response frameworks must account for issues unique to machine learning, including model drift, adversarial inputs, and data integrity breaches. An effective program incorporates detection, response, and recovery mechanisms for these AI-specific threats." While options A and B contribute to improving incident response over time, and option D suggests best- practice alignment, only option C directly addresses active response capabilities for high-risk, real-time AI vulnerabilities.
Reference: ISACA Advanced in AI Audit™ (AAIA™) Study Guide, Section: "AI Governance and Risk Management," Subsection: "Incident and Risk Management in AI Contexts"