ISACA Certified Artificial Intelligence Auditor (CAIA) — Question 24

When auditing an AI model, an IS auditor notices that the controls over transactional processes are inadequate. Which of the following should the auditor recommend to BEST reduce these risks?

Answer options

• A. Implement model scorecards.
• B. Clearly define responsibilities for AI risk.
• C. Have the chief risk officer (CRO) perform a risk analysis.
• D. Implement human-in-the-loop processes.

Correct answer: D

Explanation

Implementing human-in-the-loop processes allows for human oversight in the decision-making of the AI model, which can significantly reduce errors and risks associated with automated transactions. While the other options may enhance the understanding or measurement of risk, they do not directly provide the immediate oversight that can mitigate risks effectively.